Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e322e302f32342d3234203d3e20323632383735.roa
File:                     34352e362e322e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          vJFPW/FrVDiW7uXwzh6LdJN1tJ2+Snwtg5KqlygIOAM=
Subject key identifier:   A4:BC:32:04:BD:43:E2:05:B2:F1:1C:D5:10:72:22:C1:6E:1D:4E:72
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       05CCE2E28F8C96C16E4B142EBB23D1CCDD4D7A43
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e322e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 12:58:48 +0000
ROA not before:           Thu 02 Jan 2025 12:53:48 +0000
ROA not after:            Thu 01 Jan 2026 12:58:48 +0000
asID:                     262875
IP address blocks:        45.6.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cc:e2:e2:8f:8c:96:c1:6e:4b:14:2e:bb:23:d1:cc:dd:4d:7a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:53:48 2025 GMT
            Not After : Jan  1 12:58:48 2026 GMT
        Subject: CN=A4BC3204BD43E205B2F11CD5107222C16E1D4E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:22:c4:d0:7a:ce:6e:e3:a9:cd:92:33:17:
                    a5:d9:5b:ae:10:16:be:83:12:a1:2d:46:7d:4c:00:
                    6c:3c:1e:66:e1:12:98:22:6f:cb:eb:97:48:d5:8e:
                    e4:39:2d:51:3e:7e:09:dc:82:0d:81:00:11:90:31:
                    f6:aa:fc:43:a0:a8:35:88:cf:c0:f5:9d:1f:ae:49:
                    60:4c:ca:58:98:b0:dd:ac:24:12:e2:c9:84:9f:c7:
                    1f:3e:7c:b6:2e:36:00:17:f9:79:c6:34:ba:6a:b8:
                    a1:b5:e3:90:cb:33:9d:b3:51:29:7b:69:8f:58:ed:
                    65:52:35:ff:89:d7:a3:df:86:3d:c8:d8:40:b6:fb:
                    af:3f:7b:55:ca:49:12:9e:82:8b:0c:2b:eb:54:30:
                    0e:3f:71:07:64:e0:b3:ec:2e:36:be:f1:91:db:75:
                    70:e9:f9:15:6e:50:52:a3:e9:af:49:5e:40:fc:45:
                    fb:64:f2:3a:e1:87:e3:ef:00:d5:66:44:e5:59:e0:
                    e8:ec:a6:39:91:f3:c3:df:a2:e4:89:87:30:bd:2c:
                    c8:88:09:c3:16:0b:a9:e4:15:d9:8b:0d:b8:a5:d8:
                    a3:32:4d:c0:2a:ef:29:b2:06:e3:c6:bf:8c:0b:a3:
                    10:af:8f:c9:ab:72:6e:e9:65:22:e2:54:bf:8a:d8:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BC:32:04:BD:43:E2:05:B2:F1:1C:D5:10:72:22:C1:6E:1D:4E:72
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e322e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:be:18:44:a5:8e:56:ef:8c:4c:bb:fd:07:70:d5:80:92:83:
         61:d5:c1:c1:5e:2a:2c:a8:91:fb:ae:cb:21:d7:8d:86:1c:07:
         23:2b:fd:9e:fe:48:db:bd:ff:67:47:b8:a7:fa:35:a5:ec:e0:
         f9:3c:ea:f3:7b:44:5d:cb:b3:c4:07:f2:ec:d0:7e:b8:59:04:
         27:d4:85:c5:90:05:47:48:3f:dc:29:31:4a:70:df:04:f7:7e:
         5b:04:35:33:81:5b:a3:da:7a:03:b7:6e:c4:fa:ca:97:6e:a8:
         af:a6:ea:22:dc:5e:e9:1d:77:d6:20:82:40:9b:e0:09:36:4b:
         d6:03:e6:ca:db:d0:98:a6:a0:ed:73:e0:64:c0:69:22:0a:80:
         8d:8b:df:d9:c9:36:d9:3f:2a:fc:af:e3:a6:85:a6:47:b0:cf:
         23:68:ed:33:9e:b4:84:1d:b7:4b:62:93:2a:ab:65:94:83:2f:
         96:d1:4c:9b:e2:16:a5:31:18:3a:bf:14:af:e5:f8:00:14:c0:
         64:ba:3b:5c:b3:e1:85:f4:1c:07:95:47:88:d6:58:27:ed:1f:
         04:73:bf:dc:b7:3a:b8:c8:7b:63:91:c7:db:2f:5b:4b:d6:53:
         0c:4c:29:05:18:d1:34:b0:40:c9:ad:cb:4c:3d:c9:23:9e:f4:
         9b:67:3f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:48:09 2025 by rpki-client