Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323032.roa
File:                     34352e3139312e3230342e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier:          QnTVHeDLnRydcay3rHzh/z6pluKowKai/IDqtvjXZ+o=
Subject key identifier:   66:6F:04:E5:32:B3:21:0F:99:ED:B2:77:50:93:57:DC:BB:B4:2C:AB
Certificate issuer:       /CN=EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D
Certificate serial:       60D7A0E52350634AF53B5D2AE4519F7D2B22D339
Authority key identifier: EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323032.roa
Signing time:             Wed 29 Nov 2023 10:55:35 +0000
ROA not before:           Wed 29 Nov 2023 10:50:35 +0000
ROA not after:            Wed 27 Nov 2024 10:55:35 +0000
asID:                     202
IP address blocks:        45.191.204.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d7:a0:e5:23:50:63:4a:f5:3b:5d:2a:e4:51:9f:7d:2b:22:d3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D
        Validity
            Not Before: Nov 29 10:50:35 2023 GMT
            Not After : Nov 27 10:55:35 2024 GMT
        Subject: CN=666F04E532B3210F99EDB277509357DCBBB42CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:51:18:da:0a:1b:1d:c6:50:de:23:77:11:
                    16:6b:97:01:f4:24:39:1e:da:d0:b5:c2:d4:da:3c:
                    3b:65:dd:12:6a:95:b7:6e:a8:76:3e:42:1d:68:37:
                    11:cf:5c:70:75:8f:63:fd:d8:bd:1f:b1:c1:89:c2:
                    1c:7e:4e:96:a4:d8:bc:b9:f1:4b:d6:86:40:79:f1:
                    62:f3:88:5b:22:fd:ca:ed:f9:b0:a1:7a:dc:aa:1b:
                    c0:e6:4a:84:cc:6a:f1:9f:8a:48:9b:8f:84:0a:62:
                    d0:b7:f1:79:43:ce:9a:b0:5d:5b:33:a5:f0:80:92:
                    64:71:a8:50:5e:11:5a:8a:61:3c:f5:7c:b4:ea:63:
                    9c:c7:01:04:eb:d5:fd:e8:ee:c9:80:a2:d6:07:c3:
                    ff:0e:1c:a2:d5:1e:23:93:af:87:60:c8:ed:f5:89:
                    08:5b:46:37:08:a3:a4:02:5d:45:30:3b:b3:09:c7:
                    b6:48:40:c3:4b:75:82:30:80:b6:6f:89:ef:ca:a5:
                    7a:14:07:8e:e6:37:71:a5:eb:d0:07:ec:84:e0:46:
                    ad:7f:70:67:a5:49:38:c1:ed:5d:cb:4e:be:30:fc:
                    e3:ca:4c:9f:ad:a4:0f:a8:10:86:ad:fb:d1:2c:ea:
                    fe:56:ab:af:cf:9a:3f:34:7e:ec:5a:5c:94:c8:ca:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6F:04:E5:32:B3:21:0F:99:ED:B2:77:50:93:57:DC:BB:B4:2C:AB
            X509v3 Authority Key Identifier:
                keyid:EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:1e:a3:cf:0f:75:e9:24:fb:54:2c:77:68:42:c8:7d:eb:05:
         9c:56:b7:e3:ff:d1:f3:83:74:97:ce:8c:21:44:4b:ca:dd:eb:
         76:f4:ae:e3:10:0f:8f:66:fa:a9:fe:5d:1f:26:7a:6c:a5:e2:
         16:ee:c2:87:e9:77:91:2e:3b:44:e0:ab:34:64:5c:87:5a:22:
         fc:dc:c5:ef:8d:5c:e6:65:8b:f3:bb:5e:51:ac:4b:eb:17:b6:
         61:76:b9:0e:6a:21:22:b0:78:59:89:52:18:f5:41:5f:a2:be:
         d0:6f:1c:ab:34:fb:88:6a:98:5f:aa:b5:38:7d:07:34:7e:aa:
         27:0d:ac:32:84:ad:a9:0a:e8:f2:82:55:1c:8b:9e:5a:33:1d:
         f1:d8:4b:c8:1c:68:4c:05:46:f6:ba:b5:66:77:6a:fe:bd:bf:
         1e:14:a7:c7:96:da:3d:41:4d:ab:64:ff:40:87:62:36:8b:48:
         6f:df:1a:ef:01:93:57:e4:cc:6e:5a:da:31:ca:5a:bf:b6:72:
         87:30:e5:87:fe:fb:07:94:a3:b6:71:7a:45:cf:a3:f8:97:1a:
         51:2c:e5:2c:8e:f8:cb:e4:e7:33:42:3e:24:76:53:5e:3f:62:
         41:86:1f:b7:d3:3c:17:56:a1:42:52:55:82:e2:3b:3f:93:43:
         a5:57:6a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:31 2025 by rpki-client