Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/34352e3233362e3230342e302f32342d3234203d3e20323638323435.roa
File:                     34352e3233362e3230342e302f32342d3234203d3e20323638323435.roa (raw, json)
Hash identifier:          Us2vYMkOy68wuIIycNz8OFTS2Z7s1/7P7GNsBkNzPuw=
Subject key identifier:   53:64:DD:60:6D:5A:40:0D:CE:86:9B:C7:E7:1C:70:1C:BC:8B:B3:DC
Certificate issuer:       /CN=59C244038ED88595EC22E2B1EA066AE712A58F17
Certificate serial:       66DF49A5D01F3998B26DC26E240FB9BC9F9627E6
Authority key identifier: 59:C2:44:03:8E:D8:85:95:EC:22:E2:B1:EA:06:6A:E7:12:A5:8F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59C244038ED88595EC22E2B1EA066AE712A58F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/34352e3233362e3230342e302f32342d3234203d3e20323638323435.roa
Signing time:             Thu 06 Mar 2025 06:33:34 +0000
ROA not before:           Thu 06 Mar 2025 06:28:34 +0000
ROA not after:            Thu 05 Mar 2026 06:33:34 +0000
asID:                     268245
IP address blocks:        45.236.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:df:49:a5:d0:1f:39:98:b2:6d:c2:6e:24:0f:b9:bc:9f:96:27:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59C244038ED88595EC22E2B1EA066AE712A58F17
        Validity
            Not Before: Mar  6 06:28:34 2025 GMT
            Not After : Mar  5 06:33:34 2026 GMT
        Subject: CN=5364DD606D5A400DCE869BC7E71C701CBC8BB3DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:b9:f1:82:67:2e:88:35:d1:74:62:c7:9e:
                    8d:c9:ae:09:e8:74:0b:76:cc:2c:a7:a6:77:5f:3b:
                    6e:0e:bf:7a:cb:16:ad:9f:ab:9e:73:03:1e:a4:d5:
                    6e:11:34:82:eb:4e:6f:76:53:b6:63:ea:85:9d:a8:
                    24:69:95:8e:da:a5:1c:7a:a5:3d:32:44:00:45:06:
                    79:ab:e2:a9:b0:0e:4a:03:e0:7d:9b:ec:07:54:1b:
                    ab:d1:f7:b7:26:df:ec:53:8a:03:7b:e3:7c:22:94:
                    a4:48:3b:e9:28:5b:29:1d:de:43:5f:5a:a2:e9:3e:
                    8a:64:b0:13:83:52:4c:ec:a2:db:44:34:41:ad:2f:
                    77:ec:c5:50:c2:4d:64:3a:78:9a:1b:1f:59:12:82:
                    d8:1c:f3:72:0a:09:0d:db:ca:42:56:ab:44:12:4d:
                    8d:eb:46:8c:3d:ae:f0:ea:f7:ca:e7:88:4d:3d:22:
                    e0:09:9e:b2:1e:ba:fd:7b:f7:0b:24:8f:91:15:f8:
                    e4:c4:6c:75:82:d0:b4:93:70:11:6a:9c:c0:00:1e:
                    a8:78:ad:53:a8:a1:67:bd:18:2a:00:2d:c0:f8:15:
                    ad:88:f8:9a:fe:2a:d2:04:0c:d2:55:39:f0:bf:e8:
                    36:e0:25:a0:f4:6a:fd:3a:ed:8e:17:1b:36:c0:7f:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:64:DD:60:6D:5A:40:0D:CE:86:9B:C7:E7:1C:70:1C:BC:8B:B3:DC
            X509v3 Authority Key Identifier:
                keyid:59:C2:44:03:8E:D8:85:95:EC:22:E2:B1:EA:06:6A:E7:12:A5:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/59C244038ED88595EC22E2B1EA066AE712A58F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59C244038ED88595EC22E2B1EA066AE712A58F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/34352e3233362e3230342e302f32342d3234203d3e20323638323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:a5:84:b5:f9:38:3e:52:3c:9b:65:8a:88:1e:40:76:e4:
         40:09:1e:da:bc:37:6b:e2:f6:b2:c2:1f:b9:2d:67:6e:25:da:
         fe:e5:0a:ec:80:a7:ae:49:7e:0c:15:cf:3f:4a:d1:f2:d0:87:
         e0:c2:c5:96:e6:53:48:77:c8:90:00:95:b9:12:9f:11:c3:5c:
         9f:7e:3e:80:4d:8f:99:7a:0f:39:67:27:9f:7a:f2:16:29:92:
         bc:21:da:ea:67:6f:cf:64:e3:f6:e6:55:80:cd:54:bf:6f:b3:
         ba:bb:36:eb:d6:f6:65:8b:75:8a:26:3c:50:03:36:e0:18:52:
         9e:dd:d4:90:19:f0:0c:07:19:2f:cd:87:e7:9e:8b:d6:2a:e5:
         27:39:7d:f9:ca:b2:49:1f:24:ed:02:f5:6f:e5:56:71:42:7b:
         c1:d9:f4:b1:98:7f:8f:6c:9b:28:22:ce:d9:5c:dc:c1:9a:ad:
         d8:51:7a:3c:d8:a3:84:7e:eb:c2:2e:21:35:20:72:6a:a5:20:
         a0:1d:a9:e8:96:21:b4:33:92:df:a7:01:7c:0e:45:ff:0c:60:
         a2:ec:fd:c1:f0:99:61:a7:79:78:da:c2:68:94:c3:6d:b1:31:
         bf:4a:a6:ac:65:42:2e:a2:f9:37:6c:15:2d:e5:92:f5:9e:12:
         b4:aa:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:26:37 2025 by rpki-client