Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32332d3233203d3e20323637343130.roa
File:                     34352e3233352e39322e302f32332d3233203d3e20323637343130.roa (raw, json)
Hash identifier:          pqpYz/gr40hJx5mnqTxuIdlhLrLApOl7y0T3ugId9lU=
Subject key identifier:   E5:26:87:01:6B:CA:F1:BB:B3:50:D1:4B:A7:40:33:A8:22:93:89:95
Certificate issuer:       /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Certificate serial:       4449D96782F8B77364D487B587D6313EE5719853
Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32332d3233203d3e20323637343130.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     267410
IP address blocks:        45.235.92.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:49:d9:67:82:f8:b7:73:64:d4:87:b5:87:d6:31:3e:e5:71:98:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=E52687016BCAF1BBB350D14BA74033A822938995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:a9:6a:3a:4d:e5:30:a9:7f:94:af:3a:02:
                    e2:10:16:48:f5:cd:41:9a:bb:fc:d0:e1:7e:9b:14:
                    f2:f1:b7:9e:7f:49:0e:42:34:da:04:42:6d:43:cf:
                    97:fd:55:c6:75:65:bd:8e:1e:73:96:b8:9a:ce:71:
                    1b:e3:76:d5:4e:89:20:6a:dc:47:e5:95:9f:28:5b:
                    9f:f5:b6:09:df:0c:2a:30:83:b9:84:c6:2b:d8:59:
                    e5:93:9b:32:7e:bf:76:18:bf:6a:5b:2b:a0:e3:a0:
                    2c:df:dc:91:8b:de:98:06:7b:77:e4:5c:75:cd:62:
                    e1:e0:5d:38:0b:b9:dc:d5:a0:8a:ec:53:08:37:16:
                    ac:33:1d:2c:c1:bc:e4:92:67:3d:44:1a:69:73:ba:
                    65:df:0c:2a:53:12:eb:ad:df:ba:0c:76:f0:ab:cc:
                    74:94:81:1d:9c:f9:94:9d:48:68:b9:d0:29:f5:dd:
                    5f:2e:46:54:0c:b1:ea:d7:b8:38:98:53:5e:ec:12:
                    1e:a2:a8:bd:db:15:1b:a4:36:5e:ae:10:f3:1c:01:
                    b9:84:d0:72:63:e9:dd:cd:71:31:51:b8:ec:3c:45:
                    e5:8e:ba:39:d2:1e:a3:06:eb:9a:d9:d4:9d:0d:27:
                    89:78:56:b0:02:fd:95:e4:8b:0c:8a:de:ab:9a:45:
                    3b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:26:87:01:6B:CA:F1:BB:B3:50:D1:4B:A7:40:33:A8:22:93:89:95
            X509v3 Authority Key Identifier:
                keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32332d3233203d3e20323637343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:42:cd:39:29:98:c9:7d:ab:81:09:05:c7:5e:09:47:fc:29:
         70:c5:1d:4c:7a:9e:b4:f6:e5:9c:ea:e3:62:a4:bf:96:8d:98:
         d7:f1:8c:e2:5b:56:ea:78:f7:0e:48:af:ff:4f:ab:fb:63:f0:
         a2:e5:63:0a:3c:e4:bf:ea:d5:0a:bf:89:a5:21:6e:14:a1:ed:
         6b:35:23:0d:1f:66:fd:11:03:5f:1a:0f:df:f1:d6:aa:b1:f9:
         29:16:30:35:73:1c:00:2c:3f:ed:c2:52:58:f3:cb:c0:a8:d4:
         31:1a:f2:01:b7:41:99:d5:2c:39:d0:a1:a0:9a:30:8c:6c:ae:
         5c:9f:99:09:7f:33:05:8b:b7:03:b7:04:4d:80:e3:b5:4b:ac:
         94:ff:84:bb:e9:82:2c:b8:bf:b6:fd:e5:f6:50:4d:84:9c:a4:
         78:f2:dc:5c:77:03:81:62:9a:46:7e:94:f4:92:c6:4c:d7:8c:
         a3:bb:d5:bc:d5:e3:4e:3b:43:ac:b5:0e:2c:e1:4e:26:00:5a:
         08:b4:10:4e:99:df:ad:8e:fc:8a:46:23:c5:e4:1c:00:f9:7c:
         35:83:50:df:a3:f5:99:8a:05:bb:d9:92:f5:10:84:58:89:cf:
         e4:fc:33:0e:0e:8d:09:12:50:53:2b:06:b5:05:8a:b3:e7:26:
         73:3b:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:51:12 2025 by rpki-client