Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39332e302f32342d3234203d3e20323637343130.roa
File:                     34352e3233352e39332e302f32342d3234203d3e20323637343130.roa (raw, json)
Hash identifier:          Fa85jA5DU/wIkt0B9EFiV16OZ/1n57IfI8Havg+ERaQ=
Subject key identifier:   75:10:A2:2D:9E:84:48:65:D4:18:B4:85:9E:5F:97:EC:ED:04:35:89
Certificate issuer:       /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Certificate serial:       01E53E3EEFEE617BB076A3A954B80910F0ED84F6
Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39332e302f32342d3234203d3e20323637343130.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     267410
IP address blocks:        45.235.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e5:3e:3e:ef:ee:61:7b:b0:76:a3:a9:54:b8:09:10:f0:ed:84:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject: CN=7510A22D9E844865D418B4859E5F97ECED043589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:e5:05:59:b2:ef:40:47:5c:c8:e2:30:27:
                    96:9e:21:c7:ba:64:33:61:fb:a1:6b:9b:5a:b6:2d:
                    80:02:70:73:dc:46:5c:31:14:3c:c5:e5:33:09:19:
                    68:4a:5d:62:56:a9:d2:a6:3a:2d:ff:93:7e:c1:15:
                    e1:ff:52:29:a3:fe:cf:a8:01:0e:be:ab:e7:7c:d7:
                    93:8b:c8:d3:88:d4:ce:33:ef:70:44:9a:f2:99:a0:
                    68:fc:30:0a:55:92:73:a1:4c:8c:42:c6:e2:df:99:
                    c0:ef:c0:ce:39:e8:44:c4:e4:53:c6:59:bd:e8:92:
                    9e:1f:ec:05:ad:dc:29:6a:9e:f0:13:00:12:7e:49:
                    45:f4:21:f8:40:e5:76:4f:62:72:9b:73:9b:57:4b:
                    21:97:75:78:91:02:2e:96:a6:c5:e8:26:f6:08:c1:
                    1f:d4:05:96:07:67:b5:94:84:dc:43:d4:a5:58:8e:
                    c9:ba:cd:6a:05:5f:4a:bc:28:90:f9:81:f1:d8:50:
                    1a:14:1d:54:db:5e:0d:3a:07:1b:ae:92:f7:af:a7:
                    55:d2:e6:43:97:09:a7:e3:9f:4c:f6:ef:e5:2a:2a:
                    6d:67:a2:2b:33:ea:f4:c5:0f:d6:a3:6c:8c:b0:da:
                    c3:2a:82:10:77:3d:c4:08:b2:a7:1a:e1:8a:ec:ac:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:10:A2:2D:9E:84:48:65:D4:18:B4:85:9E:5F:97:EC:ED:04:35:89
            X509v3 Authority Key Identifier:
                keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39332e302f32342d3234203d3e20323637343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:8d:d2:e6:c2:ff:f7:38:bf:f0:67:8c:c2:8d:d2:b6:d9:5d:
         b5:e2:da:3c:fb:b2:e3:b1:d3:0c:12:b6:09:7e:ce:a3:8d:80:
         e5:48:b8:0c:a4:62:65:39:ca:62:a0:56:82:ae:71:a0:e2:fd:
         41:5d:49:c5:e2:1b:88:c3:50:fc:ca:99:12:fd:1f:d5:6e:ab:
         8f:15:56:1f:0e:b5:09:e5:18:bc:d2:cf:89:25:25:ac:bc:7c:
         9e:15:4d:52:bf:bd:fe:cb:14:79:c6:b0:b4:a0:bb:1a:d6:17:
         06:62:3a:79:90:5f:c4:67:8e:05:3a:7d:33:82:d2:3a:6f:ca:
         61:29:4a:48:f2:2c:10:d4:a8:95:f9:77:78:a9:dc:46:31:fa:
         39:5e:ac:06:38:1e:9f:ab:01:56:73:dd:6e:d4:d7:2d:91:fd:
         01:60:6f:07:87:47:ea:48:6c:ad:e5:c4:ed:f0:c0:04:f4:ca:
         fb:5f:aa:2c:fb:41:55:d9:dd:a1:fc:48:f3:a6:ce:fc:22:37:
         28:40:dc:3b:b7:0c:d3:fe:82:e7:13:89:32:42:13:74:6e:c0:
         11:82:11:50:83:a7:51:41:6e:c3:e0:80:96:d4:19:85:5e:98:
         96:4a:3a:c7:74:32:d5:01:67:5e:ed:3f:68:0e:ee:75:ac:ea:
         de:21:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:22:34 2025 by rpki-client