Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39342e302f32342d3234203d3e20323637343130.roa
File:                     34352e3233352e39342e302f32342d3234203d3e20323637343130.roa (raw, json)
Hash identifier:          AiNcVQFfZgWd8dGCw2ko8vwv9luVzGDu+wktLGEeGVo=
Subject key identifier:   AC:39:67:F6:02:5D:78:E3:5D:D8:CF:DB:D1:86:96:41:1E:C5:80:0B
Certificate issuer:       /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Certificate serial:       0169417F2F5B2BC716E768BAA463B1D97ADF85C5
Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39342e302f32342d3234203d3e20323637343130.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     267410
IP address blocks:        45.235.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:69:41:7f:2f:5b:2b:c7:16:e7:68:ba:a4:63:b1:d9:7a:df:85:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=AC3967F6025D78E35DD8CFDBD18696411EC5800B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:de:d5:cf:5b:64:a9:44:84:61:d8:ec:77:
                    32:14:f4:3a:b2:e3:8d:25:95:a4:8d:5a:92:f4:0d:
                    3e:07:cd:ad:3f:70:d8:bc:38:78:36:59:26:61:1c:
                    72:9b:84:9c:22:f7:58:74:c4:11:45:1e:3b:b2:34:
                    05:55:63:43:7e:29:f0:be:bf:12:b6:1d:b6:79:b5:
                    e7:0c:38:97:06:e6:03:07:73:f5:70:31:50:d4:bf:
                    37:d0:99:1d:5d:6f:bd:76:b8:70:94:7a:a0:71:eb:
                    07:b5:68:69:5d:ba:b0:a5:9c:90:c4:a3:61:47:43:
                    a2:7f:c8:13:0d:77:36:f0:52:e9:f3:ac:d9:33:b5:
                    5a:f5:ee:61:53:2a:1d:45:85:fa:f6:45:fe:f6:aa:
                    13:c0:75:ea:27:2e:00:e9:75:05:ee:1f:32:63:b0:
                    73:ee:94:5f:d5:06:c0:f3:90:28:4f:2c:4b:df:9a:
                    59:ad:24:4a:25:3b:83:a0:16:5f:aa:37:32:c8:74:
                    1e:48:ac:86:bd:ac:98:5b:58:39:a8:59:ac:fc:23:
                    81:ee:7c:7e:f7:12:f4:a8:78:df:ff:d6:14:6a:16:
                    9e:82:4f:ee:2d:f2:26:a4:c0:e5:75:fc:7c:73:29:
                    9e:08:d8:a1:00:99:db:c8:56:1a:7d:9e:ff:f8:89:
                    9d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:39:67:F6:02:5D:78:E3:5D:D8:CF:DB:D1:86:96:41:1E:C5:80:0B
            X509v3 Authority Key Identifier:
                keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39342e302f32342d3234203d3e20323637343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:2a:19:47:2e:4e:cf:3e:bf:aa:d2:37:19:57:27:57:63:ae:
         8b:5d:39:73:0c:42:43:67:7e:e2:c1:84:5e:db:ee:2c:43:6c:
         6b:eb:d3:1a:3c:29:69:ba:49:f4:fb:0a:2c:64:48:8f:c7:10:
         e3:d4:19:4f:01:47:bd:24:1f:00:5f:6d:c3:06:3a:cd:52:1a:
         e8:07:e2:44:35:46:fc:3b:fc:6a:ad:5b:d3:fd:77:d9:f7:ba:
         06:24:97:c7:b1:fd:48:88:a7:40:a2:5d:15:8f:9c:08:af:97:
         7e:87:26:2c:57:bd:5a:16:88:40:9e:1c:ee:1d:a8:21:ca:5d:
         7a:e3:73:0f:c1:42:75:ec:42:3e:e0:4d:01:82:c0:e9:f2:08:
         7e:ab:ab:05:ed:cf:52:ba:fe:45:24:b4:b7:59:0b:7d:76:30:
         15:2a:42:4f:60:7d:bf:27:c5:25:fe:11:8d:a6:70:ce:b6:4a:
         77:ea:84:35:24:c0:54:c1:47:0f:8a:5c:d6:b7:8f:e9:27:c4:
         38:52:c5:78:b6:30:cb:31:1f:bc:cd:9a:ba:b7:3e:84:48:27:
         fe:67:45:41:11:f3:12:de:b5:4f:67:35:06:09:1f:89:83:a5:
         48:2c:c0:a7:33:8e:66:54:4a:b7:5c:3e:a7:98:3f:3e:e3:4d:
         fb:d3:a3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:46:48 2025 by rpki-client