Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/34352e3232372e35362e302f32322d3234203d3e20323637303136.roa
File:                     34352e3232372e35362e302f32322d3234203d3e20323637303136.roa (raw, json)
Hash identifier:          VgcCYG56z/Tzllr+hJs2+izAexetfYc6BkMsj0tZuY0=
Subject key identifier:   D5:F3:AA:8C:12:90:E0:3A:E3:ED:AD:FD:13:6D:4D:D8:D2:DC:B1:D0
Certificate issuer:       /CN=462DDD71CA49B52AB4576EB8AE36E9D695B64F92
Certificate serial:       4D3E8B41E7564B5A8B6797DEE0ED5C5CCAB11F12
Authority key identifier: 46:2D:DD:71:CA:49:B5:2A:B4:57:6E:B8:AE:36:E9:D6:95:B6:4F:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/34352e3232372e35362e302f32322d3234203d3e20323637303136.roa
Signing time:             Thu 06 Mar 2025 06:55:25 +0000
ROA not before:           Thu 06 Mar 2025 06:50:25 +0000
ROA not after:            Thu 05 Mar 2026 06:55:25 +0000
asID:                     267016
IP address blocks:        45.227.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3e:8b:41:e7:56:4b:5a:8b:67:97:de:e0:ed:5c:5c:ca:b1:1f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462DDD71CA49B52AB4576EB8AE36E9D695B64F92
        Validity
            Not Before: Mar  6 06:50:25 2025 GMT
            Not After : Mar  5 06:55:25 2026 GMT
        Subject: CN=D5F3AA8C1290E03AE3EDADFD136D4DD8D2DCB1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:31:a5:2d:21:6f:af:b2:1c:b1:72:f1:50:9c:
                    e0:19:d4:db:2a:66:e9:50:4f:d4:e2:8c:17:6f:ca:
                    f4:48:66:20:11:86:ff:c3:bc:dd:15:24:8a:0f:0f:
                    62:65:d8:c7:16:4d:96:7b:6b:dc:a6:a1:4c:18:e3:
                    04:d2:9a:49:0b:5d:e7:6e:8e:7d:9b:81:13:49:28:
                    42:48:f5:36:c6:09:6a:a9:18:d2:05:80:cd:83:3d:
                    3f:e4:3e:56:0e:41:f8:b7:79:95:a5:1b:8b:76:47:
                    19:17:b3:b0:47:5b:31:d2:94:5a:20:05:d0:11:e8:
                    2e:b7:35:62:a2:6c:3d:36:34:18:2a:02:ec:69:a2:
                    d5:d6:c6:ed:06:75:9d:fd:62:67:d0:d0:ea:80:c1:
                    e8:2b:05:39:d7:96:af:a8:b4:2f:96:88:6d:2c:16:
                    c3:6d:fc:58:57:b1:03:c2:09:ce:5b:29:50:23:93:
                    de:51:3f:d7:93:f5:37:64:58:49:dd:5b:2f:f9:a5:
                    29:c4:f8:c0:60:ef:75:fd:4e:22:25:ed:78:bd:52:
                    f4:45:31:e0:54:f0:be:c6:a5:ca:76:6d:d2:c0:1f:
                    63:6e:0f:34:69:2f:d3:fc:bb:eb:ce:b5:f4:5d:6c:
                    be:c7:3e:76:ee:be:60:e9:69:ca:66:ff:64:d3:43:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F3:AA:8C:12:90:E0:3A:E3:ED:AD:FD:13:6D:4D:D8:D2:DC:B1:D0
            X509v3 Authority Key Identifier:
                keyid:46:2D:DD:71:CA:49:B5:2A:B4:57:6E:B8:AE:36:E9:D6:95:B6:4F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/34352e3232372e35362e302f32322d3234203d3e20323637303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:16:ce:64:7c:81:a0:9b:40:0a:b8:72:88:e8:6a:87:4f:4d:
         6a:3b:63:be:37:b4:b3:84:97:61:f8:32:7f:8d:bd:4f:c5:7b:
         88:91:41:da:d3:28:aa:7e:09:f6:e1:18:cb:c3:03:71:dc:f6:
         5b:58:c2:66:da:a4:d4:17:2f:54:58:31:c9:6c:3e:9b:8a:15:
         e7:49:3e:44:83:8f:ed:47:91:c5:96:bb:b1:34:b4:ea:d8:5d:
         14:ed:24:fb:86:ce:31:2e:c7:75:2a:af:ef:d6:f2:74:00:90:
         b0:d0:f8:ff:84:1f:69:8e:33:e9:a4:59:48:25:81:95:eb:83:
         6b:af:57:21:dc:2c:82:50:95:5e:70:c0:21:bb:3a:1f:02:77:
         f3:69:d2:b8:84:1f:31:86:d8:ab:e7:40:82:64:55:4b:56:9c:
         c3:2f:b3:e8:29:fe:39:25:1e:05:ce:00:bf:4b:0c:79:75:ef:
         a7:90:d7:0b:7f:bf:78:56:de:59:bf:83:bd:43:06:97:8c:db:
         8b:19:e0:46:46:2d:d3:ed:4a:5d:bc:03:93:4b:ca:58:46:60:
         69:3a:65:24:35:d2:9e:3d:3e:eb:3c:a4:51:aa:84:8e:c9:77:
         ec:a4:e8:e7:df:8d:ae:97:d5:6a:02:ce:ba:b7:29:99:7c:d3:
         a7:6d:6c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:23:48 2025 by rpki-client