Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32342d3234203d3e20323638323136.roa
File:                     34352e3233352e3234382e302f32342d3234203d3e20323638323136.roa (raw, json)
Hash identifier:          o8/RoBzxS1wRNsEpbg79uZHjTwHR1cS2fbz93iEsYhc=
Subject key identifier:   C6:58:56:A6:30:BA:7C:3E:D5:75:B1:10:91:8E:FE:3F:71:FB:5C:50
Certificate issuer:       /CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
Certificate serial:       672051425844B2CBB8A09FEB43BC20D7D76DF8A1
Authority key identifier: 41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32342d3234203d3e20323638323136.roa
Signing time:             Wed 20 Mar 2024 23:50:58 +0000
ROA not before:           Wed 20 Mar 2024 23:45:58 +0000
ROA not after:            Wed 19 Mar 2025 23:50:58 +0000
asID:                     268216
IP address blocks:        45.235.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:20:51:42:58:44:b2:cb:b8:a0:9f:eb:43:bc:20:d7:d7:6d:f8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
        Validity
            Not Before: Mar 20 23:45:58 2024 GMT
            Not After : Mar 19 23:50:58 2025 GMT
        Subject: CN=C65856A630BA7C3ED575B110918EFE3F71FB5C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:fa:25:48:49:0f:49:5b:61:19:69:99:0d:
                    29:12:fc:ab:15:8d:e6:4c:2f:44:b2:cf:ca:4a:4c:
                    f3:00:14:0c:a2:8e:06:03:6c:fe:0b:af:b1:41:60:
                    77:e4:cb:cb:94:9b:f8:e6:ad:c2:a3:75:3b:cb:65:
                    e4:3b:aa:39:9a:bb:9c:03:a3:a8:67:29:5a:d9:41:
                    b4:02:3c:32:d4:88:7e:b3:5d:6d:1b:91:28:c9:be:
                    61:21:3b:16:9c:70:f3:33:cb:90:df:14:bf:f0:4f:
                    fc:d2:3a:37:5e:ed:3b:9a:73:d6:b1:83:e9:63:84:
                    e8:16:9b:a9:6f:8e:20:0f:31:d5:0f:a5:b8:74:05:
                    d8:56:65:7c:c8:00:20:10:d6:bc:35:b6:f1:97:91:
                    e6:06:df:45:cd:46:95:53:46:a8:43:9e:4f:e3:66:
                    cd:ab:b3:e1:a3:c1:db:15:2d:de:a8:2b:79:e1:6b:
                    b8:41:7f:bb:13:95:dd:9b:70:4e:12:64:e0:e7:be:
                    6e:4d:28:92:62:a0:b1:dd:27:f0:3a:16:6b:20:e1:
                    91:8d:a0:3e:8b:c6:d9:95:06:bb:d0:34:b9:ed:1d:
                    00:13:fc:bf:30:d1:d7:d0:a2:3f:0a:92:c1:79:4a:
                    06:a0:25:fd:a6:39:54:80:f7:cb:c2:34:65:3d:d6:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:58:56:A6:30:BA:7C:3E:D5:75:B1:10:91:8E:FE:3F:71:FB:5C:50
            X509v3 Authority Key Identifier:
                keyid:41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32342d3234203d3e20323638323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:8b:f9:d9:90:bd:f0:01:0f:e0:6c:aa:4c:af:30:f6:68:15:
         8a:b6:cc:95:fb:ca:53:c0:d7:b9:fd:ca:77:27:ff:cf:89:ef:
         83:03:2c:ee:f5:ef:d7:b5:a0:63:7d:38:17:8b:28:3b:cc:d4:
         bd:c1:41:82:8f:6b:6d:55:b2:a5:13:b6:e4:a2:88:3b:8c:9f:
         f9:ea:2a:34:d3:66:8c:82:83:b5:51:1c:2a:75:2f:d3:82:6b:
         5d:58:36:c8:78:5f:9e:e2:85:25:77:d1:63:67:89:c9:68:35:
         73:0e:60:91:f8:52:68:84:be:47:f6:96:6e:e5:5d:e5:6e:bf:
         4a:54:cb:51:b4:bb:86:0b:b0:4c:e3:85:39:08:96:c5:90:ec:
         24:b8:28:20:87:33:c3:b5:9c:9f:b2:6b:f0:67:fa:1c:1a:91:
         2b:08:13:6f:b6:cb:41:28:22:bd:5a:14:81:62:84:00:c7:6e:
         f0:7e:f0:d6:44:88:40:6b:c7:d3:bc:cf:c3:93:0e:e4:7f:d7:
         4c:8c:d2:58:62:3d:f2:69:ed:a5:96:85:e8:41:74:0f:12:63:
         83:7f:aa:37:55:75:b0:b7:46:fb:22:b8:ac:d3:96:50:8d:32:
         3c:b6:73:38:fd:97:c1:82:a7:b8:da:d1:af:5d:51:ae:fd:2b:
         7f:b0:46:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:31:43 2025 by rpki-client