Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa
File:                     34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa (raw, json)
Hash identifier:          deZxw1VXx3ZvS0FYXmQfD2DisVHP/XbMF3/6IaOPt48=
Subject key identifier:   31:F9:86:08:33:23:14:3E:B4:26:27:0A:4C:52:68:1C:CA:CB:1C:78
Certificate issuer:       /CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Certificate serial:       57F471FE73200BBA47ACCE1A4E684E20D6BE81DF
Authority key identifier: 3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa
Signing time:             Mon 06 Jan 2025 18:53:59 +0000
ROA not before:           Mon 06 Jan 2025 18:48:59 +0000
ROA not after:            Mon 05 Jan 2026 18:53:59 +0000
asID:                     267059
IP address blocks:        45.228.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f4:71:fe:73:20:0b:ba:47:ac:ce:1a:4e:68:4e:20:d6:be:81:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
        Validity
            Not Before: Jan  6 18:48:59 2025 GMT
            Not After : Jan  5 18:53:59 2026 GMT
        Subject: CN=31F986083323143EB426270A4C52681CCACB1C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:eb:4e:dd:a2:24:26:b5:f0:b9:d4:68:77:
                    1f:97:82:d4:09:75:1f:c0:37:74:70:66:bf:cb:4c:
                    14:a6:ea:15:99:67:1a:a3:9d:cd:6d:cf:32:c7:04:
                    b0:fe:01:2b:23:4d:3c:bb:2e:7d:60:bc:84:6a:cd:
                    3e:3a:fa:f3:35:cc:9b:d3:99:7a:80:3f:0d:51:ab:
                    6d:23:09:e5:4b:e5:fa:12:59:ba:fa:35:f7:3d:36:
                    0b:cb:b4:3a:91:77:32:6c:5e:72:cd:26:fa:71:bd:
                    a9:f5:be:b3:64:03:aa:77:ea:76:61:36:d8:56:50:
                    39:97:2f:fa:c9:43:d2:2e:c0:f9:dc:8c:6b:69:62:
                    df:c3:43:4d:20:e0:ae:f5:e7:6a:de:8e:df:5f:e5:
                    ce:17:7e:38:9d:a6:47:1c:5f:b5:73:39:0a:f6:45:
                    3a:48:05:40:64:d2:3c:b5:ab:f7:ce:f0:ab:25:20:
                    b9:e9:6a:ae:c0:8b:c4:f1:44:6e:6e:d9:3c:04:cc:
                    65:32:f3:10:4b:91:e0:3b:34:1a:53:ef:1e:b3:fc:
                    a7:24:88:3e:5e:54:13:37:df:28:ec:70:ed:12:ff:
                    22:ea:87:d0:21:d6:8a:c3:63:eb:1f:cf:5f:09:b5:
                    1b:66:8f:16:72:c4:e7:d4:23:b4:14:67:b3:67:49:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F9:86:08:33:23:14:3E:B4:26:27:0A:4C:52:68:1C:CA:CB:1C:78
            X509v3 Authority Key Identifier:
                keyid:3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ed:ff:53:b7:71:1a:1c:6a:5b:d6:8b:06:0d:dd:7e:f7:b6:
         e6:0c:28:52:3f:ea:5d:b9:3d:60:ca:18:96:f6:ba:24:46:80:
         cd:b5:56:ff:ac:46:c6:45:d5:89:94:9d:0a:32:54:7f:5f:6c:
         43:2c:06:ce:fc:ca:f1:84:3d:9b:f1:be:21:dd:1e:f2:a2:ea:
         cf:94:2e:91:9a:68:65:2c:ce:8d:0b:a9:86:76:99:8a:7a:8e:
         ec:a8:bc:4f:28:80:6a:80:5e:3b:85:ff:64:7a:8d:99:a1:89:
         67:a1:cc:af:69:35:57:d7:8a:60:ba:81:3d:d1:af:e7:9a:74:
         44:75:54:7a:14:e7:20:9d:1b:c7:3e:c8:d0:d3:75:66:30:fa:
         c7:7c:12:cf:b2:22:84:15:aa:0f:19:91:83:70:de:29:9d:36:
         6b:38:96:fd:02:2d:e0:67:8b:fa:95:6b:aa:6a:df:b4:eb:c8:
         ce:b9:80:76:a0:a3:e6:5d:ab:2d:e2:c9:a1:69:02:86:ba:e3:
         2d:1f:49:cc:fa:fb:12:45:f3:ab:ef:91:05:93:b9:2b:1d:c3:
         94:eb:20:e2:61:af:ad:43:a7:be:7d:8c:5d:6f:3b:06:b5:93:
         91:06:87:15:94:13:6e:24:67:c2:39:d7:1e:9e:e1:48:9d:55:
         5d:17:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:53:47 2025 by rpki-client