Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa
File:                     34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa (raw, json)
Hash identifier:          6ubk/KLLMrEBwNLKE0u3FP3lX9cDgmh0AkCHR7U3UBM=
Subject key identifier:   51:A7:E1:39:00:81:48:AF:E1:83:F3:DC:A0:90:F9:F2:B8:96:4B:8C
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       4AE90654648802A8084373DBC7B4E30CFB7DC71E
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa
Signing time:             Sat 06 Jul 2024 01:41:05 +0000
ROA not before:           Sat 06 Jul 2024 01:36:05 +0000
ROA not after:            Sat 05 Jul 2025 01:41:05 +0000
asID:                     267350
IP address blocks:        45.233.230.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e9:06:54:64:88:02:a8:08:43:73:db:c7:b4:e3:0c:fb:7d:c7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: Jul  6 01:36:05 2024 GMT
            Not After : Jul  5 01:41:05 2025 GMT
        Subject: CN=51A7E139008148AFE183F3DCA090F9F2B8964B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:db:0f:77:17:2e:fa:5d:98:34:c6:cc:11:
                    a9:b7:3c:ae:89:75:13:94:86:a1:97:62:85:e6:0a:
                    79:07:5f:87:a6:14:41:e2:9d:ac:76:8e:9f:22:8f:
                    ac:11:8d:eb:3b:51:38:c8:fb:b6:ce:55:09:0b:44:
                    a9:93:90:fb:87:49:f9:45:bd:74:f1:bb:e3:6e:d6:
                    e5:41:cc:9a:f9:fb:c7:b1:6e:4a:85:d9:94:87:48:
                    42:0d:bf:4c:eb:63:c5:ae:f8:7f:d9:61:4c:27:85:
                    a6:da:43:37:18:fc:9f:f4:12:dd:2b:da:7c:a6:0a:
                    eb:fd:bb:90:8b:56:80:5f:32:83:67:02:05:a0:db:
                    b5:e0:58:db:a2:a8:88:98:6b:13:b5:0d:f6:8c:a1:
                    f3:19:66:ff:7c:bd:1b:08:d3:f8:48:02:7a:c8:3a:
                    fc:eb:70:d5:39:3d:e0:7e:c1:ce:9a:14:2b:bd:0c:
                    c0:63:3a:fd:22:25:6b:90:e5:39:98:5b:87:cd:28:
                    94:a8:1e:91:31:2a:df:6b:ac:04:d5:2e:ff:b2:84:
                    e7:bf:56:3f:b0:ee:1a:27:a1:29:91:78:b6:ac:67:
                    ad:8c:34:37:cd:80:e1:e0:c8:3d:00:4a:04:7c:b8:
                    3c:bd:a2:b2:83:86:cd:84:e5:fb:49:35:77:ba:1f:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A7:E1:39:00:81:48:AF:E1:83:F3:DC:A0:90:F9:F2:B8:96:4B:8C
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:09:00:22:10:7f:23:b2:67:11:08:23:4a:fd:9a:cb:d4:f3:
         0c:23:25:6e:af:b4:45:cf:e6:ea:41:7c:88:65:96:2a:7d:b7:
         0d:8e:2e:40:94:dd:ea:ce:69:f2:a7:09:27:0f:10:67:b4:be:
         3c:54:8e:e4:a7:3f:f7:3f:52:60:41:88:f0:21:19:13:7a:9b:
         b6:31:3a:aa:6e:de:f7:0e:87:d6:01:55:fb:02:02:69:ee:a0:
         f6:67:4b:37:43:36:80:fd:b8:ac:4a:5b:f5:22:11:3d:a5:53:
         c9:49:07:82:38:20:20:64:cd:07:b8:aa:70:f7:d6:1c:92:77:
         5d:82:ba:d9:5f:b6:f9:f6:fc:3f:b2:30:37:84:50:6b:b8:0b:
         da:9c:08:cd:1c:47:44:17:e1:bf:00:8e:3f:9d:01:39:7b:d4:
         86:3f:a1:9b:05:2b:00:53:fe:79:c6:4e:1b:65:f0:d2:07:bc:
         11:95:53:5c:94:b6:bf:40:ea:a3:b0:a0:81:73:c0:3b:34:c1:
         ce:81:fc:82:32:07:92:cc:70:7c:ba:28:c6:c6:37:76:9d:74:
         78:a1:89:57:c4:3b:1a:c2:29:ff:8b:79:c9:cf:be:69:9d:bd:
         df:0c:e5:b0:3f:07:9f:9e:47:44:89:7e:c6:b3:61:79:7c:25:
         ea:91:7c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:58:13 2025 by rpki-client