Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130312e302f32342d3234203d3e20323638383039.roa
File:                     34352e3137332e3130312e302f32342d3234203d3e20323638383039.roa (raw, json)
Hash identifier:          5gmWK9mRFx6tkcEhgdl6zrYoWrrD9DF7gX7xpfmnrQY=
Subject key identifier:   B5:1C:C1:92:8F:F1:C7:F3:DE:21:AB:C6:11:22:DA:07:83:0C:5F:CD
Certificate issuer:       /CN=36DA718022D54A30E93B3878E7B41A3BBAD1BAEB
Certificate serial:       54759657F2C4CE2CE14B4503743D648EE85BB6D6
Authority key identifier: 36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130312e302f32342d3234203d3e20323638383039.roa
Signing time:             Sun 02 Feb 2025 02:09:09 +0000
ROA not before:           Sun 02 Feb 2025 02:04:09 +0000
ROA not after:            Sun 01 Feb 2026 02:09:09 +0000
asID:                     268809
IP address blocks:        45.173.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:75:96:57:f2:c4:ce:2c:e1:4b:45:03:74:3d:64:8e:e8:5b:b6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DA718022D54A30E93B3878E7B41A3BBAD1BAEB
        Validity
            Not Before: Feb  2 02:04:09 2025 GMT
            Not After : Feb  1 02:09:09 2026 GMT
        Subject: CN=B51CC1928FF1C7F3DE21ABC61122DA07830C5FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:cc:b0:9c:05:97:f3:a8:0f:d7:80:9b:96:
                    56:88:ab:cf:07:fd:28:63:40:f0:58:69:4d:47:71:
                    1d:66:4f:05:71:5d:c6:a2:46:02:9c:dd:47:07:73:
                    65:01:68:c5:c2:b8:e9:c3:58:4b:d5:32:88:26:6f:
                    d8:2f:fd:d9:f7:9b:75:48:0e:d4:7b:34:fc:c6:3a:
                    3a:71:6f:92:ae:21:35:fb:f0:ad:49:54:ca:9d:37:
                    29:93:4d:83:06:85:a5:c2:ea:0f:e8:6c:8d:91:af:
                    d9:ba:f5:10:b7:fc:bf:34:bc:07:68:ff:50:2f:c6:
                    22:5b:c4:34:95:e0:cd:28:11:64:45:06:31:6d:dc:
                    6b:85:38:cb:25:31:78:d2:cf:dd:b2:45:ab:b3:a8:
                    f8:f1:16:48:f5:06:5b:85:de:57:9d:3d:57:5d:6f:
                    df:7d:d2:43:e8:8d:b0:c0:82:63:4e:e9:03:1e:71:
                    ae:86:96:72:3a:2d:16:4a:08:e3:54:12:d3:5b:2a:
                    0f:93:f0:d8:c6:31:6b:e0:94:fd:d6:d0:93:88:80:
                    07:85:99:e0:9e:cc:7f:03:43:39:46:f6:da:f1:1f:
                    74:d5:a1:6d:53:72:04:38:a7:26:10:5c:ef:90:b2:
                    f0:60:ad:32:cc:d5:d8:b6:31:b4:51:f6:8e:8a:64:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1C:C1:92:8F:F1:C7:F3:DE:21:AB:C6:11:22:DA:07:83:0C:5F:CD
            X509v3 Authority Key Identifier:
                keyid:36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130312e302f32342d3234203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:9c:f9:ea:aa:86:62:0c:16:99:0f:5b:ec:54:46:6b:cf:95:
         89:18:18:22:e8:43:6a:8e:46:fe:8e:27:0b:38:35:e3:86:c2:
         ce:d0:f5:2d:9b:b0:4d:f1:ed:bd:a2:48:00:d4:23:be:29:c5:
         77:e1:4c:c3:50:70:16:82:3c:4b:4f:87:0d:9f:1b:b9:66:8e:
         61:dc:e0:f2:37:87:ef:fc:ba:0f:b4:7b:00:13:b0:c9:7f:83:
         5c:17:88:b1:46:e5:6e:22:31:2b:4f:e3:d1:b1:1a:cf:10:41:
         0b:0b:03:6f:75:8f:be:b6:eb:f8:02:30:83:c6:5f:86:7b:57:
         ab:4d:78:77:db:86:ed:bd:97:8c:c4:02:f6:db:57:1b:47:f0:
         4a:62:60:47:87:81:14:13:01:82:c4:bb:12:d2:e2:01:7a:26:
         83:e4:89:7c:ec:22:70:49:d7:45:95:55:2e:e1:2b:81:58:07:
         2b:d0:fd:86:a5:91:f1:f5:d9:5f:91:af:58:2f:68:5f:72:5c:
         d5:2d:50:c5:f6:49:93:fc:12:7e:85:2f:1b:99:f1:51:23:c5:
         8a:a5:21:1e:21:39:17:2a:a4:44:20:bb:b3:fd:e3:6a:ae:e4:
         77:1b:02:cd:22:55:6d:55:9a:e9:83:ec:f3:17:52:7f:a3:cb:
         9f:65:1f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:19:23 2025 by rpki-client