Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235312e302f32342d3234203d3e20323639323435.roa
File:                     34352e3138322e3235312e302f32342d3234203d3e20323639323435.roa (raw, json)
Hash identifier:          puszTJeqzQntAoUm8BGFTph7o5V+d+BoBrbZ4YRXkj0=
Subject key identifier:   4D:0B:1C:D7:E0:77:0A:15:96:6B:84:78:FF:3C:42:5C:0C:15:43:B4
Certificate issuer:       /CN=A12962D917F7F6F2BE3A3E746A8863360ABEB089
Certificate serial:       416B52711342C9C1E73A20E2C007AF9401F7EB71
Authority key identifier: A1:29:62:D9:17:F7:F6:F2:BE:3A:3E:74:6A:88:63:36:0A:BE:B0:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A12962D917F7F6F2BE3A3E746A8863360ABEB089.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235312e302f32342d3234203d3e20323639323435.roa
Signing time:             Wed 05 Feb 2025 11:55:39 +0000
ROA not before:           Wed 05 Feb 2025 11:50:39 +0000
ROA not after:            Wed 04 Feb 2026 11:55:39 +0000
asID:                     269245
IP address blocks:        45.182.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6b:52:71:13:42:c9:c1:e7:3a:20:e2:c0:07:af:94:01:f7:eb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12962D917F7F6F2BE3A3E746A8863360ABEB089
        Validity
            Not Before: Feb  5 11:50:39 2025 GMT
            Not After : Feb  4 11:55:39 2026 GMT
        Subject: CN=4D0B1CD7E0770A15966B8478FF3C425C0C1543B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:f2:4d:fd:ad:ed:d1:13:8e:53:3a:f6:6b:
                    a3:e6:be:33:90:6b:c0:18:35:cd:b7:f6:ad:49:17:
                    e6:18:3b:e2:84:e5:09:9d:0c:7c:6e:f3:28:05:a5:
                    76:9a:f4:9b:e2:b3:10:95:75:af:c2:6b:be:58:ed:
                    40:38:8a:3f:6f:7f:77:76:6b:22:47:90:f2:2e:1b:
                    1a:76:c5:ac:95:a0:6f:e4:ab:36:45:d3:88:59:51:
                    11:f3:ef:04:11:9c:d4:f2:5e:47:39:89:eb:85:39:
                    79:09:3d:d0:02:33:95:67:c7:95:2c:ed:1b:38:4d:
                    dd:d3:d0:63:15:e0:3c:1d:2a:7a:e2:af:36:40:66:
                    1a:7b:9e:92:4a:74:49:f1:e2:0c:cd:85:76:a0:7a:
                    44:20:2a:0d:d3:8d:f4:53:07:5b:92:96:d5:c0:9e:
                    b6:dc:d1:3d:b7:ca:4d:6d:fd:1a:27:0c:d2:14:20:
                    77:a2:c4:63:e0:8f:8e:3e:d5:f0:4f:04:de:33:7a:
                    e6:a5:90:64:88:6d:0e:56:f8:5f:be:1f:48:a1:a4:
                    56:ad:9f:72:28:c3:24:9f:23:5f:b4:8e:60:3c:07:
                    82:1b:d4:d4:d6:24:42:fa:08:45:67:c3:c9:8f:13:
                    4f:d4:40:a4:18:66:71:2e:8a:3c:1b:1a:d8:ab:97:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0B:1C:D7:E0:77:0A:15:96:6B:84:78:FF:3C:42:5C:0C:15:43:B4
            X509v3 Authority Key Identifier:
                keyid:A1:29:62:D9:17:F7:F6:F2:BE:3A:3E:74:6A:88:63:36:0A:BE:B0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/A12962D917F7F6F2BE3A3E746A8863360ABEB089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A12962D917F7F6F2BE3A3E746A8863360ABEB089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235312e302f32342d3234203d3e20323639323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:26:62:3b:87:15:5b:f5:2e:a6:7b:12:b4:d1:87:6d:f5:3b:
         1f:de:15:2d:51:64:1e:6d:92:14:f6:4e:c4:e9:c8:ee:38:47:
         b3:81:87:1c:6f:1e:15:3e:f8:eb:09:dc:46:ef:6a:56:a5:ba:
         87:cd:b9:ac:35:fc:23:9a:b5:ae:25:4b:ba:3f:96:c6:2a:91:
         ab:8a:44:0b:81:87:31:3e:34:17:21:30:8d:ce:bd:b5:b0:7a:
         b0:e2:de:ec:5a:f1:ca:da:7d:7a:eb:c4:57:9b:89:ce:67:1f:
         6d:03:d4:aa:7d:d4:87:43:6d:43:78:e7:95:54:25:0a:9a:fa:
         b8:4c:11:99:71:ae:b4:d4:32:65:96:62:c1:04:29:a8:c5:da:
         68:71:ae:76:38:6a:dc:d5:77:72:9e:77:56:42:43:8c:25:9c:
         34:8b:a9:88:64:9c:e6:f4:98:7f:b4:60:45:c6:d6:f3:30:7b:
         c2:b3:05:27:4f:78:97:11:d3:b5:92:fd:79:92:24:d0:dc:aa:
         af:cc:6c:de:3b:47:6f:36:d5:b1:9f:ec:94:f3:38:13:d7:ef:
         ea:2d:ac:d0:97:4e:c9:40:31:48:eb:99:93:8f:5f:b6:5d:39:
         2b:0c:0c:a2:e2:21:0a:a2:28:e6:9a:2f:91:8b:60:10:d5:de:
         0e:aa:68:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:04:31 2025 by rpki-client