Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          Psgtq3wpQVly10/d/IGppksY7NCw0DwjUOAasNhL1D4=
Subject key identifier:   CD:CD:72:12:AC:D7:67:06:02:40:55:56:F9:59:56:E3:C1:76:B1:7C
Certificate issuer:       /CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
Certificate serial:       2E2DA53268D94AF6EAD9AAFC18EF2C1630468686
Authority key identifier: 5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa
Signing time:             Tue 04 Feb 2025 02:38:09 +0000
ROA not before:           Tue 04 Feb 2025 02:33:09 +0000
ROA not after:            Tue 03 Feb 2026 02:38:09 +0000
asID:                     271599
IP address blocks:        45.174.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2d:a5:32:68:d9:4a:f6:ea:d9:aa:fc:18:ef:2c:16:30:46:86:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
        Validity
            Not Before: Feb  4 02:33:09 2025 GMT
            Not After : Feb  3 02:38:09 2026 GMT
        Subject: CN=CDCD7212ACD7670602405556F95956E3C176B17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:3e:14:cf:ca:af:ff:d4:db:0c:2b:d4:be:
                    b3:27:6e:3b:7b:e9:26:8a:d2:6f:bb:71:b2:a2:d1:
                    08:8f:c3:f3:93:7f:7f:fd:4a:07:90:7c:8d:48:5e:
                    15:f6:d8:57:1e:c1:b6:51:f2:ae:4e:46:f5:1e:09:
                    6d:d9:d5:42:e9:ee:3e:e7:ba:2a:03:a7:ba:8f:5b:
                    40:dc:84:47:be:ae:ac:bb:47:d2:c3:50:95:3a:fe:
                    66:a5:b1:2a:21:58:f4:4d:ff:03:f9:e9:ac:03:d4:
                    e5:91:33:05:e7:45:c0:4f:f8:8b:8c:d6:d5:dc:35:
                    7e:a5:22:57:fa:bb:dc:51:ca:fb:13:c0:24:eb:a8:
                    69:ed:fc:cb:a7:6b:07:f8:aa:94:4c:b7:15:21:ba:
                    11:db:ca:2c:9d:47:89:3d:44:1d:02:41:b2:07:b9:
                    a5:4f:86:2b:e3:3a:64:12:d5:8a:e5:4e:6f:86:9a:
                    2b:27:ce:18:9e:e2:3f:57:38:0f:53:c4:1d:26:b1:
                    d1:df:94:9c:72:27:b0:f6:ee:86:00:54:a7:46:2d:
                    c9:88:92:8d:7a:6f:2a:ea:aa:62:19:da:4b:81:4e:
                    57:7a:88:79:66:b6:1f:bd:f3:b2:75:fd:7b:ea:1e:
                    ab:3b:bb:5e:b1:4c:0b:de:dd:2a:e9:2f:80:82:c1:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CD:72:12:AC:D7:67:06:02:40:55:56:F9:59:56:E3:C1:76:B1:7C
            X509v3 Authority Key Identifier:
                keyid:5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:a7:db:59:2c:63:85:d2:8f:0c:37:08:32:4a:c8:4d:4d:3a:
         5c:16:9f:9a:c0:3b:e2:8f:59:dd:81:02:56:a6:31:0a:27:14:
         9a:3d:ae:55:7e:69:d3:39:58:b2:e1:48:6a:09:8d:b0:7a:29:
         36:fa:83:5b:6b:aa:d0:d1:c9:c3:0a:0e:4b:b1:cc:19:3c:be:
         20:94:d0:3e:07:20:b2:c1:ff:9b:3d:dd:fd:50:cc:a1:b8:31:
         d3:3c:63:84:ff:cd:e2:ae:43:b7:63:a0:6f:cb:d0:69:a8:00:
         d8:27:97:ab:f5:47:b8:8e:d1:29:82:12:96:eb:12:3f:25:55:
         29:bb:1c:3e:03:a9:3e:d3:f5:5f:34:c1:23:b9:0a:c0:bf:02:
         e9:e3:f4:04:bc:1f:d3:b1:b8:da:5b:0c:2a:03:f9:dc:4e:57:
         20:5d:56:df:19:e2:70:ba:aa:37:6e:06:2c:fe:8a:e2:e9:30:
         0f:8e:76:28:e2:45:ce:a5:2c:32:b9:0a:94:5e:e1:dd:43:2c:
         1e:15:b4:1d:18:24:0e:b4:72:75:ce:8d:6f:b3:5b:eb:7e:73:
         94:ac:2f:25:32:50:1a:fd:31:a6:33:8e:60:b9:cd:1b:84:4b:
         02:c4:1b:0e:73:74:e2:cb:c5:c0:69:1a:02:ac:a1:57:5a:a2:
         e0:2c:a2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:19:46 2025 by rpki-client