Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/34352e3137352e37332e302f32342d3234203d3e20323733373034.roa
File:                     34352e3137352e37332e302f32342d3234203d3e20323733373034.roa (raw, json)
Hash identifier:          e3iG0TX3A+dYd/Y4XATrqR1gXQc4naYNdMvW0Q4yPqE=
Subject key identifier:   52:E0:B1:56:F4:A5:6B:E8:55:96:BA:A0:B7:73:CF:C5:EE:92:4C:0E
Certificate issuer:       /CN=4B3FAAE01655630B846E5A9F1FAFC437948428B5
Certificate serial:       78BE330F292EC5783D56C7AA6C90112F163B634B
Authority key identifier: 4B:3F:AA:E0:16:55:63:0B:84:6E:5A:9F:1F:AF:C4:37:94:84:28:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FAAE01655630B846E5A9F1FAFC437948428B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/34352e3137352e37332e302f32342d3234203d3e20323733373034.roa
Signing time:             Fri 31 Jan 2025 16:23:02 +0000
ROA not before:           Fri 31 Jan 2025 16:18:02 +0000
ROA not after:            Fri 30 Jan 2026 16:23:02 +0000
asID:                     273704
IP address blocks:        45.175.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:be:33:0f:29:2e:c5:78:3d:56:c7:aa:6c:90:11:2f:16:3b:63:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3FAAE01655630B846E5A9F1FAFC437948428B5
        Validity
            Not Before: Jan 31 16:18:02 2025 GMT
            Not After : Jan 30 16:23:02 2026 GMT
        Subject: CN=52E0B156F4A56BE85596BAA0B773CFC5EE924C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:02:24:9c:e8:5e:be:33:a1:de:8d:c1:0a:
                    83:97:02:e1:21:a3:87:6c:4b:0c:31:67:b4:09:52:
                    05:14:7f:2a:f7:77:70:46:a5:97:85:42:69:39:09:
                    92:bd:ff:5f:fc:20:1f:e6:79:b0:d6:f0:45:bb:f1:
                    48:6e:9e:12:55:12:d4:6b:fa:2c:06:23:d8:d2:10:
                    d5:8e:73:22:9b:21:9b:2a:78:f5:f5:9c:6d:d3:21:
                    c6:8a:74:95:69:0c:44:b8:2d:dc:52:9c:55:58:39:
                    4d:f7:05:46:f5:4b:3b:08:f0:e0:52:75:d7:a6:b9:
                    39:db:ad:84:82:9e:0a:82:9f:4c:47:a0:76:27:32:
                    6c:00:34:23:f0:45:2a:34:3f:62:83:95:1d:d7:13:
                    7f:0b:d4:e6:44:ad:82:e7:c5:a0:ec:43:f7:f5:f0:
                    c9:02:c9:36:cf:fe:d0:4a:5c:7b:4c:3a:1b:c6:14:
                    4e:db:66:aa:9f:06:14:dd:50:56:49:0b:4f:e4:ee:
                    bc:4d:7e:7b:0e:98:f8:7b:2f:c4:5b:9a:49:50:f1:
                    67:d0:e0:0d:a2:df:c1:83:a5:01:35:53:b4:05:73:
                    98:69:c5:a3:b3:93:b4:01:8b:56:a3:b7:a6:90:c7:
                    bd:98:18:58:91:0b:09:13:21:68:ab:d1:14:85:83:
                    bb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E0:B1:56:F4:A5:6B:E8:55:96:BA:A0:B7:73:CF:C5:EE:92:4C:0E
            X509v3 Authority Key Identifier:
                keyid:4B:3F:AA:E0:16:55:63:0B:84:6E:5A:9F:1F:AF:C4:37:94:84:28:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/4B3FAAE01655630B846E5A9F1FAFC437948428B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FAAE01655630B846E5A9F1FAFC437948428B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/34352e3137352e37332e302f32342d3234203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:bd:b5:68:ee:df:7f:54:33:d6:84:aa:e8:22:d6:d2:0c:90:
         cc:78:13:e1:a1:33:ae:4e:6c:51:d5:7a:ea:b1:d3:07:40:e6:
         46:2e:17:76:ff:c1:21:65:15:81:61:05:54:d1:82:6e:d4:7a:
         4e:45:10:f7:2f:ed:1a:94:e4:db:0e:7b:91:84:ce:84:27:ac:
         8a:2e:72:34:ec:94:d8:8d:e3:d0:c7:d9:55:a4:f7:51:e9:93:
         91:66:f1:73:94:d7:1b:2a:e5:6f:d5:8b:bf:d6:7b:00:f0:13:
         4c:df:34:0f:63:90:4c:49:c8:6d:a2:6d:bd:48:3c:e2:aa:96:
         46:ad:58:d0:48:c6:fa:63:2f:43:1d:d7:36:5c:2d:aa:62:a4:
         05:0c:0f:4a:d2:d2:e5:24:b2:2f:68:52:eb:41:c4:0c:8c:69:
         93:e5:a3:36:5d:06:d1:ca:12:2c:c5:61:b6:b7:88:17:f8:0b:
         31:c8:af:15:a2:7a:f1:47:95:bd:df:10:5d:4f:6a:ce:32:de:
         5f:a9:07:eb:45:20:f6:d7:cc:af:95:17:41:bf:87:ae:9c:ef:
         8f:3a:13:01:ce:cc:6d:4e:17:1b:de:d2:76:66:61:c3:fc:88:
         aa:00:05:d2:7b:b9:58:4e:01:bc:7a:43:9e:05:f6:7d:2d:be:
         fd:f5:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:24 2025 by rpki-client