Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/34352e3137392e38382e302f32322d3332203d3e20323639303730.roa
File:                     34352e3137392e38382e302f32322d3332203d3e20323639303730.roa (raw, json)
Hash identifier:          ukDp5iTVEP6APMnr9LlPJ9Cig/PTfMttTOk9A/nJXXc=
Subject key identifier:   89:E2:1D:96:8C:FC:28:34:22:B7:CA:4E:A1:E6:AC:CB:D3:F4:1E:E0
Certificate issuer:       /CN=BC4626991569184D81CCF322C25715DD37F1D01B
Certificate serial:       1CB52D8F4BAB99F142EF242A05EE97EA0FDAA2D3
Authority key identifier: BC:46:26:99:15:69:18:4D:81:CC:F3:22:C2:57:15:DD:37:F1:D0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/34352e3137392e38382e302f32322d3332203d3e20323639303730.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     269070
IP address blocks:        45.179.88.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b5:2d:8f:4b:ab:99:f1:42:ef:24:2a:05:ee:97:ea:0f:da:a2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC4626991569184D81CCF322C25715DD37F1D01B
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:04:4f:3b:22:3d:d2:d8:6e:56:32:f9:a4:10:
                    c1:fe:b9:34:04:64:a4:06:6a:e4:3c:c7:79:29:a5:
                    2c:27:fe:e7:ff:21:c0:78:32:e1:df:f8:2c:c7:0b:
                    82:c9:99:d7:40:0c:32:7b:26:5b:46:ce:ba:25:98:
                    db:56:70:68:5b:2b:89:51:04:f1:56:df:86:9d:9a:
                    5b:cc:79:7f:68:8f:dd:c1:36:4e:bd:9c:33:b0:0b:
                    b1:a4:e2:62:6d:0a:14:f3:a2:db:83:12:46:1c:8f:
                    b4:d6:1e:2d:a6:86:d0:14:25:50:4c:b8:dd:2d:65:
                    02:0e:52:26:90:4c:a8:41:f3:cc:60:c8:2b:93:92:
                    83:2f:e8:62:95:b4:94:6c:08:d2:e9:ea:10:7b:ab:
                    31:1d:f6:5c:c3:3d:f4:9d:bb:55:32:82:1a:96:18:
                    f1:b5:b2:64:bb:16:7e:59:9d:23:20:bc:2d:ed:74:
                    a0:9c:4f:ce:cc:94:e8:65:64:c3:8b:32:b0:9e:ef:
                    f5:b6:7d:f4:6c:5b:a0:ef:51:64:28:aa:52:3b:e7:
                    c0:85:48:46:72:b8:36:e8:ce:5a:50:59:5d:14:59:
                    f7:fa:21:08:5d:6b:ee:20:99:1b:d1:86:ab:b6:a2:
                    d6:51:1a:73:92:cc:af:9d:00:3a:e6:43:32:b1:63:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E2:1D:96:8C:FC:28:34:22:B7:CA:4E:A1:E6:AC:CB:D3:F4:1E:E0
            X509v3 Authority Key Identifier:
                keyid:BC:46:26:99:15:69:18:4D:81:CC:F3:22:C2:57:15:DD:37:F1:D0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/34352e3137392e38382e302f32322d3332203d3e20323639303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:19:1d:d8:73:30:08:72:15:a9:38:c8:92:f6:b8:d2:bf:be:
         53:43:31:7b:67:fd:43:67:37:3c:87:f8:ab:a1:ec:85:cd:7c:
         85:f1:3e:8a:8b:92:7c:ba:91:07:79:11:0e:2f:eb:32:e5:9b:
         b4:90:63:5a:6a:ae:aa:19:b0:b0:11:27:b7:ce:2c:ea:80:6c:
         9f:83:17:9a:8d:0b:3d:9e:24:ac:35:2a:ee:b7:59:09:44:cd:
         0f:f1:83:e0:4b:8b:55:50:6f:0b:5b:33:d2:93:b4:6e:07:a0:
         72:2c:25:8c:53:1f:90:f4:cb:e7:4e:c6:b5:5e:71:ae:b5:77:
         6d:10:77:11:3a:96:71:95:87:3c:41:9c:76:b8:30:15:65:72:
         24:94:a2:6c:39:fa:3b:34:7a:c2:55:bd:37:56:88:8a:21:35:
         c9:4d:0b:df:07:87:bc:2b:20:d9:2b:80:58:a4:2e:41:90:49:
         da:83:7b:e4:0c:19:06:8a:a2:5b:9c:18:6a:a4:19:68:96:61:
         61:c3:05:c6:03:b7:b7:35:42:ef:d2:10:f9:ee:5c:82:ba:33:
         5b:eb:77:19:2f:70:50:ad:27:fa:c7:00:86:51:89:1b:13:54:
         7e:82:22:2b:5d:53:0f:53:c0:51:fa:bc:76:a0:30:12:7e:59:
         bc:69:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:22:29 2025 by rpki-client