Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32322d3232203d3e20323639353239.roa
File:                     34352e3138382e3138302e302f32322d3232203d3e20323639353239.roa (raw, json)
Hash identifier:          mrd6WuIKEKVXyxh6xerlUIijRDiJRf3osTq85fYc1zI=
Subject key identifier:   12:5C:9D:73:0C:E8:F4:EF:2D:0E:E9:9A:18:3D:67:E3:68:02:1C:78
Certificate issuer:       /CN=30C124FDC8D6BEBE26543F78B069AB896B0FF4EE
Certificate serial:       27FF96ABF038B271AC0C673C552A9844DBE5EB7C
Authority key identifier: 30:C1:24:FD:C8:D6:BE:BE:26:54:3F:78:B0:69:AB:89:6B:0F:F4:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32322d3232203d3e20323639353239.roa
Signing time:             Fri 17 Jan 2025 20:22:59 +0000
ROA not before:           Fri 17 Jan 2025 20:17:59 +0000
ROA not after:            Fri 16 Jan 2026 20:22:59 +0000
asID:                     269529
IP address blocks:        45.188.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ff:96:ab:f0:38:b2:71:ac:0c:67:3c:55:2a:98:44:db:e5:eb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30C124FDC8D6BEBE26543F78B069AB896B0FF4EE
        Validity
            Not Before: Jan 17 20:17:59 2025 GMT
            Not After : Jan 16 20:22:59 2026 GMT
        Subject: CN=125C9D730CE8F4EF2D0EE99A183D67E368021C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:66:03:6f:2f:97:de:e5:19:1e:ad:bf:39:
                    56:b8:01:bb:26:16:21:c3:ce:c1:ff:42:78:90:57:
                    b5:27:6d:6e:10:0c:16:cb:d5:45:52:b2:40:6f:5f:
                    e5:c3:05:9d:18:8b:6e:9f:f2:fa:c6:6e:c3:64:ac:
                    df:41:28:8a:2f:24:26:e5:fd:ad:97:87:a9:1d:61:
                    aa:63:86:dd:ff:1c:7e:42:e8:83:ac:d8:44:06:c5:
                    34:17:23:75:19:0f:40:85:3c:21:d2:00:e8:78:55:
                    c8:c2:58:17:db:54:74:1e:2e:3f:1d:b7:99:16:4e:
                    93:d1:00:d4:28:e1:ab:a6:87:ed:f9:51:d2:8f:ae:
                    92:cf:7e:f0:ab:1b:d3:8a:00:b5:30:6c:20:89:a1:
                    64:83:fa:5d:fb:3a:8d:6d:14:93:4c:98:f7:07:7a:
                    92:99:5e:7c:9e:0d:73:d5:6e:84:7b:fd:1b:9f:3c:
                    69:4b:08:46:01:94:c2:87:fc:29:80:ee:b0:3e:4f:
                    15:e3:6e:49:06:d0:ce:ac:72:4e:f8:f4:e3:c5:d1:
                    01:56:8e:41:67:4a:e5:f6:a1:d0:78:d5:d1:40:8d:
                    d4:8c:ce:49:84:33:2b:44:ef:4b:71:72:6f:e5:67:
                    ff:3d:db:c5:b5:5f:64:b1:da:f4:73:2f:94:60:33:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5C:9D:73:0C:E8:F4:EF:2D:0E:E9:9A:18:3D:67:E3:68:02:1C:78
            X509v3 Authority Key Identifier:
                keyid:30:C1:24:FD:C8:D6:BE:BE:26:54:3F:78:B0:69:AB:89:6B:0F:F4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32322d3232203d3e20323639353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:4f:55:c1:2e:5f:01:68:20:34:8d:69:b1:57:e3:0d:40:
         fe:44:a6:fa:f5:62:ad:96:b3:b3:c7:fe:6e:d8:16:01:b4:6d:
         17:5e:8b:c5:92:83:b5:c0:e0:c3:5d:02:26:b0:96:a2:e6:04:
         0d:4c:31:e4:66:1f:05:57:5b:c7:1b:15:46:3d:04:eb:58:70:
         98:a7:a8:b0:e6:d2:48:5e:e3:bc:5e:bd:2d:6c:5e:d4:c7:39:
         f3:17:be:fa:65:17:8f:14:91:4b:08:b4:18:50:fa:06:00:7e:
         30:a1:26:9f:2d:f3:e5:7a:81:f4:38:36:ea:67:b0:c4:dc:f3:
         e8:1c:60:35:6e:44:88:92:8e:bc:34:d8:91:1d:10:62:6a:da:
         63:f3:26:20:49:06:15:4b:7d:c2:03:05:1d:91:48:36:fd:80:
         dc:f6:3a:81:44:4b:50:4a:f8:bb:d6:9b:c2:27:ce:89:bc:7d:
         f7:f3:d4:49:38:ae:78:e6:4e:1d:c0:84:ff:f9:84:11:b3:26:
         d5:6d:90:78:d1:82:dc:c5:44:bf:82:87:4f:86:1d:42:0a:45:
         5b:cd:c5:52:17:8b:68:93:6b:60:0c:60:1c:ab:61:6f:da:7a:
         58:cf:cc:b2:31:fb:c2:99:79:f2:a1:22:9a:b2:1e:bb:b5:16:
         f1:d7:74:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:01 2025 by rpki-client