Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa
File:                     34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa (raw, json)
Hash identifier:          y9Rdjx1lpt6Xh/Mkl1iY/K3eEc6MB6x1AvOdsUu+m44=
Subject key identifier:   FA:2B:D3:7B:DC:0A:5D:A2:0E:4E:46:D5:40:7C:1E:CE:CF:25:F8:B2
Certificate issuer:       /CN=30C124FDC8D6BEBE26543F78B069AB896B0FF4EE
Certificate serial:       5CE42A8281DAD16211B333CED048F7D5C69859FC
Authority key identifier: 30:C1:24:FD:C8:D6:BE:BE:26:54:3F:78:B0:69:AB:89:6B:0F:F4:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa
Signing time:             Fri 17 Jan 2025 20:22:58 +0000
ROA not before:           Fri 17 Jan 2025 20:17:58 +0000
ROA not after:            Fri 16 Jan 2026 20:22:58 +0000
asID:                     269529
IP address blocks:        45.188.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e4:2a:82:81:da:d1:62:11:b3:33:ce:d0:48:f7:d5:c6:98:59:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30C124FDC8D6BEBE26543F78B069AB896B0FF4EE
        Validity
            Not Before: Jan 17 20:17:58 2025 GMT
            Not After : Jan 16 20:22:58 2026 GMT
        Subject: CN=FA2BD37BDC0A5DA20E4E46D5407C1ECECF25F8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:12:bd:d8:62:a2:57:73:60:71:3d:ea:00:
                    fa:ce:ec:48:b9:c3:14:e7:7b:f8:61:88:96:b6:23:
                    6a:38:ff:d8:da:b2:4f:d5:fc:b6:91:83:78:9f:bf:
                    71:3e:2b:6c:7f:22:7e:82:79:89:35:23:18:08:ff:
                    d1:84:e4:c7:46:2a:f3:b4:25:21:42:47:cf:b8:0a:
                    a6:92:0d:75:ac:11:d0:6b:ed:5f:3e:59:7c:a8:48:
                    a0:f6:1d:98:22:86:7c:23:d2:1c:70:31:8b:94:8b:
                    77:4b:80:d1:8c:61:46:fd:e4:85:0f:fe:01:84:0d:
                    a8:75:a5:c3:62:e1:dd:b1:b7:85:d0:8b:ca:8e:c0:
                    ac:3f:7e:95:4a:85:bc:55:2e:75:41:51:79:2b:b4:
                    1a:dc:91:cf:cf:f0:38:41:60:c1:4e:a0:97:04:13:
                    71:77:cf:1e:17:62:d9:1f:a0:40:6d:4c:1a:26:8b:
                    b1:a9:27:76:d4:1e:df:42:87:77:5b:81:46:fb:4c:
                    74:a4:91:db:e9:45:ce:d3:02:57:01:24:5b:ca:e6:
                    e3:b6:2c:33:83:d4:e4:86:81:60:f8:c5:8c:a7:91:
                    ad:27:07:55:37:fe:6e:ba:e8:73:f9:3f:2f:0c:ec:
                    26:e7:05:62:c2:48:7f:ad:ff:66:81:05:f3:3f:ef:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2B:D3:7B:DC:0A:5D:A2:0E:4E:46:D5:40:7C:1E:CE:CF:25:F8:B2
            X509v3 Authority Key Identifier:
                keyid:30:C1:24:FD:C8:D6:BE:BE:26:54:3F:78:B0:69:AB:89:6B:0F:F4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:83:b3:3a:01:20:d8:a4:0c:a6:0f:aa:75:c5:d8:00:8e:ad:
         4f:7e:5f:de:08:26:cf:cd:ec:7e:16:b4:66:c1:77:22:f6:77:
         14:53:41:b8:aa:1e:b7:0c:ef:4f:8c:cc:90:20:5e:2d:3c:05:
         1c:87:46:45:e0:26:fb:0d:17:11:b0:05:a4:fb:15:73:2a:b8:
         38:91:cd:28:87:43:8b:07:84:de:93:dd:06:22:2c:a5:79:d0:
         f0:c9:b1:53:57:4d:9d:ab:45:d0:21:fa:00:b3:80:c4:e2:bb:
         09:52:5b:dd:ad:05:a0:66:5b:59:28:8a:9c:69:b3:97:7f:bc:
         c6:2b:90:34:fe:22:64:83:87:0e:05:b9:c7:69:9d:e6:36:1e:
         6d:51:e2:69:7b:44:94:bd:83:33:30:0f:6a:fd:13:10:02:1d:
         10:57:9f:4b:1d:92:a5:9e:dc:73:64:ef:ba:18:e7:94:db:46:
         54:0b:ca:4d:c5:9b:c3:96:6f:21:28:8e:cb:bb:d5:d1:93:e0:
         a8:c5:1f:e3:65:94:5b:ea:32:4b:2c:a8:14:89:a8:9c:e2:d0:
         a8:31:9d:37:44:a6:90:b7:28:3c:4d:3b:09:53:d1:0d:72:8c:
         00:dc:40:d6:d9:ef:d9:98:4b:38:8f:28:d8:62:45:38:ea:b4:
         87:0b:f0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:08 2025 by rpki-client