Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36312e302f32342d3234203d3e20323639343537.roa
File:                     34352e3138372e36312e302f32342d3234203d3e20323639343537.roa (raw, json)
Hash identifier:          v25wbDF7u7CgoUNk/1crZ9iwEGCs5ch4ehyfdusHwz0=
Subject key identifier:   76:A8:4F:DE:7C:88:75:40:91:BE:E7:0D:1A:A2:D3:95:E2:78:0C:5D
Certificate issuer:       /CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
Certificate serial:       3A76DB23AEBF1263D3615251A2EFC1909298C88E
Authority key identifier: CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36312e302f32342d3234203d3e20323639343537.roa
Signing time:             Mon 17 Feb 2025 19:19:03 +0000
ROA not before:           Mon 17 Feb 2025 19:14:03 +0000
ROA not after:            Mon 16 Feb 2026 19:19:03 +0000
asID:                     269457
IP address blocks:        45.187.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:76:db:23:ae:bf:12:63:d3:61:52:51:a2:ef:c1:90:92:98:c8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
        Validity
            Not Before: Feb 17 19:14:03 2025 GMT
            Not After : Feb 16 19:19:03 2026 GMT
        Subject: CN=76A84FDE7C88754091BEE70D1AA2D395E2780C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:a9:e1:64:ac:8f:f0:97:83:5e:a1:f9:46:
                    ac:eb:a0:40:46:d3:df:79:f1:15:80:44:89:45:22:
                    4e:39:0b:5b:dc:d5:af:ea:14:35:3a:19:21:51:c7:
                    4f:0a:7e:1e:d9:ed:a3:1c:cf:7e:b2:7f:6c:f8:23:
                    ae:67:b1:f6:cd:71:f5:24:f7:5c:b1:6a:72:0b:9b:
                    aa:8d:79:ec:64:7f:2c:99:84:e5:f2:ac:0d:9f:99:
                    b0:d7:06:15:7d:db:58:10:05:8b:3d:c8:60:de:ce:
                    5f:66:44:7f:f5:70:ab:80:00:2d:2c:b0:e1:ca:71:
                    a5:0a:bd:96:d7:9a:33:cb:8f:6e:09:6a:d9:67:04:
                    c2:9b:3d:23:65:85:f2:b8:8e:de:a4:41:6b:f9:b5:
                    cf:4b:1c:8a:81:ae:1d:a6:9c:20:ea:00:55:df:77:
                    69:98:01:70:49:53:24:5f:c1:33:a3:13:6e:2f:67:
                    a7:7e:b1:8f:00:13:6f:17:0d:eb:00:64:d0:38:99:
                    e3:03:5f:0d:9c:49:f4:23:9c:df:9b:00:cd:53:3a:
                    e3:63:39:53:6f:4f:1c:b7:36:96:80:33:e1:e3:39:
                    28:76:8b:05:58:ee:57:9d:e8:e6:4f:08:0e:41:c7:
                    4e:fe:51:74:8d:50:07:40:dd:3e:12:13:7d:27:e7:
                    35:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A8:4F:DE:7C:88:75:40:91:BE:E7:0D:1A:A2:D3:95:E2:78:0C:5D
            X509v3 Authority Key Identifier:
                keyid:CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36312e302f32342d3234203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:66:82:76:b5:00:ca:df:25:63:d1:d7:67:f5:25:2f:6a:b3:
         ae:e6:6f:39:d9:4b:0f:a5:3c:17:b5:90:38:70:84:ef:ef:76:
         81:e0:e0:a5:06:e1:74:57:ef:28:79:2f:b0:48:8c:54:59:26:
         e9:5a:89:f2:8f:f2:3c:b9:25:32:96:de:2b:6a:12:c4:75:e4:
         fd:1a:4d:85:52:f3:c9:7d:1c:cd:af:ef:c8:31:24:88:d6:c3:
         12:7e:1a:98:89:f2:a1:2d:29:c5:5b:a6:dd:75:68:42:de:11:
         e6:a8:17:24:fe:57:a3:62:54:36:2c:e3:08:0b:b9:f7:ce:9f:
         cb:c1:89:39:87:31:97:d0:89:df:f8:6c:07:cc:7d:16:d5:66:
         d6:db:48:0c:c1:62:ca:bb:f2:d2:63:46:ab:f1:f1:b8:ff:d9:
         84:7e:69:f8:5f:05:ac:cf:d7:8e:2e:02:04:84:84:61:57:02:
         ea:4e:37:3f:8c:7b:f8:3a:21:72:3f:e0:76:1f:5b:d1:8a:fb:
         f3:96:48:09:8c:bc:63:1b:39:0d:69:8d:dd:ab:0a:75:61:b1:
         81:b8:a7:15:2c:a1:4b:27:48:93:7e:7c:09:bf:58:b1:e8:42:
         61:0b:b9:9d:dc:f2:9b:e0:7d:e2:2b:4b:72:9c:91:70:11:2f:
         ce:26:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:03:34 2025 by rpki-client