Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32322d3234203d3e20323639353339.roa
File:                     34352e3138372e3136302e302f32322d3234203d3e20323639353339.roa (raw, json)
Hash identifier:          2bx46VQMh8Rsx1KohlqlDd6PYs+TSGlgfK/6vhNVQqU=
Subject key identifier:   D3:23:EB:86:05:F4:2E:F6:23:BA:75:44:31:1D:6F:33:00:4A:20:3B
Certificate issuer:       /CN=54D4593134F7F511D48D82945BAD14FF2A1EC182
Certificate serial:       47DD6BD9062534323D91CDD8E7FFCB8B26A6F1AB
Authority key identifier: 54:D4:59:31:34:F7:F5:11:D4:8D:82:94:5B:AD:14:FF:2A:1E:C1:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54D4593134F7F511D48D82945BAD14FF2A1EC182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32322d3234203d3e20323639353339.roa
Signing time:             Mon 03 Mar 2025 21:45:41 +0000
ROA not before:           Mon 03 Mar 2025 21:40:41 +0000
ROA not after:            Mon 02 Mar 2026 21:45:41 +0000
asID:                     269539
IP address blocks:        45.187.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:dd:6b:d9:06:25:34:32:3d:91:cd:d8:e7:ff:cb:8b:26:a6:f1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54D4593134F7F511D48D82945BAD14FF2A1EC182
        Validity
            Not Before: Mar  3 21:40:41 2025 GMT
            Not After : Mar  2 21:45:41 2026 GMT
        Subject: CN=D323EB8605F42EF623BA7544311D6F33004A203B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:c8:47:42:24:c4:57:c2:4f:a5:98:4a:d3:
                    90:33:51:c7:7a:b2:2e:37:11:08:11:be:60:1c:c7:
                    fb:c9:cc:82:b3:37:fb:28:39:90:cf:eb:3d:c3:a4:
                    35:6e:64:29:d4:fd:84:56:8c:cc:e5:75:fc:c0:b0:
                    e3:cc:43:78:77:0d:3c:78:49:93:3e:5c:7c:bd:c4:
                    e8:94:6d:18:f4:83:e9:5a:a2:3d:12:4b:d6:bd:c2:
                    94:74:65:f0:6a:98:d1:72:82:ef:e3:c4:80:57:9b:
                    a6:cd:84:59:02:f5:ed:00:ab:35:6f:64:72:b3:53:
                    78:fc:f6:50:1f:f2:61:9c:68:a6:ee:bd:50:99:a4:
                    7d:bf:5b:c9:93:6a:ac:c5:d4:f4:b2:30:62:a0:d6:
                    d9:b9:63:e7:cd:03:2b:2e:1c:44:0a:3d:01:e1:22:
                    9c:2f:40:f1:77:59:77:cf:f3:74:a6:b7:46:ff:8d:
                    34:7d:71:b8:77:b9:a2:2e:cb:2c:eb:e7:c6:f4:93:
                    df:50:b7:df:7a:c2:af:a0:26:81:8d:3c:8f:b8:94:
                    e5:c1:a3:fd:66:fb:45:41:c3:50:b4:95:50:6b:a4:
                    d4:5a:80:aa:2a:0d:73:da:85:69:3b:6c:cd:65:7c:
                    84:b2:c3:9d:5c:b8:84:13:96:39:c9:b4:85:bb:56:
                    b1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:23:EB:86:05:F4:2E:F6:23:BA:75:44:31:1D:6F:33:00:4A:20:3B
            X509v3 Authority Key Identifier:
                keyid:54:D4:59:31:34:F7:F5:11:D4:8D:82:94:5B:AD:14:FF:2A:1E:C1:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/54D4593134F7F511D48D82945BAD14FF2A1EC182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54D4593134F7F511D48D82945BAD14FF2A1EC182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32322d3234203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:3d:e4:c7:f6:23:fa:03:cd:24:e7:f9:61:b2:3a:5e:8a:e0:
         4e:0e:9f:5a:c7:58:4a:6d:39:99:07:b2:0e:af:f1:e6:fa:5d:
         49:7e:50:ae:4e:2b:88:73:34:a3:29:53:79:8a:1f:c5:27:b4:
         28:c8:ef:56:5a:46:ab:0d:2f:b2:26:e8:cf:bc:49:4c:94:fe:
         2c:12:c0:99:0a:3c:0c:12:39:c0:7b:ac:8d:ec:79:13:0f:71:
         3f:d3:9e:1f:12:3d:02:ff:48:4a:f0:04:ba:a0:2f:12:8c:34:
         20:51:75:f8:bc:8c:2a:58:1f:d3:ac:d7:61:f2:aa:84:a8:2e:
         14:3b:3b:55:f2:ac:d6:48:58:f0:93:1f:d0:88:46:7c:31:26:
         53:1c:86:14:0e:91:8a:81:c7:30:4f:e8:34:cf:5d:1f:98:94:
         e2:61:ae:b0:c4:5b:04:69:eb:7e:eb:19:10:ae:14:49:b8:9a:
         dc:fd:5c:61:8e:ae:6e:fe:b2:97:31:d6:6f:ca:c9:16:17:c7:
         55:93:f0:6a:6f:0e:39:c8:6e:3f:6e:15:88:48:04:12:64:27:
         39:f3:07:87:42:ca:7f:7a:7b:25:78:c2:92:28:a1:4d:df:c2:
         14:b8:70:9a:91:6b:d4:71:26:1a:14:ab:eb:d9:c5:9a:72:75:
         9c:15:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:50:51 2025 by rpki-client