Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136332e302f32342d3234203d3e20323639373234.roa
File:                     34352e3138392e3136332e302f32342d3234203d3e20323639373234.roa (raw, json)
Hash identifier:          NPsSm8ZKWUlUUlSryKWzOIEsmg/9RItAblifInQ8prc=
Subject key identifier:   F0:6C:7D:66:DF:49:6F:CD:07:85:38:4A:18:89:F0:30:4C:96:E2:D7
Certificate issuer:       /CN=E4D6F69AC5581A8F3760E52E48C0A165A0463D57
Certificate serial:       1A30576582CBBFEBF7432A8FA09A7DA6D40D9D27
Authority key identifier: E4:D6:F6:9A:C5:58:1A:8F:37:60:E5:2E:48:C0:A1:65:A0:46:3D:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136332e302f32342d3234203d3e20323639373234.roa
Signing time:             Tue 04 Feb 2025 19:48:19 +0000
ROA not before:           Tue 04 Feb 2025 19:43:19 +0000
ROA not after:            Tue 03 Feb 2026 19:48:19 +0000
asID:                     269724
IP address blocks:        45.189.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:30:57:65:82:cb:bf:eb:f7:43:2a:8f:a0:9a:7d:a6:d4:0d:9d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D6F69AC5581A8F3760E52E48C0A165A0463D57
        Validity
            Not Before: Feb  4 19:43:19 2025 GMT
            Not After : Feb  3 19:48:19 2026 GMT
        Subject: CN=F06C7D66DF496FCD0785384A1889F0304C96E2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:65:44:92:33:56:39:f2:52:53:e5:cb:7d:
                    02:81:48:76:68:08:a4:80:0c:ba:86:84:d2:85:7f:
                    a1:8f:7c:05:b4:4f:80:a0:a9:6a:87:b6:e3:54:0a:
                    7d:a0:aa:88:3f:cf:5a:0b:b7:b2:0b:7a:ee:b8:31:
                    c4:3a:a4:4f:19:3d:6e:5d:e1:21:ef:4c:1f:59:ab:
                    88:b4:c9:6d:6d:a0:42:ce:e2:05:52:85:69:a5:fe:
                    6a:2a:c5:87:5a:fd:a0:5f:ac:ec:9e:f7:ee:8e:c0:
                    6c:b5:7c:6b:1f:23:ea:e8:a9:36:80:ee:86:91:7c:
                    ee:40:13:4b:31:87:6f:94:e9:8d:8d:a5:44:67:1a:
                    9f:6d:00:a9:56:94:8d:fe:11:1b:54:77:e9:a9:a1:
                    42:aa:23:35:89:9e:81:5e:43:f5:53:da:2e:4a:6a:
                    f8:65:2a:06:ad:fc:21:6d:60:ed:ea:37:75:3e:1c:
                    43:f1:ae:2a:f1:e2:3b:94:47:53:b4:33:00:f1:bb:
                    8a:5b:4e:84:ff:d0:11:4c:2b:1f:4f:2c:df:bc:86:
                    7f:59:a1:42:9e:90:e0:07:90:cd:8b:04:86:6c:bb:
                    2f:27:60:62:f4:f8:9a:eb:0a:75:3e:b5:0e:28:a6:
                    66:cf:de:e4:e0:76:72:92:9d:e3:5a:2a:d4:58:c4:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6C:7D:66:DF:49:6F:CD:07:85:38:4A:18:89:F0:30:4C:96:E2:D7
            X509v3 Authority Key Identifier:
                keyid:E4:D6:F6:9A:C5:58:1A:8F:37:60:E5:2E:48:C0:A1:65:A0:46:3D:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136332e302f32342d3234203d3e20323639373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c3:52:41:98:7e:59:56:44:17:71:46:6b:ae:75:9d:5c:8b:
         5e:c3:1c:b4:ad:8d:36:d8:d7:03:a0:e1:7c:08:30:29:54:b1:
         bf:9d:d1:8e:f8:a5:bc:3a:92:d5:9c:99:68:69:b2:61:c1:cb:
         99:df:8e:b9:f4:38:ad:5f:8b:57:09:24:d3:76:fc:d4:02:94:
         d5:7a:7f:3c:80:1e:76:75:42:54:3a:61:ab:b9:5a:7a:58:2f:
         26:b3:92:69:9c:07:f2:17:4f:19:49:44:5f:eb:08:b1:30:db:
         dc:2c:02:e9:56:48:d9:da:26:0a:aa:12:e2:f4:2c:a0:d8:f5:
         28:0c:a6:41:e6:9b:d9:68:2b:cd:45:0c:df:9c:fd:35:26:52:
         11:a1:3d:4f:91:27:e8:f1:f1:97:39:80:21:33:85:c0:5e:f8:
         c7:b4:d4:e5:97:e6:6f:e3:a7:9b:4c:4e:f5:cf:da:44:ef:ae:
         6f:57:de:0f:46:b1:52:f3:c6:7f:4d:cc:fb:07:02:69:b9:5f:
         4e:01:1b:f2:ee:c8:16:d4:de:aa:d8:ff:c0:da:e6:1b:f9:b4:
         eb:5b:15:e4:e4:83:c0:5a:61:b7:f6:77:41:d9:76:70:e5:53:
         aa:0a:f4:07:99:7c:9e:bb:eb:f9:42:f9:7e:83:ee:87:cf:e6:
         ea:38:f2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:08:55 2025 by rpki-client