Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3137302e3234352e3232342e302f32322d3234203d3e20323633313435.roa
File:                     3137302e3234352e3232342e302f32322d3234203d3e20323633313435.roa (raw, json)
Hash identifier:          fD6su5SfxDHN6rqyqGgzJOzKc5dPxg0k72heEkRds0A=
Subject key identifier:   70:9A:62:4C:7E:C8:8E:13:72:5B:2F:6A:8A:65:65:5A:E1:46:1C:66
Certificate issuer:       /CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
Certificate serial:       238EB84BABEDF3C8BD23A8CB4705D3672E4AF5D7
Authority key identifier: FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3137302e3234352e3232342e302f32322d3234203d3e20323633313435.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     263145
IP address blocks:        170.245.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8e:b8:4b:ab:ed:f3:c8:bd:23:a8:cb:47:05:d3:67:2e:4a:f5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:28:92:13:c4:00:33:1f:80:d9:02:ee:c6:
                    6b:fc:8f:ef:05:8e:bf:4f:1e:ea:7f:a1:02:5d:64:
                    9e:f3:06:f7:e8:e9:5b:20:1e:c6:a8:e3:b1:71:92:
                    25:ce:dd:62:15:d6:fd:15:a0:65:d7:ac:98:df:c3:
                    1c:d3:ca:18:9f:41:80:31:96:5f:2e:99:1e:71:47:
                    f6:bc:09:d1:00:09:3d:28:81:bc:f6:ee:f6:07:fb:
                    ec:9e:38:f7:70:29:14:bc:27:d0:20:8e:8b:34:51:
                    00:d2:64:46:6a:01:b8:f6:df:eb:64:52:2a:bc:b7:
                    0a:2d:ca:d4:f9:32:cb:66:b7:c6:4c:d7:b7:f3:84:
                    82:9b:a6:d3:57:62:08:18:a2:29:21:47:5f:22:d9:
                    c1:4e:1a:44:51:b8:0c:a2:df:ff:d1:93:7d:28:9c:
                    9c:a2:18:f1:be:f6:cb:89:15:c1:d1:81:bb:7d:c0:
                    70:c7:0e:9b:9f:0d:b2:74:aa:f9:34:03:d9:3b:4f:
                    8c:4b:c7:de:d6:60:98:c5:8f:db:4c:bf:b3:df:a1:
                    a3:d3:57:b7:db:24:c1:01:b4:f1:b2:e5:83:52:4a:
                    41:e7:5f:8e:70:c5:61:92:18:8c:80:46:d2:ee:2f:
                    06:a9:af:90:d5:70:77:db:69:47:8a:2d:5b:e7:49:
                    28:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9A:62:4C:7E:C8:8E:13:72:5B:2F:6A:8A:65:65:5A:E1:46:1C:66
            X509v3 Authority Key Identifier:
                keyid:FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3137302e3234352e3232342e302f32322d3234203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:70:80:35:79:ae:74:b6:23:9f:3b:d7:35:16:b2:f4:a0:93:
         db:35:3e:4b:8d:c1:11:50:54:5d:01:ae:15:5e:cb:9b:bc:8c:
         e2:eb:dd:1f:6c:15:bf:d0:2e:30:97:b4:60:19:98:07:7b:58:
         ac:aa:e4:20:07:c5:bb:c2:b3:06:ee:37:50:7b:e9:87:98:7a:
         b5:de:91:2a:95:cf:c4:92:cb:6b:c6:2b:5e:ce:c5:c5:c4:f9:
         92:10:52:5c:8d:40:e7:6d:b9:9f:df:e6:c3:4d:cf:83:d5:c2:
         b3:48:48:09:33:bc:b0:32:30:41:8f:0e:c6:1f:06:44:d4:57:
         7b:57:13:7c:52:5c:30:b7:a1:c3:c7:ed:fb:24:26:a2:2f:19:
         92:b1:ba:ef:1a:fe:90:c5:3d:4a:d4:d4:ce:c7:46:c7:5a:24:
         95:69:f9:e8:65:a4:04:06:07:92:b9:cf:62:bf:4a:b0:84:bc:
         85:86:a6:2c:ba:ac:56:f7:3e:d9:83:96:ea:44:b7:1d:c1:51:
         2e:e1:99:c2:ed:29:b0:15:68:cb:a0:be:6c:78:df:1a:47:de:
         64:4f:f7:e3:04:34:29:80:88:e4:55:b9:bf:46:4f:ea:46:d6:
         05:cb:8a:f5:7a:d0:d3:ab:83:89:f1:6d:7a:36:a4:d1:64:56:
         82:de:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:38 2025 by rpki-client