Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa
File:                     34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (raw, json)
Hash identifier:          /5N6uVDmo8aSR0R2sAVd4qSiFfebt5SpnuDC1CuvWIo=
Subject key identifier:   A4:0D:60:3C:0E:77:1E:C4:3B:E9:AB:0B:7F:97:1F:6F:91:22:F1:1C
Certificate issuer:       /CN=977763171B41C527CE9BEBF931FB49B2ED545A8B
Certificate serial:       3035ACCA6B8A351784221F0D17A527371D9B2217
Authority key identifier: 97:77:63:17:1B:41:C5:27:CE:9B:EB:F9:31:FB:49:B2:ED:54:5A:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/977763171B41C527CE9BEBF931FB49B2ED545A8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa
Signing time:             Wed 13 Mar 2024 14:19:16 +0000
ROA not before:           Wed 13 Mar 2024 14:14:16 +0000
ROA not after:            Wed 12 Mar 2025 14:19:16 +0000
asID:                     269131
IP address blocks:        45.180.56.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:35:ac:ca:6b:8a:35:17:84:22:1f:0d:17:a5:27:37:1d:9b:22:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977763171B41C527CE9BEBF931FB49B2ED545A8B
        Validity
            Not Before: Mar 13 14:14:16 2024 GMT
            Not After : Mar 12 14:19:16 2025 GMT
        Subject: CN=A40D603C0E771EC43BE9AB0B7F971F6F9122F11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:ae:d3:a0:6b:0b:5a:6e:86:50:53:a8:10:
                    1f:29:e3:37:6b:7f:97:2c:e4:1c:cf:fb:a3:ba:ef:
                    e5:06:a1:6e:16:ef:25:07:ca:fb:e9:2e:d2:34:e7:
                    52:72:c1:99:08:28:56:d0:c1:ea:05:6b:90:fc:e8:
                    93:45:21:17:df:d2:37:ba:e4:5d:59:7d:8b:1f:d8:
                    82:32:36:4f:07:41:93:5a:6a:03:74:b0:dd:b6:ef:
                    f3:2b:a0:86:10:b6:80:c1:18:7a:44:bc:80:e1:df:
                    6b:a7:11:46:5a:85:38:bc:00:72:d0:17:18:ca:ea:
                    33:76:1c:b2:af:d2:a3:99:f3:9c:c6:09:87:fc:08:
                    52:e6:95:b3:e0:6f:61:b2:1e:c9:51:ed:de:b6:90:
                    a5:eb:09:13:f2:14:4c:3e:0d:36:71:9a:66:06:32:
                    ed:ea:de:b5:f8:2f:90:59:b3:6a:da:79:7e:6f:08:
                    c8:31:3d:39:45:74:e8:64:93:5c:62:05:e8:15:59:
                    ce:39:56:3d:43:fa:a6:02:ff:9e:fc:6b:54:18:a2:
                    fa:84:68:93:fb:5c:b2:d9:18:45:15:90:79:b6:80:
                    72:5c:66:96:33:31:75:76:dc:87:9f:86:04:5a:df:
                    89:1b:de:7b:39:e0:4a:16:18:ac:f6:a6:b7:2f:b5:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0D:60:3C:0E:77:1E:C4:3B:E9:AB:0B:7F:97:1F:6F:91:22:F1:1C
            X509v3 Authority Key Identifier:
                keyid:97:77:63:17:1B:41:C5:27:CE:9B:EB:F9:31:FB:49:B2:ED:54:5A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/977763171B41C527CE9BEBF931FB49B2ED545A8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/977763171B41C527CE9BEBF931FB49B2ED545A8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:3e:61:cc:f2:b3:d9:ac:23:4a:5e:3b:a5:5d:25:2f:42:72:
         19:99:be:4c:60:e4:ac:e3:ed:cc:11:c4:83:d3:53:9d:21:e6:
         fa:7d:f4:d7:e9:9d:f7:d1:41:3f:00:a3:c0:5a:3d:7b:e2:40:
         5b:1b:83:5c:b6:2e:50:47:0e:67:49:e1:3f:1d:62:c9:96:88:
         5d:85:3d:72:3c:7e:7b:df:d1:f7:71:2c:59:22:b2:5c:f7:a8:
         e5:5b:4a:83:2c:8a:f1:45:8a:1b:3e:a5:40:06:f6:ee:09:0e:
         6b:09:7b:94:97:94:5a:92:a2:9e:d0:27:1e:e9:6c:41:01:ab:
         8f:1e:ae:dd:f3:0a:dc:c6:02:4a:e9:fd:54:6d:b2:18:ff:a4:
         b9:2d:10:18:3e:a4:60:2b:8d:d9:ed:c8:c8:9d:e4:bb:eb:d9:
         4f:b7:25:72:8e:60:46:1e:d3:e3:2f:5b:f6:18:09:74:4b:96:
         c0:e7:8d:1a:37:4e:0c:f5:b1:2c:39:17:b9:39:aa:48:d3:92:
         41:1f:ac:55:63:bb:a9:75:4a:e0:ab:a2:c7:c8:70:a1:fa:14:
         78:1a:b7:f8:92:6d:8b:c5:18:2c:25:47:39:df:1f:d7:a6:0d:
         3e:f2:61:f7:7e:3e:54:2b:82:e5:c7:67:a9:01:ed:2c:41:a0:
         ea:ec:4d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:57 2025 by rpki-client