Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/34352e3136302e3130312e302f32342d3332203d3e20323638343036.roa
File:                     34352e3136302e3130312e302f32342d3332203d3e20323638343036.roa (raw, json)
Hash identifier:          uTbL03jOr1nnQhGn0uyG8p2CnW5LbeOzsZkO7Lal1nQ=
Subject key identifier:   6D:92:1B:5D:63:3C:E9:45:F8:A3:1C:BB:16:29:2F:FA:BC:DC:03:A3
Certificate issuer:       /CN=4852815508EC2F58157FB70DFE5F018163E5DD67
Certificate serial:       25ECAF513AFA50CB1470F686FBB2C2CA3F861B75
Authority key identifier: 48:52:81:55:08:EC:2F:58:15:7F:B7:0D:FE:5F:01:81:63:E5:DD:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4852815508EC2F58157FB70DFE5F018163E5DD67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/34352e3136302e3130312e302f32342d3332203d3e20323638343036.roa
Signing time:             Mon 08 Jul 2024 13:46:01 +0000
ROA not before:           Mon 08 Jul 2024 13:41:01 +0000
ROA not after:            Mon 07 Jul 2025 13:46:01 +0000
asID:                     268406
IP address blocks:        45.160.101.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ec:af:51:3a:fa:50:cb:14:70:f6:86:fb:b2:c2:ca:3f:86:1b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4852815508EC2F58157FB70DFE5F018163E5DD67
        Validity
            Not Before: Jul  8 13:41:01 2024 GMT
            Not After : Jul  7 13:46:01 2025 GMT
        Subject: CN=6D921B5D633CE945F8A31CBB16292FFABCDC03A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:40:63:40:6b:f0:e8:72:4d:d0:9e:4e:66:de:
                    46:5b:e9:40:a1:66:a6:3b:72:70:6b:a6:4d:34:13:
                    64:de:b6:13:49:3f:68:3c:58:6b:d0:57:2c:a2:1b:
                    3a:b0:d7:1e:a6:d8:b3:73:f7:ab:ab:27:9b:e7:4a:
                    8f:89:ed:af:78:88:58:90:fe:91:b1:68:b3:0d:79:
                    e8:4e:85:ec:b2:56:8f:4f:ae:98:99:d9:92:f6:c4:
                    de:33:39:c8:4e:c0:61:3d:d0:1c:81:87:94:e4:b6:
                    aa:bc:e9:dc:89:f4:a5:34:c6:38:b4:82:4c:22:81:
                    fe:45:f2:43:61:16:7e:b2:30:d2:d3:37:9c:38:03:
                    d4:07:7c:6d:51:c8:33:3a:a4:83:63:58:3d:10:1f:
                    0a:d3:8f:e4:b7:72:92:d9:c7:9a:f5:0f:d5:56:cc:
                    6a:dc:21:6a:30:9f:79:db:f8:b1:9b:f9:5b:1b:9d:
                    4c:55:f5:47:7e:50:a3:86:e0:dc:ce:76:35:d3:e3:
                    bc:24:66:44:fe:1e:75:53:50:38:46:e7:55:bd:2a:
                    86:f7:f0:53:04:01:a6:ff:bb:04:2e:6a:fa:da:20:
                    27:97:ee:53:a7:b2:1e:6b:a2:46:04:5d:cf:5d:21:
                    77:f3:87:79:ce:e3:69:aa:93:a9:d4:d3:cd:28:55:
                    8e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:92:1B:5D:63:3C:E9:45:F8:A3:1C:BB:16:29:2F:FA:BC:DC:03:A3
            X509v3 Authority Key Identifier:
                keyid:48:52:81:55:08:EC:2F:58:15:7F:B7:0D:FE:5F:01:81:63:E5:DD:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/4852815508EC2F58157FB70DFE5F018163E5DD67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4852815508EC2F58157FB70DFE5F018163E5DD67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/34352e3136302e3130312e302f32342d3332203d3e20323638343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:9f:27:43:b3:d8:f2:0c:eb:08:a1:8c:12:47:bc:a2:45:39:
         2a:04:aa:55:2d:96:cc:67:ed:cd:3f:a4:a0:86:64:a3:ed:be:
         6f:41:5f:cf:2e:f6:18:e2:2e:61:23:23:a8:38:0c:4e:25:82:
         dc:22:91:f8:fe:d2:89:4f:4b:08:d6:01:68:35:9b:a2:54:7e:
         3f:7e:55:11:f7:3f:e0:f2:9f:b3:ca:31:1a:e5:51:8d:2e:00:
         3e:bc:0f:65:f3:04:fc:28:14:19:58:14:03:14:fa:c4:24:8a:
         b6:27:44:d3:ca:75:76:a6:b1:47:c0:dd:c1:72:61:54:c5:53:
         c7:e8:5c:d9:03:4a:c2:60:71:0f:ca:06:e4:d3:9b:e5:85:68:
         52:1d:9c:5e:e6:ab:03:f7:2d:1b:4d:d3:32:5a:1c:03:2b:70:
         f7:09:0a:69:8f:f8:3b:4b:55:5b:0d:5e:1d:76:58:f7:29:d6:
         66:3e:42:ff:e1:de:b0:f4:38:7c:da:a3:25:1d:93:28:38:48:
         c0:35:e1:4b:bb:8f:17:6c:4b:e5:88:53:3a:dd:cd:71:4c:89:
         df:c5:50:47:75:49:24:bc:4f:cd:14:4f:95:72:5b:6f:df:d7:
         76:d2:5a:19:79:81:c4:91:c9:8d:fb:e8:70:8e:33:f6:ef:99:
         47:b1:b6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:41:37 2025 by rpki-client