Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa
File:                     34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa (raw, json)
Hash identifier:          xKpccbO2wzlbHbDV3ZJO8ATedkukSYGdQvi151j6L2o=
Subject key identifier:   93:5D:D8:1A:A0:38:7D:89:62:76:81:F3:4F:B1:EC:49:CB:4D:58:09
Certificate issuer:       /CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
Certificate serial:       4BAD24A196509DA58FD59AC88349BA9051B182FA
Authority key identifier: 32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa
Signing time:             Thu 30 Jan 2025 18:32:09 +0000
ROA not before:           Thu 30 Jan 2025 18:27:09 +0000
ROA not after:            Thu 29 Jan 2026 18:32:09 +0000
asID:                     269151
IP address blocks:        45.180.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ad:24:a1:96:50:9d:a5:8f:d5:9a:c8:83:49:ba:90:51:b1:82:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
        Validity
            Not Before: Jan 30 18:27:09 2025 GMT
            Not After : Jan 29 18:32:09 2026 GMT
        Subject: CN=935DD81AA0387D89627681F34FB1EC49CB4D5809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:22:2a:a7:0d:c3:aa:c5:d0:50:a6:2f:c0:
                    96:fd:69:60:7f:4a:c0:07:27:9f:c7:ea:d5:ea:fb:
                    a2:84:a4:5a:80:8a:6e:83:bf:0e:0b:75:c2:4f:09:
                    c1:34:9a:2b:5a:36:94:9e:64:11:61:00:6c:77:fb:
                    20:a9:95:35:80:ce:ca:4b:52:ed:f5:e3:06:6c:9c:
                    11:84:63:95:35:08:0f:15:3b:05:b7:8e:2b:cd:19:
                    30:9d:f4:0e:ca:55:a3:13:01:d0:4e:e4:d1:78:e4:
                    7c:7d:5d:2c:5b:9f:5b:d9:35:2a:ba:79:2b:d3:9b:
                    4b:c4:12:bb:05:b2:d4:9a:8e:cf:06:e1:43:8d:b6:
                    10:53:18:1c:2d:e9:b9:a9:d0:bd:14:c3:94:60:99:
                    a4:72:a3:95:75:62:0c:aa:ff:96:32:c7:4d:cb:28:
                    f4:fc:01:f3:a3:b4:8d:ef:86:de:89:09:42:39:b3:
                    8d:81:fa:b7:aa:5e:e4:36:55:9a:4f:6e:24:6c:f1:
                    f9:7d:c9:18:bd:23:be:a1:4b:8e:47:35:5c:87:0d:
                    07:36:82:68:b5:05:2a:d1:1e:e0:8a:fe:65:35:99:
                    2d:fc:8d:02:6f:e6:66:22:25:9e:c4:24:8e:22:3b:
                    f1:e8:d9:b3:8d:88:b8:4c:20:30:c0:c1:a0:1e:61:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:D8:1A:A0:38:7D:89:62:76:81:F3:4F:B1:EC:49:CB:4D:58:09
            X509v3 Authority Key Identifier:
                keyid:32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:2f:f2:b1:01:2b:cc:64:51:44:4d:58:a4:de:f7:2b:1d:d9:
         a4:79:16:8b:cf:de:f9:7c:e5:1f:c8:27:c6:8d:46:ea:a4:c0:
         76:c4:5e:f4:fb:bc:66:11:21:93:2c:c1:5a:b1:e2:da:97:39:
         91:90:c2:43:5a:97:72:6f:f1:ce:06:bd:7e:ba:94:33:3a:1c:
         1a:13:b0:75:c3:36:dc:1d:e3:2f:6a:1a:35:0b:d0:2e:08:bd:
         45:04:ec:c3:3e:cb:b7:71:70:14:97:be:70:56:2d:d1:bb:98:
         69:cd:16:9b:24:39:ab:6f:00:11:91:b2:90:f0:fd:1c:d4:65:
         c5:67:49:64:6a:3b:9a:a2:fc:d8:81:dc:d1:c3:73:47:1a:ed:
         65:6a:fb:8f:f6:89:37:ad:a6:35:0b:4c:c9:31:cd:e6:ed:9e:
         45:e6:d6:31:de:33:a9:fb:65:ba:21:ae:b7:b6:97:71:31:da:
         bb:fe:63:95:b7:0d:70:ca:c3:5c:aa:b2:e8:ff:88:c3:87:5d:
         b1:38:47:5f:8f:e7:25:77:d0:9b:d7:8b:21:ae:d3:e7:2f:a6:
         4e:f5:58:72:d6:3d:71:b3:8f:e3:d4:eb:c7:01:a0:10:9c:f9:
         fa:07:d2:7f:a8:76:ee:6b:05:ee:93:8f:72:e0:11:79:e3:4a:
         a1:0b:b8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:46:35 2025 by rpki-client