Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa
File:                     34352e3139302e32382e302f32322d3234203d3e20323639363332.roa (raw, json)
Hash identifier:          NojkLbftpNQELZZUgCfo0ydIy9CurmRFDMsI34ZG7kI=
Subject key identifier:   12:4A:25:9D:16:C5:D2:53:F5:4D:50:7A:24:27:EB:1F:79:97:16:34
Certificate issuer:       /CN=B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D
Certificate serial:       7BB1740F133C8966A6FF133578CFAA69C5DA8AB6
Authority key identifier: B5:AF:99:93:AB:3F:76:FA:F2:71:D8:EF:DA:2E:E9:E6:91:E3:85:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa
Signing time:             Mon 24 Feb 2025 16:43:58 +0000
ROA not before:           Mon 24 Feb 2025 16:38:58 +0000
ROA not after:            Mon 23 Feb 2026 16:43:58 +0000
asID:                     269632
IP address blocks:        45.190.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b1:74:0f:13:3c:89:66:a6:ff:13:35:78:cf:aa:69:c5:da:8a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D
        Validity
            Not Before: Feb 24 16:38:58 2025 GMT
            Not After : Feb 23 16:43:58 2026 GMT
        Subject: CN=124A259D16C5D253F54D507A2427EB1F79971634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:4c:86:19:1c:f7:08:e8:75:5e:d1:0e:55:
                    0d:2c:1a:8f:5c:bd:08:0f:10:79:23:40:2d:9f:10:
                    4b:e4:17:fa:1c:b1:bb:26:13:6b:a4:1b:d9:97:a6:
                    c7:d5:21:49:e1:b8:d7:99:f5:bf:1b:e9:39:7c:ca:
                    a1:f8:1c:09:02:f3:7f:3b:9e:8c:0a:80:b5:bd:2d:
                    ff:bc:97:f9:1b:bc:6b:c9:c6:c0:78:02:1d:6e:92:
                    0d:be:40:16:ea:d5:97:6d:4e:c9:5a:6f:d8:ee:04:
                    f5:02:66:31:13:4c:1e:73:de:cc:69:6e:15:3b:51:
                    a6:f9:b1:4d:10:70:ce:2c:1a:83:b6:17:c9:fa:31:
                    af:7f:ee:d4:ce:aa:a8:db:7e:17:b8:02:2c:6d:66:
                    f4:0c:36:af:4e:c7:92:b0:b2:c5:73:ee:69:eb:17:
                    f4:35:c0:b0:43:ea:11:a0:2d:9d:8e:2e:49:81:56:
                    7a:cf:de:19:41:74:44:7a:1f:9c:ef:31:27:30:56:
                    2f:d6:49:f9:13:6d:f4:4a:16:98:1d:88:a0:44:99:
                    11:19:8d:76:54:b4:27:e5:0e:6f:3e:52:be:81:6f:
                    02:36:b1:1f:d4:eb:81:c3:f6:d8:78:18:dd:94:c4:
                    65:4b:27:ab:c0:c9:1e:cf:ab:15:fa:7e:9a:db:63:
                    b0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4A:25:9D:16:C5:D2:53:F5:4D:50:7A:24:27:EB:1F:79:97:16:34
            X509v3 Authority Key Identifier:
                keyid:B5:AF:99:93:AB:3F:76:FA:F2:71:D8:EF:DA:2E:E9:E6:91:E3:85:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:21:ce:3a:ac:3d:66:a6:22:c8:08:b1:1f:6d:d9:38:f3:f6:
         cd:ea:f9:15:3d:6f:dd:0e:55:0e:9b:1a:4d:cd:a1:2d:73:7f:
         70:13:c5:fe:f3:22:cb:86:9f:76:bf:f5:12:f2:1e:a0:1d:a8:
         93:ff:bd:32:6e:a5:5d:b2:8f:1c:1a:a0:01:63:ef:6f:54:07:
         ce:a2:c8:09:66:7a:99:47:2f:4a:16:d5:fb:7f:36:45:b9:95:
         f0:9e:5f:81:26:a3:c7:78:f3:2e:a4:47:46:65:f3:e8:a8:9f:
         31:57:00:a9:1e:db:b5:7b:25:42:04:8e:28:98:9e:49:82:9b:
         24:73:f0:fd:c7:13:54:52:de:75:fc:86:7a:0e:63:a3:90:01:
         21:0e:92:15:e1:c1:ee:3a:4c:22:b8:ba:d2:87:f3:30:81:99:
         cd:84:8a:3b:b2:af:0b:42:d9:82:9b:0c:bc:84:7d:af:09:b2:
         13:45:30:91:94:03:f7:23:b1:1a:fa:6d:a3:2a:61:04:44:b4:
         9b:56:35:0e:90:a3:b1:51:e7:29:a9:54:3d:74:91:c8:19:f0:
         31:e8:c5:e9:05:4c:00:49:cd:73:02:af:17:2b:2f:04:e9:ba:
         2f:7d:59:f3:75:c8:5d:25:db:cb:09:7b:52:ed:4a:91:53:23:
         71:a9:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:03:40 2025 by rpki-client