Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32342d3234203d3e20323638393338.roa
File:                     34352e3137342e31302e302f32342d3234203d3e20323638393338.roa (raw, json)
Hash identifier:          zpNTTAGIs34rm1REHkaBjCMCYHGCVOPILJe5iL/Eh8g=
Subject key identifier:   F7:2D:3F:5E:5B:A1:35:46:10:92:E9:8B:73:09:B8:BC:75:23:B7:81
Certificate issuer:       /CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
Certificate serial:       1E2F52196B93C0E7F28CA8AB7463F92F84A184BE
Authority key identifier: 5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32342d3234203d3e20323638393338.roa
Signing time:             Thu 06 Mar 2025 02:11:59 +0000
ROA not before:           Thu 06 Mar 2025 02:06:59 +0000
ROA not after:            Thu 05 Mar 2026 02:11:59 +0000
asID:                     268938
IP address blocks:        45.174.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2f:52:19:6b:93:c0:e7:f2:8c:a8:ab:74:63:f9:2f:84:a1:84:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
        Validity
            Not Before: Mar  6 02:06:59 2025 GMT
            Not After : Mar  5 02:11:59 2026 GMT
        Subject: CN=F72D3F5E5BA135461092E98B7309B8BC7523B781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:11:63:ff:d5:4d:56:52:ec:36:17:b9:5f:
                    81:ef:50:eb:eb:d2:4c:c2:ec:df:71:4d:2e:86:73:
                    a1:b0:73:c7:df:4a:02:0b:54:78:0b:3d:9a:c6:82:
                    28:e9:82:8c:75:64:1a:7e:73:5f:50:ff:c6:f1:04:
                    e0:11:fc:1b:dd:80:0c:c9:2f:a5:51:da:39:f0:3f:
                    2f:56:da:77:cd:c0:c7:27:b9:3e:a3:0e:cf:ec:cb:
                    35:99:1b:15:35:d8:e0:e4:24:bc:e8:82:79:19:7c:
                    1f:c9:4b:10:1c:7c:d9:da:2c:78:77:2d:44:7e:29:
                    67:56:21:ee:b3:ef:05:e2:7e:41:1f:72:e5:ac:20:
                    0e:eb:14:2a:f1:99:65:e0:ce:c5:c9:d6:eb:d5:ca:
                    6c:91:66:57:f8:55:72:31:7b:d7:12:f7:38:c7:93:
                    27:eb:14:40:b2:fc:4a:e3:00:45:f3:41:3b:34:64:
                    ff:8c:7a:df:a9:3e:1e:75:02:13:18:04:ae:64:f2:
                    98:5d:f0:aa:49:c3:d1:0d:38:89:81:f7:6e:8a:5b:
                    2a:8d:39:a6:67:a9:f5:15:3d:9a:6a:2f:a5:79:f8:
                    2d:d4:d2:40:7a:44:f8:63:7d:00:ab:12:fa:ca:31:
                    85:15:3d:33:55:22:92:16:91:4f:d6:a1:73:9b:09:
                    00:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2D:3F:5E:5B:A1:35:46:10:92:E9:8B:73:09:B8:BC:75:23:B7:81
            X509v3 Authority Key Identifier:
                keyid:5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32342d3234203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:1c:86:e1:ff:ad:be:5e:40:73:64:b1:e0:2a:67:10:1c:
         3e:3c:54:d4:d7:c0:c4:bf:b2:63:77:d0:31:1b:d0:9a:36:d5:
         a5:80:f2:1a:09:47:bc:07:e3:44:00:3c:f5:e2:f0:2e:7e:81:
         7e:ba:e0:38:8c:90:d3:d9:1d:b3:5e:02:cb:d1:a6:f1:7e:23:
         15:32:cc:70:8b:8c:5a:c5:54:c9:c4:56:8b:d6:b9:a9:36:fe:
         ce:d7:3b:d2:1e:ca:c0:a6:c0:b9:e4:59:82:a2:ef:e4:87:bf:
         94:c2:a1:a4:c3:d2:a6:7e:91:ad:b1:1e:85:ac:54:b9:a3:3a:
         c2:24:c8:4e:af:a3:e0:e9:43:f3:01:df:20:8c:3c:83:83:b4:
         4c:8b:10:91:68:52:33:52:b6:ee:c2:56:e3:62:83:1f:36:c2:
         7e:35:7d:bc:c3:ec:3f:9f:a3:c7:cb:f2:fe:58:21:e8:3b:aa:
         2e:bb:6e:bc:23:11:6d:cc:33:1a:04:65:b8:74:62:28:19:ac:
         41:81:95:ca:b8:1a:79:50:24:1e:68:ec:21:be:af:70:6a:16:
         53:fb:86:98:6a:a5:25:36:54:05:16:6c:33:f8:6c:51:90:73:
         0b:cd:71:3c:3c:44:f9:23:dd:f4:90:7b:86:ab:61:7a:11:3c:
         64:1d:1b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:14:21 2025 by rpki-client