Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          6cQ0UWJrhVfmUbkdC2e7+syg0AYRQLj94VAcQepT23E=
Subject key identifier:   55:62:87:C5:27:45:8B:BF:8F:A1:A7:BB:F7:95:C2:72:4F:67:F4:53
Certificate issuer:       /CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
Certificate serial:       1F11F1B3F728553C42F272210E15113B1E074A70
Authority key identifier: 4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa
Signing time:             Fri 31 Jan 2025 18:02:26 +0000
ROA not before:           Fri 31 Jan 2025 17:57:26 +0000
ROA not after:            Fri 30 Jan 2026 18:02:26 +0000
asID:                     267027
IP address blocks:        45.227.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:11:f1:b3:f7:28:55:3c:42:f2:72:21:0e:15:11:3b:1e:07:4a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
        Validity
            Not Before: Jan 31 17:57:26 2025 GMT
            Not After : Jan 30 18:02:26 2026 GMT
        Subject: CN=556287C527458BBF8FA1A7BBF795C2724F67F453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:b4:1a:d2:7a:10:29:7c:94:83:59:dc:6b:
                    ed:3e:55:16:5a:ff:91:86:36:b2:fe:92:4c:9f:37:
                    1c:ae:97:1a:20:82:bf:a6:5d:c6:3a:d9:9a:ee:61:
                    e6:77:d8:f7:15:1a:cc:82:d9:fd:98:e9:48:db:74:
                    d7:60:9b:c9:67:49:8d:54:ce:33:ee:e5:89:4a:77:
                    d7:d0:90:68:f5:22:fe:e9:f6:0a:12:21:03:01:8d:
                    80:cd:ae:77:52:29:06:82:35:9b:1a:db:67:45:32:
                    e5:31:92:27:10:ab:5b:01:12:13:6f:3a:7c:f3:5c:
                    c9:1b:ed:3b:e6:15:c4:fb:ca:12:45:8e:cb:45:7a:
                    82:18:db:fe:be:d7:57:7e:cc:b8:28:6d:9c:1b:84:
                    f5:06:e7:6a:85:26:31:a9:48:44:1e:2f:7a:4f:cf:
                    4b:9f:7c:47:77:e8:fd:89:cb:b3:4a:01:63:3c:2c:
                    5d:7e:0e:01:f5:00:c4:68:68:46:e1:59:c8:ed:e4:
                    6f:88:f4:61:4c:6f:b7:3e:c0:9a:be:54:5b:fe:72:
                    89:78:d6:b6:e8:62:82:7f:84:49:87:61:43:9d:81:
                    b1:36:c3:79:40:cb:1c:0c:0f:fc:2f:ac:c6:8f:6a:
                    78:49:42:81:63:4c:3c:b1:a5:b0:7a:89:a0:e4:bd:
                    54:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:62:87:C5:27:45:8B:BF:8F:A1:A7:BB:F7:95:C2:72:4F:67:F4:53
            X509v3 Authority Key Identifier:
                keyid:4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:22:fd:8c:b7:e5:b7:34:e8:f3:bd:07:7e:08:ea:b5:e7:fc:
         65:39:0b:92:2f:52:75:39:08:c5:cf:72:dd:d0:3f:43:f6:73:
         6b:e2:28:85:1a:c8:a5:79:e3:d4:49:ad:88:d5:3f:05:15:9f:
         0f:91:14:26:91:56:44:28:9f:da:63:b8:83:8c:30:99:28:2c:
         71:21:a8:77:ab:01:8c:02:9c:8a:48:6c:1f:75:ee:ba:d9:43:
         e8:37:48:d6:fd:af:46:9c:01:c2:1b:50:bc:1b:36:c6:4d:05:
         86:1c:a5:19:8a:5c:88:bc:4f:82:bc:50:71:b5:1e:79:30:6d:
         b8:dc:ec:a9:0e:51:b7:be:15:00:70:99:5e:5a:8a:4d:65:1c:
         ad:eb:52:a6:40:60:4c:ab:e2:ce:d1:54:4b:d3:3c:f9:ed:09:
         44:c1:30:6d:cd:b8:ec:75:ae:32:a9:c3:0d:20:b3:01:f3:c8:
         2c:a8:9c:de:ea:0c:8d:fe:cf:79:7f:d4:30:45:ca:c7:a0:7f:
         52:bf:1c:67:82:5c:44:6b:a2:e6:ce:48:04:1c:eb:00:e0:c7:
         b3:d8:66:d1:74:23:16:46:ca:a3:b6:d0:b1:6e:ae:4d:83:1b:
         ff:42:35:39:10:ab:88:f7:e0:be:fd:83:e7:ac:d9:33:a7:fa:
         6f:45:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:51:06 2025 by rpki-client