Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa
File:                     34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa (raw, json)
Hash identifier:          F7/ozPUiAu1ckfZa+qHreWcvCrOKiMYktnT8pnpwbMA=
Subject key identifier:   0A:40:D3:C8:FC:FD:72:23:EC:55:D4:1C:35:2C:51:A2:E3:BC:3B:3A
Certificate issuer:       /CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2
Certificate serial:       73DDCBBB1F494572B7F973BBBD188A0BA8EA899F
Authority key identifier: 68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa
Signing time:             Thu 06 Mar 2025 15:17:01 +0000
ROA not before:           Thu 06 Mar 2025 15:12:01 +0000
ROA not after:            Thu 05 Mar 2026 15:17:01 +0000
asID:                     268126
IP address blocks:        45.169.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:dd:cb:bb:1f:49:45:72:b7:f9:73:bb:bd:18:8a:0b:a8:ea:89:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2
        Validity
            Not Before: Mar  6 15:12:01 2025 GMT
            Not After : Mar  5 15:17:01 2026 GMT
        Subject: CN=0A40D3C8FCFD7223EC55D41C352C51A2E3BC3B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:e5:10:e5:db:a2:9c:cd:49:4e:9f:f2:64:
                    4e:0a:f5:3f:05:e0:fd:bf:cf:32:c3:2d:30:47:52:
                    12:dc:ff:f5:3f:a9:31:80:5e:f8:73:87:52:b7:8b:
                    f4:36:15:d7:89:a0:e5:d9:c9:20:9f:94:8a:58:4c:
                    06:48:ff:5c:2d:70:65:61:61:cd:24:4f:29:05:5c:
                    b3:9b:68:88:a1:0e:e6:9b:b8:32:a3:18:af:10:63:
                    38:85:ef:7a:a7:12:33:ad:2b:24:cc:97:be:d0:c2:
                    ff:f3:ca:66:54:a2:80:5e:ab:8c:9a:08:6a:5e:83:
                    3b:29:14:36:62:ad:c9:7c:44:d9:54:6a:17:25:51:
                    62:38:fd:dc:0b:e2:a2:7c:7a:f1:5c:1a:78:d8:17:
                    82:30:eb:71:01:bc:c2:f9:5e:d1:41:a6:4f:0f:65:
                    23:5b:48:f4:c0:6e:78:0b:1c:25:a0:6f:f7:76:cb:
                    e9:a3:4e:11:dd:fa:fe:cc:58:59:c9:31:59:e2:87:
                    57:c5:20:8a:26:f4:c7:6a:9a:c1:8e:b7:ed:35:a0:
                    f2:e6:17:58:54:8a:25:74:ab:27:37:c9:5d:0d:85:
                    bc:ea:5c:6a:32:cc:f5:ae:10:62:b6:a8:15:8b:6a:
                    ea:90:32:d0:67:6d:f5:2c:28:86:64:1d:e6:da:0c:
                    51:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:40:D3:C8:FC:FD:72:23:EC:55:D4:1C:35:2C:51:A2:E3:BC:3B:3A
            X509v3 Authority Key Identifier:
                keyid:68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:01:b4:b9:11:74:be:43:3c:f3:06:c8:82:6b:47:99:a0:39:
         b2:0d:ac:55:6c:23:e8:83:2e:ee:1b:14:e0:52:fc:73:79:09:
         0e:33:ee:35:d0:02:c1:5e:b6:88:7d:61:fb:7f:c2:70:27:67:
         60:22:b5:41:b3:c5:43:37:4f:bf:bf:c2:e8:0c:0f:e9:48:25:
         2f:29:ce:7b:8f:a7:10:08:9a:77:1c:c4:61:cd:c9:40:b0:9d:
         2c:61:89:91:ba:64:49:1f:cf:e9:b6:c2:52:d7:b1:17:43:78:
         5a:5c:e5:8a:80:ae:a8:ef:2f:d1:61:a3:66:ff:30:87:fd:6e:
         36:5e:b2:50:c1:c0:00:1a:c6:f6:b6:f5:4c:b0:19:c2:9a:21:
         0a:e1:50:66:6d:3d:ce:8c:2a:fd:22:9f:52:31:d0:c1:32:a7:
         92:3c:cb:c5:4d:5e:62:76:d6:f2:8f:e1:da:47:b4:23:47:66:
         ef:e3:dc:a0:f5:2f:bd:5d:19:a3:f6:c4:f9:50:af:24:22:ed:
         ea:0c:9c:89:86:4f:05:83:3d:be:99:c8:0e:31:8c:4c:4f:a9:
         ad:df:46:cc:b8:25:7f:02:ce:b1:94:b4:dc:da:cb:71:1a:10:
         a4:df:fb:3e:08:0a:c4:6f:a2:60:12:2e:68:9a:86:22:99:16:
         04:10:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:54:35 2025 by rpki-client