Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139372e302f32342d3234203d3e20323637323138.roa
File:                     34352e3233312e3139372e302f32342d3234203d3e20323637323138.roa (raw, json)
Hash identifier:          3KtXKLKdmQfNakRA8tae6hZuI//kt0WpF/3p5LX47C8=
Subject key identifier:   3B:EB:F9:C7:E8:39:E9:A9:EC:D2:E1:C6:DA:BB:3B:69:AC:4A:32:71
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       747986A1ECE70EE229B3FD29A4737B5CCB7DCFF8
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139372e302f32342d3234203d3e20323637323138.roa
Signing time:             Thu 06 Mar 2025 08:27:15 +0000
ROA not before:           Thu 06 Mar 2025 08:22:15 +0000
ROA not after:            Thu 05 Mar 2026 08:27:15 +0000
asID:                     267218
IP address blocks:        45.231.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:79:86:a1:ec:e7:0e:e2:29:b3:fd:29:a4:73:7b:5c:cb:7d:cf:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Mar  6 08:22:15 2025 GMT
            Not After : Mar  5 08:27:15 2026 GMT
        Subject: CN=3BEBF9C7E839E9A9ECD2E1C6DABB3B69AC4A3271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:4c:dd:01:6b:5e:85:7f:3a:e9:a2:0a:a0:
                    c4:69:af:fa:fe:bd:de:f6:ea:7d:be:9c:57:e1:5e:
                    0f:7e:a6:ff:9f:ba:24:95:ec:1d:f4:f9:76:aa:a2:
                    95:04:e9:10:d9:46:19:2a:a9:ad:70:54:a8:09:3c:
                    fa:f6:a9:f7:d0:c5:10:c4:e7:1d:de:70:35:e1:e2:
                    d2:1c:cf:44:c9:bc:46:1b:2e:e9:bd:46:15:b7:2a:
                    8c:e4:c9:1f:f6:d9:bd:dc:d9:a5:6f:de:39:35:3c:
                    20:c9:f5:5e:92:e9:dd:86:be:4e:91:a2:3a:77:e8:
                    7e:bd:26:fa:43:05:64:77:ef:7c:58:68:66:0c:00:
                    2f:9c:6d:8d:af:45:6b:cf:05:49:6c:1f:1f:d7:37:
                    85:66:6b:7e:21:f7:86:34:ed:7e:89:59:c5:b9:0f:
                    f1:42:5f:8f:d0:35:c0:84:cd:9d:8d:45:d7:90:84:
                    59:22:03:f0:8b:a9:fc:0b:45:b1:54:09:48:91:33:
                    d0:5b:5a:40:8f:ab:95:6b:2b:20:6d:4e:f1:d2:c0:
                    2c:dc:9e:2a:17:e0:07:58:5e:88:81:f8:1e:52:0d:
                    5f:05:b0:db:00:4f:96:82:df:a7:b2:69:5e:51:44:
                    5b:ac:62:ba:2a:87:0e:55:91:86:6b:6c:40:68:17:
                    20:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EB:F9:C7:E8:39:E9:A9:EC:D2:E1:C6:DA:BB:3B:69:AC:4A:32:71
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139372e302f32342d3234203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:1c:07:12:fd:30:f4:e5:fc:49:e9:30:4b:cd:5d:2a:19:42:
         9e:48:22:72:f7:b0:4c:df:73:4d:9e:24:3e:5b:c4:98:3a:28:
         20:17:f6:85:55:db:3b:1e:5c:cb:56:65:bd:f8:0a:b4:fb:8d:
         9a:bf:dd:79:71:7f:2b:b1:6a:a7:ee:fb:f0:be:fa:08:20:7b:
         59:51:b0:d8:cd:2d:cd:0a:b4:0d:db:64:fe:3b:35:e0:0b:39:
         fa:25:27:14:a1:ab:6b:55:37:34:d8:d7:38:fb:ad:eb:4a:c9:
         74:45:04:85:de:5b:33:4f:63:50:26:7d:ef:f0:61:31:d0:f6:
         e5:9f:21:15:c8:91:6a:f9:05:5b:26:20:f9:31:c5:5d:82:f7:
         7a:4c:8c:c8:98:11:c3:20:1b:67:af:1d:09:2e:97:17:22:41:
         98:8a:84:cc:e6:da:2a:14:c5:0e:33:dc:7e:52:5d:32:98:ab:
         74:67:90:8e:d3:38:a4:37:3e:6d:7a:d4:88:64:8b:1c:66:ca:
         af:80:1b:e5:ba:eb:a9:81:56:c0:10:e3:0a:20:92:95:a4:c5:
         07:63:d4:62:78:30:a2:59:07:68:c2:a4:5c:7b:f7:e3:3f:d8:
         20:63:46:93:bf:9d:ed:da:97:d7:c3:df:c2:36:2b:e8:c7:2b:
         76:21:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:59:48 2025 by rpki-client