Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137332e302f32342d3234203d3e2030.roa
File:                     34352e3233312e3137332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          WPZDym/dnUmhxuGTZdNm2flD8iEamgnXxMNt1BBivns=
Subject key identifier:   1B:EA:04:A8:53:CD:BF:6D:B3:FD:E7:5E:F1:EB:39:12:49:03:D1:9F
Certificate issuer:       /CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Certificate serial:       3989A4655F876A681F66CC2B46DD2E25CA2CA548
Authority key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137332e302f32342d3234203d3e2030.roa
Signing time:             Mon 03 Feb 2025 20:56:55 +0000
ROA not before:           Mon 03 Feb 2025 20:51:55 +0000
ROA not after:            Mon 02 Feb 2026 20:56:55 +0000
asID:                     0
IP address blocks:        45.231.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:89:a4:65:5f:87:6a:68:1f:66:cc:2b:46:dd:2e:25:ca:2c:a5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
        Validity
            Not Before: Feb  3 20:51:55 2025 GMT
            Not After : Feb  2 20:56:55 2026 GMT
        Subject: CN=1BEA04A853CDBF6DB3FDE75EF1EB39124903D19F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:27:51:8d:5e:8f:18:ca:a1:87:0f:2c:2a:c3:
                    ab:4e:38:de:e9:18:de:f9:38:76:05:58:5f:de:ed:
                    b4:70:92:58:80:ed:98:4b:4f:1e:b0:16:ee:7d:5b:
                    8a:3e:ff:3c:f3:51:c0:bd:8e:f4:56:16:8a:dd:76:
                    ef:cf:04:b7:ae:86:98:17:05:dd:5a:51:b0:34:ce:
                    a4:4a:06:a3:d7:7c:29:f7:f1:06:71:c8:e6:2a:38:
                    91:01:28:94:81:f5:23:2c:ce:ee:09:eb:84:7b:a7:
                    21:fb:a8:e4:85:ea:a8:0b:e9:2c:67:85:b6:e3:9a:
                    59:10:63:f3:d8:3b:12:d9:b0:cb:f8:3e:ad:df:c5:
                    01:09:99:2c:b2:14:59:21:db:d8:c3:54:8f:4b:a8:
                    39:bc:d3:18:b0:77:b2:62:22:cb:cf:5b:f9:be:a0:
                    7f:25:4f:4e:19:22:df:92:9a:1c:d8:d4:f2:82:27:
                    14:7a:52:b8:73:7f:8d:1a:63:aa:5d:91:6e:2e:67:
                    18:7e:73:79:0e:6d:28:14:ca:1b:b6:36:07:e1:1d:
                    b0:ec:90:12:b4:7e:64:fb:bc:bd:b7:6c:44:69:c7:
                    39:f8:4c:5c:35:84:63:f9:30:0f:49:9f:24:f9:84:
                    1b:74:28:02:7d:2d:ad:33:ed:c2:76:14:be:85:89:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EA:04:A8:53:CD:BF:6D:B3:FD:E7:5E:F1:EB:39:12:49:03:D1:9F
            X509v3 Authority Key Identifier:
                keyid:FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137332e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:4b:53:75:f3:4f:f8:db:b7:34:dc:a2:83:a2:98:64:e3:
         c2:0c:48:07:f3:d4:1d:80:fa:0c:37:36:26:eb:33:c8:1d:a2:
         29:46:f0:07:f4:ee:56:49:82:f4:f7:8a:42:9a:80:c5:07:e3:
         d2:c2:f8:69:28:6c:73:85:12:87:89:52:5e:4b:92:8d:9d:f5:
         8f:d6:ad:be:00:65:39:c5:19:61:1d:4c:fd:ae:78:32:17:9a:
         b8:f1:01:95:5c:7f:81:46:12:d0:21:30:e5:ff:c7:99:2a:76:
         31:ef:b8:cf:da:b9:d2:9a:04:6c:eb:b7:99:bf:5d:27:bc:4e:
         cf:51:00:e1:26:fc:1f:30:d7:75:fe:4f:e5:86:91:17:b7:34:
         2b:5c:70:f0:5f:b0:c9:8b:e7:5e:9d:6f:1e:59:cd:35:b3:bf:
         51:7c:1a:46:75:c8:03:56:d7:4c:1a:cd:4e:84:40:bb:8c:ec:
         9b:a3:29:5c:21:67:c3:c2:96:c3:62:8e:d0:b9:f1:2f:0c:8c:
         15:0a:f7:65:b1:f6:b6:e3:89:6f:8f:0e:76:2a:c1:51:e1:b1:
         82:72:a0:71:45:4f:f3:5f:1d:1b:29:43:2f:aa:5b:d8:e7:8f:
         ac:27:f2:f4:b6:34:54:6f:96:67:bd:89:d1:a3:25:00:ff:88:
         5f:05:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:36:16 2025 by rpki-client