Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137342e302f32332d3233203d3e20323637323136.roa
File:                     34352e3233312e3137342e302f32332d3233203d3e20323637323136.roa (raw, json)
Hash identifier:          XR91J/zzdVYrWBLtvOx/Qp1cg1yuW2kxYhjlvCYXmks=
Subject key identifier:   0C:01:8F:04:C1:F7:C3:22:21:67:EB:7D:62:B6:13:7C:7C:5F:51:19
Certificate issuer:       /CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Certificate serial:       6B4EC3900CD52659F88ACC4631098AE0C7FC1F94
Authority key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137342e302f32332d3233203d3e20323637323136.roa
Signing time:             Tue 04 Feb 2025 19:22:25 +0000
ROA not before:           Tue 04 Feb 2025 19:17:25 +0000
ROA not after:            Tue 03 Feb 2026 19:22:25 +0000
asID:                     267216
IP address blocks:        45.231.174.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4e:c3:90:0c:d5:26:59:f8:8a:cc:46:31:09:8a:e0:c7:fc:1f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
        Validity
            Not Before: Feb  4 19:17:25 2025 GMT
            Not After : Feb  3 19:22:25 2026 GMT
        Subject: CN=0C018F04C1F7C3222167EB7D62B6137C7C5F5119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:32:17:36:a7:70:66:94:2c:97:6d:f5:86:
                    e5:e3:d5:66:8b:2b:7a:1f:04:06:46:9a:b6:19:ea:
                    86:e9:b3:77:0c:19:dd:0b:78:ac:1b:14:49:d6:4f:
                    c3:a3:69:79:b7:ad:97:85:54:eb:28:d9:e1:9e:65:
                    6a:09:dd:36:70:f3:46:f7:52:de:a4:af:65:f8:4a:
                    64:9a:9c:fa:18:94:9a:2c:b3:ff:bb:1d:44:6d:98:
                    3b:81:69:7b:64:9f:b9:30:cf:d8:85:75:b5:9b:d0:
                    fc:7f:90:1a:73:1d:64:7e:65:20:89:34:31:c0:ce:
                    48:b1:e4:8f:56:e9:22:26:2c:8e:d7:2f:57:9d:34:
                    b7:0f:1b:0e:4b:e7:41:5f:c9:47:35:62:cd:d2:a3:
                    79:11:5e:c3:9a:7d:16:e6:14:17:a2:b2:6f:3f:8e:
                    c8:90:29:8e:4c:7a:7c:c5:88:6a:51:16:4f:4f:32:
                    3a:e8:41:51:63:b7:5b:f0:35:fc:42:42:2b:b9:6c:
                    78:9d:a4:c9:c2:5f:d7:af:05:79:b9:e8:a5:5f:53:
                    c2:8f:49:b4:f7:30:3e:ed:87:a6:f9:6b:25:85:be:
                    14:c9:77:ce:e0:2a:19:f2:48:d4:4e:8f:11:ec:30:
                    d1:ad:a3:db:a1:f3:da:39:1b:38:eb:61:2b:ff:5e:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:8F:04:C1:F7:C3:22:21:67:EB:7D:62:B6:13:7C:7C:5F:51:19
            X509v3 Authority Key Identifier:
                keyid:FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137342e302f32332d3233203d3e20323637323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:8c:00:f8:a1:6b:c7:ac:fc:e4:26:65:ba:b9:32:d0:3f:db:
         27:42:12:0b:28:7c:8b:19:b0:ee:e8:b6:e8:3e:11:b8:5e:5e:
         4f:6d:4b:dc:dc:d8:00:74:f5:9e:fb:c7:ad:30:1c:63:bf:fb:
         66:d7:cc:3c:20:18:44:24:8c:72:c3:36:d5:bc:c4:37:22:a7:
         22:cf:eb:04:2c:ef:f5:16:b0:77:70:44:11:28:34:ac:e3:3a:
         5c:62:7a:28:fe:1c:45:df:f4:fc:f5:8c:f8:5f:4f:bc:d1:e6:
         77:63:a7:57:c0:9a:74:12:9a:5d:99:93:32:7a:34:0d:8d:52:
         0f:4f:44:3e:0b:74:9c:46:bf:46:5f:03:f9:b5:65:4e:1d:4b:
         13:cf:1d:41:1f:32:ba:8a:83:de:53:12:f7:3a:6f:03:17:8f:
         dd:e8:07:57:03:fd:75:8a:4e:97:ac:d8:da:1a:8d:f3:82:50:
         57:94:76:7f:e2:22:c4:c3:9c:af:42:be:62:6d:69:a9:ef:a5:
         47:52:50:57:c3:0e:c2:88:3c:02:53:cf:75:4c:17:94:1d:83:
         fb:8d:74:2c:7c:37:03:a4:cd:ce:c4:8c:3e:39:51:b6:9f:1c:
         70:84:ab:78:f6:45:f9:d5:2b:2a:44:4a:e6:33:47:92:0d:aa:
         fd:31:22:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:19:42 2025 by rpki-client