Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137342e302f32342d3234203d3e20323637323136.roa
File:                     34352e3233312e3137342e302f32342d3234203d3e20323637323136.roa (raw, json)
Hash identifier:          FT1sK3rrC1XKyGrA70CMFywqUDQDi1maZ62uM1jG1dI=
Subject key identifier:   D4:0D:55:62:E2:C2:FE:DA:4C:54:E9:33:83:45:51:47:3D:EB:12:27
Certificate issuer:       /CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Certificate serial:       46D0F4F3DDF772D95756B4CB72E9C02012BEE01D
Authority key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137342e302f32342d3234203d3e20323637323136.roa
Signing time:             Tue 04 Feb 2025 19:22:46 +0000
ROA not before:           Tue 04 Feb 2025 19:17:46 +0000
ROA not after:            Tue 03 Feb 2026 19:22:46 +0000
asID:                     267216
IP address blocks:        45.231.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d0:f4:f3:dd:f7:72:d9:57:56:b4:cb:72:e9:c0:20:12:be:e0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
        Validity
            Not Before: Feb  4 19:17:46 2025 GMT
            Not After : Feb  3 19:22:46 2026 GMT
        Subject: CN=D40D5562E2C2FEDA4C54E933834551473DEB1227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:b9:99:47:ca:57:fe:41:73:cf:fa:4a:e1:
                    d0:dc:25:ae:25:b6:02:88:56:0c:73:41:12:6c:d4:
                    a7:6c:7b:b5:8c:3e:76:92:5d:97:f3:e4:68:a4:3c:
                    93:c0:bb:e2:8b:f2:f8:d2:d7:2e:51:22:24:c3:ab:
                    da:89:e3:f8:1e:54:d3:f0:72:47:e0:83:4d:94:5a:
                    88:78:44:bf:2a:3d:ea:9f:ac:b4:f6:b5:e7:fa:f7:
                    72:b6:73:26:0b:3b:d0:4f:bd:1f:fe:a3:0d:fb:07:
                    06:b2:9d:35:65:f6:a8:64:0f:f4:63:81:46:d5:29:
                    2f:7d:3c:49:22:dd:ad:d3:9a:f3:6f:11:12:99:85:
                    28:e1:bb:4e:3d:4d:8c:43:da:a3:c9:dd:ce:f9:15:
                    ca:95:22:3f:32:47:e2:83:96:4f:a9:eb:a3:0f:38:
                    d0:26:98:ae:62:7e:2f:d6:b2:96:73:45:80:a3:46:
                    93:2f:3d:a2:8c:f3:39:14:68:96:5a:17:99:5d:18:
                    a7:fc:6b:84:97:1a:b4:03:37:fc:97:20:d5:65:61:
                    e7:d8:8a:5c:1a:0f:85:0b:00:cd:95:96:27:65:d5:
                    62:c1:48:b5:a1:b0:95:65:3b:5c:46:4a:69:94:36:
                    15:f1:cd:c6:8d:f6:79:af:8e:14:1f:14:4a:6a:ea:
                    01:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0D:55:62:E2:C2:FE:DA:4C:54:E9:33:83:45:51:47:3D:EB:12:27
            X509v3 Authority Key Identifier:
                keyid:FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137342e302f32342d3234203d3e20323637323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:4f:91:cc:6d:ea:fb:5a:95:44:03:90:f5:aa:96:8e:77:7a:
         03:3b:56:ef:e8:ab:26:cc:c5:3a:56:11:7a:e9:6b:19:ff:fc:
         0e:7a:79:23:a0:a3:93:6d:cc:21:9c:6b:f6:7b:dd:fd:54:d8:
         67:c1:2a:29:a7:74:63:66:84:b2:0d:94:61:9d:a6:8f:1e:8e:
         f6:07:6a:2c:ab:19:79:f6:88:e2:dd:de:81:82:91:63:c2:37:
         66:12:ef:4d:b5:16:d6:be:00:c3:a1:e6:3a:7d:41:59:31:1b:
         9a:5a:b6:b0:67:04:c8:70:18:b0:01:83:81:80:07:8e:94:d7:
         b5:0b:5c:12:03:67:1f:be:fd:c8:b8:61:04:38:12:5b:f3:18:
         4b:e9:66:1e:bb:1d:52:81:9d:eb:0a:e5:19:4c:16:ac:5d:73:
         17:1b:3a:6e:b8:26:f0:5c:43:fd:3f:fc:e6:af:f9:a4:7d:0d:
         97:37:8b:03:3d:5c:be:65:8e:70:5b:d3:81:a5:62:95:26:89:
         ce:52:3c:0a:96:64:74:a5:86:13:ce:76:35:06:eb:b9:09:19:
         8d:eb:c6:2e:e0:3b:21:a3:30:58:b4:b8:04:a6:e5:78:1f:66:
         39:5a:f3:e9:fe:28:3b:9c:d5:00:99:55:f8:e8:f1:c6:74:73:
         84:78:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:20:46 2025 by rpki-client