Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137352e302f32342d3234203d3e20323637323136.roa
File:                     34352e3233312e3137352e302f32342d3234203d3e20323637323136.roa (raw, json)
Hash identifier:          O2QUxAFhXXx/N+41cSYe9V3UvB42GfqT8Y9efjtkD+c=
Subject key identifier:   14:66:04:8B:29:50:5D:7B:D8:08:08:38:AC:23:F5:7B:BE:45:35:14
Certificate issuer:       /CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Certificate serial:       15376012BAE730C5D26FC20CE815AF184C8708DC
Authority key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137352e302f32342d3234203d3e20323637323136.roa
Signing time:             Tue 04 Feb 2025 19:23:05 +0000
ROA not before:           Tue 04 Feb 2025 19:18:05 +0000
ROA not after:            Tue 03 Feb 2026 19:23:05 +0000
asID:                     267216
IP address blocks:        45.231.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:37:60:12:ba:e7:30:c5:d2:6f:c2:0c:e8:15:af:18:4c:87:08:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
        Validity
            Not Before: Feb  4 19:18:05 2025 GMT
            Not After : Feb  3 19:23:05 2026 GMT
        Subject: CN=1466048B29505D7BD8080838AC23F57BBE453514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:9c:42:79:80:5a:3c:dc:bf:7f:f1:da:81:
                    95:b6:94:98:42:af:d7:9e:ae:6e:78:db:7f:d8:54:
                    6c:3c:12:3e:46:e9:e4:7b:16:13:fa:28:19:c3:dc:
                    70:0f:26:87:96:80:df:1a:c9:67:09:ea:d1:f9:91:
                    a8:24:36:c7:85:b3:cd:57:5c:c1:85:d6:67:02:5d:
                    b5:e3:19:85:99:a0:96:cb:df:6c:4b:10:73:f0:9e:
                    01:df:a2:7f:39:50:fa:1c:8f:dc:c6:f1:1f:7b:02:
                    9b:04:60:25:8c:4a:bf:e7:91:7b:25:95:f1:34:30:
                    98:d7:10:49:89:54:ec:e5:08:b6:87:a4:b5:d3:10:
                    ec:e6:a0:0f:93:89:0d:29:ec:43:78:28:ae:88:9c:
                    d1:3b:a2:3a:08:12:e2:63:16:bc:ae:23:75:10:d7:
                    68:07:52:67:0a:7b:1c:e6:d5:c3:f1:16:14:84:84:
                    22:f1:c2:9f:ab:46:2e:11:cd:50:d9:55:65:91:59:
                    fc:9e:3d:4b:8b:3d:85:5e:cd:74:ec:e7:9f:25:5d:
                    cd:dd:40:1a:b3:11:6f:73:10:f9:f6:a3:64:6c:63:
                    04:40:39:1b:a8:66:26:b6:9c:e5:e7:91:60:2b:80:
                    4c:57:39:68:e7:dd:1b:1c:f0:c2:ed:48:b4:e1:2a:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:66:04:8B:29:50:5D:7B:D8:08:08:38:AC:23:F5:7B:BE:45:35:14
            X509v3 Authority Key Identifier:
                keyid:FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137352e302f32342d3234203d3e20323637323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:6e:25:e7:f3:1b:8f:a9:38:44:05:63:57:7e:28:f9:ef:d0:
         84:32:cf:2a:8d:3f:c3:11:35:e0:44:be:9c:b4:ad:d6:d9:9f:
         da:2a:64:13:95:5b:89:f9:82:92:67:34:87:be:a3:9f:48:1e:
         6a:30:59:b7:6e:c0:f9:a7:d5:ef:01:a2:9a:27:6d:37:0a:77:
         dd:de:5d:07:52:1c:3e:91:bb:c1:96:bf:49:f9:c0:8d:f0:11:
         89:2c:c4:41:77:9f:49:8d:da:4d:3e:1e:ab:a9:b5:f9:4c:9c:
         1a:a3:ad:dd:36:2c:96:23:0a:3e:e5:cf:87:0e:59:e8:69:b3:
         5c:42:f8:6a:2e:6f:7a:95:f3:31:1e:ce:8e:25:24:65:f2:95:
         ad:35:0d:cb:bf:f3:eb:4e:08:42:f6:53:da:8e:a9:be:8c:46:
         b2:98:a4:6e:11:2e:8c:93:67:26:ab:91:63:94:7f:7e:93:f6:
         df:57:7d:43:20:b1:0d:a1:bd:7e:f1:ee:e0:6a:ca:55:a2:6d:
         35:f2:07:34:1d:44:8a:af:b7:49:81:de:16:9d:2d:a2:c5:d8:
         47:fc:4c:6e:b6:5e:82:f9:67:d7:bd:61:f3:47:80:b6:c2:cd:
         a5:73:96:bb:d8:6e:95:de:c0:32:ab:a2:b9:cd:e3:34:1d:9f:
         78:35:1f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:25:55 2025 by rpki-client