Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32322d3232203d3e20323639363730.roa
File:                     34352e3139312e36342e302f32322d3232203d3e20323639363730.roa (raw, json)
Hash identifier:          n98cOX6llMzCwxXNNcbE69cO2pmF5p82hcBOUmqryUg=
Subject key identifier:   02:FC:CA:F0:24:D6:39:A3:2F:55:CA:B8:E8:C8:0A:24:7D:B1:F4:D1
Certificate issuer:       /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial:       2E1B9C6789048A8055FC4FDB7231BC0646750B01
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32322d3232203d3e20323639363730.roa
Signing time:             Wed 05 Mar 2025 20:00:23 +0000
ROA not before:           Wed 05 Mar 2025 19:55:23 +0000
ROA not after:            Wed 04 Mar 2026 20:00:23 +0000
asID:                     269670
IP address blocks:        45.191.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1b:9c:67:89:04:8a:80:55:fc:4f:db:72:31:bc:06:46:75:0b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
        Validity
            Not Before: Mar  5 19:55:23 2025 GMT
            Not After : Mar  4 20:00:23 2026 GMT
        Subject: CN=02FCCAF024D639A32F55CAB8E8C80A247DB1F4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:69:77:a7:41:16:7b:a2:ef:c0:19:50:ed:
                    39:89:a1:d2:5a:84:ae:4e:5f:42:06:0c:0b:72:4c:
                    ad:8c:c9:a5:5c:56:c9:28:73:63:c3:e2:3d:fa:21:
                    fa:83:6d:dc:db:d7:6d:d7:46:ea:28:43:e8:29:cf:
                    35:7a:81:ed:4b:31:b7:ca:7e:77:25:b2:f2:07:70:
                    6d:d3:75:ea:1b:e3:38:98:b1:29:a2:e0:56:ea:9d:
                    fb:4f:ab:98:c2:d4:12:c4:2b:53:41:99:76:3c:d4:
                    a5:a4:17:d4:e8:82:ff:7a:f1:0f:0e:f3:98:d4:18:
                    79:ef:6c:2d:ff:e3:5e:57:63:7b:2f:6d:51:d0:a0:
                    83:7c:5a:ce:6f:14:3b:49:5d:33:4d:46:0c:61:96:
                    12:14:ff:0e:fb:c6:e4:b9:41:87:00:02:8a:83:75:
                    cf:44:ab:ff:58:a3:93:4a:20:24:46:71:3d:4d:11:
                    8a:59:dc:46:80:90:c2:3d:f3:a9:6b:fa:4f:5d:c3:
                    5e:d0:87:bb:dd:02:50:e1:76:83:d7:a7:ae:1f:bc:
                    61:85:b4:33:68:6d:91:83:0e:41:95:fd:b4:74:e7:
                    d0:5c:d2:bd:5e:f2:53:69:13:9f:13:a5:c1:c7:6f:
                    39:13:c1:8e:45:d0:14:f0:3b:ee:84:19:ec:84:f2:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FC:CA:F0:24:D6:39:A3:2F:55:CA:B8:E8:C8:0A:24:7D:B1:F4:D1
            X509v3 Authority Key Identifier:
                keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32322d3232203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:5d:c2:34:db:a7:e1:85:49:24:cb:2b:d8:21:25:64:0b:93:
         37:7e:bc:42:25:90:10:06:57:81:84:b8:45:73:9c:b3:26:7e:
         21:5f:60:10:1d:30:38:f3:1f:4f:75:c3:d7:ca:1c:16:3a:6f:
         b9:8a:bd:f3:e7:a1:26:84:7a:58:a3:ca:27:18:12:43:14:7c:
         86:7a:c1:9c:5a:17:ad:51:5a:70:37:1a:bf:26:a8:b7:2c:7b:
         2f:37:55:67:14:cd:df:d4:bf:7c:35:4f:68:6b:f4:82:5d:08:
         70:13:8d:2d:6d:c4:59:fa:fb:d7:84:90:08:9d:6f:8e:53:20:
         1c:54:6b:91:91:94:6d:c3:f7:ef:3d:34:fc:34:4b:f6:a9:ec:
         ad:9d:05:93:c7:64:45:ab:fd:d3:3f:9f:52:32:26:3e:ef:6b:
         96:d3:8c:bc:d5:aa:7c:f5:0c:07:1f:72:52:42:b4:cb:36:c8:
         10:17:c9:37:33:da:22:c4:83:6f:62:48:67:f1:b2:6b:9a:ab:
         7d:a2:bd:3b:d7:93:f9:89:19:fb:98:67:9f:c8:84:20:59:e9:
         81:d3:e9:b2:be:73:7b:c2:90:80:7a:5f:ee:41:fa:63:20:2a:
         e9:91:44:c4:06:65:48:51:5c:f4:58:c6:0a:61:3d:39:9a:de:
         34:a6:37:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:09 2025 by rpki-client