Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135372e302f32342d3234203d3e20323638313136.roa
File:                     34352e3136392e3135372e302f32342d3234203d3e20323638313136.roa (raw, json)
Hash identifier:          SRpuftg/q39McEuI+pMNT/QjhDteZDm/A9j/NxS09HY=
Subject key identifier:   70:88:3D:9D:FB:BF:9F:2C:75:A6:A7:C0:19:31:76:7A:AF:8C:92:B5
Certificate issuer:       /CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
Certificate serial:       4CE622976D07D2E0BAAC91AB290DA6AC03EC96C5
Authority key identifier: 35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135372e302f32342d3234203d3e20323638313136.roa
Signing time:             Wed 08 Jan 2025 22:53:11 +0000
ROA not before:           Wed 08 Jan 2025 22:48:11 +0000
ROA not after:            Wed 07 Jan 2026 22:53:11 +0000
asID:                     268116
IP address blocks:        45.169.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e6:22:97:6d:07:d2:e0:ba:ac:91:ab:29:0d:a6:ac:03:ec:96:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
        Validity
            Not Before: Jan  8 22:48:11 2025 GMT
            Not After : Jan  7 22:53:11 2026 GMT
        Subject: CN=70883D9DFBBF9F2C75A6A7C01931767AAF8C92B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:e3:8a:e6:51:87:a2:5d:ab:d6:cb:1d:8d:
                    12:32:49:a3:a5:e7:87:5b:39:1f:18:f2:58:08:e7:
                    bf:8c:f2:64:72:a6:1e:3a:e6:9b:8a:9e:51:5f:1d:
                    e2:15:88:9d:ed:85:07:6f:9e:85:ae:07:d9:00:85:
                    cc:c3:24:09:8a:ba:ea:8a:f4:16:75:68:77:d2:b3:
                    12:40:a8:48:65:53:1b:83:a6:e8:83:71:4e:24:c5:
                    72:db:b2:d1:32:00:8f:2d:e2:11:33:ce:f2:16:82:
                    01:9f:57:e7:b6:6f:b5:12:ad:0b:7e:cf:22:65:d6:
                    7f:47:bd:16:21:0e:1f:1b:0e:7f:2e:40:80:70:c4:
                    d4:37:40:38:46:16:20:04:14:fa:cb:4e:e0:46:98:
                    ba:72:38:4d:e3:f7:1b:d4:76:f5:08:04:67:1d:07:
                    7d:51:e1:59:82:b1:d7:4c:be:2e:b7:5e:1b:28:82:
                    b0:2e:8b:1b:48:ea:5a:97:52:d3:fa:e5:fa:bb:86:
                    c1:c3:2c:25:d6:4a:fb:10:05:93:6f:f4:73:72:aa:
                    79:9b:ae:1a:24:09:ca:75:cc:fd:7f:09:59:46:5e:
                    47:b0:80:c7:39:99:99:fa:ad:c5:15:27:9c:82:30:
                    8c:fb:c1:d1:68:0a:9f:df:76:6f:d7:5d:40:7a:46:
                    b2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:88:3D:9D:FB:BF:9F:2C:75:A6:A7:C0:19:31:76:7A:AF:8C:92:B5
            X509v3 Authority Key Identifier:
                keyid:35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135372e302f32342d3234203d3e20323638313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:b9:59:cc:34:37:04:34:a4:d3:78:c7:8e:89:ae:e1:c4:af:
         ee:48:87:6e:bb:4b:8a:d2:e7:0a:24:05:70:0d:ab:30:81:ff:
         35:7c:a0:d8:3b:cd:a4:b7:79:fb:74:4e:5e:ba:b2:5d:4c:c8:
         53:fc:9b:5e:02:37:8b:4a:5b:0c:76:74:ee:0a:09:27:2d:9b:
         69:38:6d:d8:b3:b2:74:6e:4b:21:50:49:35:09:f2:54:67:c9:
         1f:cb:52:bc:a9:55:69:07:05:5e:3e:9e:d9:3a:00:f1:2e:69:
         04:a8:e6:bb:a8:1c:89:1a:43:24:7b:9d:31:5b:06:9a:ef:5d:
         37:59:0f:6d:30:f7:26:92:12:20:eb:a0:75:a4:69:d4:a5:0f:
         10:05:8b:ca:d2:8e:95:f0:c1:a6:46:fd:92:88:86:08:e8:0b:
         28:be:88:7e:06:9e:91:05:44:81:0c:d4:04:f3:4c:de:f3:87:
         ba:e4:49:e5:f4:4e:86:03:36:4b:a0:25:48:9a:33:81:21:ce:
         1e:d8:16:7d:cf:7b:9a:b4:f4:47:41:12:9f:f3:e2:03:2c:c8:
         c6:8b:6f:59:f1:64:88:16:30:5e:f7:fc:53:ea:12:0a:76:9d:
         e5:7c:92:4e:4d:dc:ac:6c:3b:ed:55:72:78:94:df:1e:83:99:
         90:02:73:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:05:19 2025 by rpki-client