Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136362e302f32342d3234203d3e20323638343132.roa
File:                     34352e3136302e3136362e302f32342d3234203d3e20323638343132.roa (raw, json)
Hash identifier:          nvTQOWfo4JxyXdtriO9W5mVu9ZLZJ2g7cfC0H3xw91E=
Subject key identifier:   CA:3E:02:0B:E7:8B:F6:1A:FD:A8:9E:A0:71:BC:C9:3A:43:73:3B:75
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       51B5AA95B883BB846C4AA19B4B4B8B51B8EF04BC
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136362e302f32342d3234203d3e20323638343132.roa
Signing time:             Thu 06 Mar 2025 07:27:24 +0000
ROA not before:           Thu 06 Mar 2025 07:22:24 +0000
ROA not after:            Thu 05 Mar 2026 07:27:24 +0000
asID:                     268412
IP address blocks:        45.160.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b5:aa:95:b8:83:bb:84:6c:4a:a1:9b:4b:4b:8b:51:b8:ef:04:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Mar  6 07:22:24 2025 GMT
            Not After : Mar  5 07:27:24 2026 GMT
        Subject: CN=CA3E020BE78BF61AFDA89EA071BCC93A43733B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9b:dc:bc:1a:33:33:49:08:9c:d1:f6:29:de:
                    2c:83:88:e7:27:16:8a:d3:bc:07:45:8e:53:4b:4e:
                    68:4d:ab:fc:4a:0b:cd:d3:71:02:8c:2c:b1:f1:4a:
                    98:72:07:d2:5d:b0:c4:10:5c:47:cf:89:4b:8e:32:
                    52:1f:17:f6:6e:47:d8:1f:62:d3:00:dd:29:b3:60:
                    99:8c:b6:ea:2f:8a:0e:f8:a7:53:14:41:84:f6:86:
                    89:62:fd:72:65:e0:58:de:cf:db:ab:0f:d5:ac:52:
                    0c:6d:d1:52:56:69:b6:18:f8:f4:2e:f9:a2:47:5d:
                    c1:de:33:79:0b:37:08:36:25:60:89:a7:6d:0b:ee:
                    cf:8c:ec:af:80:7c:92:79:1f:c8:6b:d5:41:4e:b8:
                    55:d0:d6:a2:38:80:a8:97:78:9b:e6:d8:64:3d:ac:
                    27:73:34:81:44:83:b5:8a:94:19:6e:f3:8f:1f:e9:
                    d0:f3:b8:a2:57:5c:f4:c0:52:fe:d8:cd:21:32:aa:
                    b9:e8:76:b2:c7:f0:19:79:d6:c3:42:7f:ed:84:51:
                    f8:d6:bf:8a:b9:d6:8e:bb:0a:a5:ab:0c:a7:5d:96:
                    16:28:77:31:47:df:41:35:99:b5:f6:47:81:a4:a9:
                    d9:91:4f:01:71:d8:b5:0f:5c:a2:10:a4:bc:f1:19:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3E:02:0B:E7:8B:F6:1A:FD:A8:9E:A0:71:BC:C9:3A:43:73:3B:75
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136362e302f32342d3234203d3e20323638343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:f6:93:9c:4d:f5:70:64:41:79:5d:fc:62:1e:3d:ce:cd:
         13:cc:73:e2:19:b2:c6:bf:e4:5c:70:1c:75:f6:99:1a:7d:13:
         ce:08:c1:f6:56:4a:51:83:62:60:6e:b6:5f:ee:85:d0:2a:14:
         40:f8:25:d8:b9:ab:e0:8e:be:07:21:b8:4a:6c:4d:44:ed:7b:
         9e:08:8c:dd:ec:1f:42:da:df:92:68:aa:19:0f:dd:28:51:b8:
         dc:55:15:cf:26:52:c9:3b:42:d0:5b:44:54:ac:54:a0:56:67:
         2b:e8:27:f3:b0:b0:aa:b6:e7:40:44:0a:b6:d8:41:24:15:46:
         ce:a0:9c:54:38:54:5d:84:bb:c9:5b:0f:18:4b:2d:de:df:83:
         74:f8:53:8f:69:0f:55:bd:95:8f:39:04:6d:47:17:ae:fe:ae:
         da:1e:6f:15:6f:63:ca:85:21:f5:fd:d1:bb:5d:c3:54:23:e6:
         2f:41:70:41:1c:c8:cd:ac:81:4d:35:f1:1f:84:a6:26:31:2c:
         01:c7:b6:3d:63:d2:50:0e:87:99:3c:05:03:0c:a6:f8:f1:39:
         b9:a6:0b:08:cb:83:6b:f2:e3:64:df:73:ab:8f:07:94:6e:19:
         22:3a:1e:e3:e8:2e:e9:fc:a8:94:70:33:45:f9:fc:7c:c1:1d:
         19:6d:29:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:00:09 2025 by rpki-client