Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa
File:                     34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa (raw, json)
Hash identifier:          ZNQFYxPOowprSSoYqXoyNYoB8X1AOQSXt+4SBmHB5jQ=
Subject key identifier:   73:E6:73:6C:37:34:B8:C0:20:B6:21:60:D2:E0:79:66:45:75:F1:09
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       1EDA03D0A2E6494791DE8E5CB12CD24B0DEF0AAD
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa
Signing time:             Thu 06 Mar 2025 07:27:24 +0000
ROA not before:           Thu 06 Mar 2025 07:22:24 +0000
ROA not after:            Thu 05 Mar 2026 07:27:24 +0000
asID:                     268412
IP address blocks:        45.160.167.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:da:03:d0:a2:e6:49:47:91:de:8e:5c:b1:2c:d2:4b:0d:ef:0a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Mar  6 07:22:24 2025 GMT
            Not After : Mar  5 07:27:24 2026 GMT
        Subject: CN=73E6736C3734B8C020B62160D2E079664575F109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:69:0e:12:ce:aa:be:6c:3b:cf:29:8a:ff:11:
                    9f:be:02:4d:16:b8:e9:24:87:16:02:05:c8:90:25:
                    59:3f:1e:0a:4a:17:cc:c4:41:4f:3d:5e:75:29:dd:
                    04:e7:43:69:40:5f:98:93:62:06:1f:b0:11:43:48:
                    6e:45:e1:99:e0:ec:a5:06:0e:6a:dc:f2:99:d0:84:
                    d6:93:8d:79:82:fa:70:c3:b7:4f:48:fd:88:95:3e:
                    43:2c:2c:0a:29:28:4f:30:3d:c5:06:ca:59:8c:d6:
                    55:e1:09:50:b7:57:ff:61:55:f4:2e:b1:ab:9d:e3:
                    80:dc:08:55:14:d5:eb:83:cd:c1:8f:e8:06:cf:5c:
                    ab:c6:b0:05:9d:f4:bc:f5:e7:48:e9:ac:33:10:72:
                    6e:e3:98:de:25:03:d0:50:ba:76:39:b8:18:9f:31:
                    1d:1c:b9:81:3f:a5:f0:0d:54:05:b1:8a:94:99:91:
                    c4:2b:bc:d5:33:a3:df:3a:2d:53:e1:2c:cc:07:6d:
                    e8:ae:45:4c:12:a9:d2:5d:95:59:67:83:3f:0d:46:
                    4b:b2:0a:3c:7c:7a:36:88:2a:16:a6:26:28:3e:2a:
                    02:f2:09:21:8e:41:bb:9c:d0:39:88:f1:95:d6:1e:
                    5b:6a:f7:3d:0a:19:af:a9:04:96:9d:8a:13:95:50:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E6:73:6C:37:34:B8:C0:20:B6:21:60:D2:E0:79:66:45:75:F1:09
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:13:f7:9e:0b:2d:4a:06:21:9d:8b:28:b8:77:ca:22:c0:6c:
         f7:5f:1b:d0:d8:56:22:d0:bf:36:ca:b3:77:56:15:9c:c3:72:
         70:0b:8f:e9:be:97:a5:5b:fb:ea:26:40:c7:64:73:51:a3:94:
         a8:a1:51:07:b6:c8:10:27:a2:d3:9b:c6:62:df:d2:23:d4:be:
         15:31:47:a3:13:bc:a6:73:5d:7c:c5:d8:ff:7c:34:39:f8:73:
         66:34:12:89:2a:38:2f:dd:8a:dd:8e:33:04:d3:4b:7d:24:55:
         ed:0c:dd:8e:ea:01:8d:27:b5:50:7c:7f:cc:68:41:18:9e:d3:
         f9:27:17:bc:8a:40:1e:22:05:86:86:8a:0a:ff:ab:b4:77:52:
         0a:2a:cb:71:5e:b9:25:31:2a:0d:ef:96:da:b4:79:09:bc:de:
         0f:e2:38:7d:b0:f4:3a:b5:ec:1a:17:8b:14:70:56:77:40:d9:
         69:c1:1d:44:0e:3e:12:53:77:f0:08:8e:a7:6f:d7:dd:9e:37:
         21:d8:a5:d7:02:14:28:00:d7:0d:a9:3b:bd:54:1a:b7:eb:d7:
         bf:6c:0b:1a:f0:26:9e:d5:68:98:81:fb:bb:ff:96:6d:75:22:
         30:4f:73:5b:22:3e:09:47:7f:24:78:fe:96:2c:0f:ca:f5:3c:
         83:57:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:24:43 2025 by rpki-client