Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/1/34352e3232372e3131362e302f32322d3234203d3e20323637303131.roa
File:                     34352e3232372e3131362e302f32322d3234203d3e20323637303131.roa (raw, json)
Hash identifier:          XZbm2TQ59WYghY+YA2jHdE8Z0JW+8U3dtRRkfQRh0vw=
Subject key identifier:   4A:37:4D:9C:5E:55:3E:B4:44:95:62:AB:CD:1E:56:51:80:5A:5A:56
Certificate issuer:       /CN=9BD27D2D733EE404F145017F5543209E8B6B11D6
Certificate serial:       53E38C106070AF72E5C95D10ABF0628BEBD70E13
Authority key identifier: 9B:D2:7D:2D:73:3E:E4:04:F1:45:01:7F:55:43:20:9E:8B:6B:11:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BD27D2D733EE404F145017F5543209E8B6B11D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/1/34352e3232372e3131362e302f32322d3234203d3e20323637303131.roa
Signing time:             Thu 06 Mar 2025 01:13:43 +0000
ROA not before:           Thu 06 Mar 2025 01:08:43 +0000
ROA not after:            Thu 05 Mar 2026 01:13:43 +0000
asID:                     267011
IP address blocks:        45.227.116.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e3:8c:10:60:70:af:72:e5:c9:5d:10:ab:f0:62:8b:eb:d7:0e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD27D2D733EE404F145017F5543209E8B6B11D6
        Validity
            Not Before: Mar  6 01:08:43 2025 GMT
            Not After : Mar  5 01:13:43 2026 GMT
        Subject: CN=4A374D9C5E553EB4449562ABCD1E5651805A5A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:cc:26:e6:a5:70:bd:a0:8d:44:e6:4e:6a:
                    1d:2e:2a:3f:48:fe:15:e3:a6:8e:b6:8e:94:73:e9:
                    9f:b0:ea:18:7d:c6:00:5a:30:5e:21:35:5b:47:cb:
                    34:35:40:a7:18:77:13:10:6e:d8:49:70:86:58:b1:
                    f9:0f:8f:1b:75:80:c6:24:e6:c4:20:c5:0a:74:a9:
                    92:93:b7:08:3c:a3:2a:52:79:47:d1:14:2a:56:0b:
                    17:1b:8c:16:99:8f:a8:9c:37:fb:e1:b4:c3:95:7d:
                    48:55:40:9d:e7:5e:29:28:ca:50:a9:1c:b1:fd:21:
                    ee:2d:6a:a1:9c:eb:88:8f:31:8b:4a:06:98:fa:2a:
                    1b:42:b1:e6:15:68:b4:6a:20:47:05:d6:dd:05:09:
                    cf:4f:43:a7:2d:e3:d5:2e:eb:22:b1:8a:82:56:49:
                    af:cc:6b:1d:f4:47:68:1f:af:f3:be:0a:2b:27:75:
                    a9:ac:d6:00:42:2e:e7:3a:92:ef:76:f5:07:39:99:
                    1c:50:27:8b:9c:86:51:4c:77:83:40:5f:3f:b3:dd:
                    88:a8:bb:44:29:aa:65:f9:a9:f3:43:b3:0e:f3:d8:
                    91:27:02:bc:b8:18:80:cc:b6:37:31:48:d4:d1:04:
                    b5:ef:cd:08:4e:a7:86:8c:ea:b5:fa:57:ae:16:bb:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:37:4D:9C:5E:55:3E:B4:44:95:62:AB:CD:1E:56:51:80:5A:5A:56
            X509v3 Authority Key Identifier:
                keyid:9B:D2:7D:2D:73:3E:E4:04:F1:45:01:7F:55:43:20:9E:8B:6B:11:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/1/9BD27D2D733EE404F145017F5543209E8B6B11D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BD27D2D733EE404F145017F5543209E8B6B11D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/1/34352e3232372e3131362e302f32322d3234203d3e20323637303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:d2:f5:29:62:6e:cf:fe:b8:47:d0:00:ab:d7:98:80:56:
         45:56:11:49:c9:9f:db:82:a5:fc:2b:25:9c:ac:f6:aa:61:97:
         b1:d3:3f:83:ef:b2:15:d6:9d:2e:e8:f1:ba:ab:37:0b:c3:d5:
         94:5e:9a:aa:ec:6c:c7:77:1d:ce:b1:6d:a9:b4:9e:ed:a3:b1:
         8b:c1:8b:c4:2a:99:0a:13:0d:03:21:98:f6:5f:69:db:5f:87:
         cd:4f:21:bc:c4:91:c7:16:63:8d:42:11:90:98:ec:51:7a:74:
         55:1c:6f:73:dc:eb:bd:a4:e0:81:32:05:e0:4b:65:fe:d2:ee:
         5f:c0:59:7d:17:a9:a6:18:af:45:8d:b6:6f:81:f0:7c:f9:78:
         fe:5b:2e:a3:dc:91:fb:06:61:be:df:08:dd:4a:d9:d5:98:1c:
         c1:14:f5:05:ef:90:72:44:b9:b6:84:65:bc:02:98:66:02:96:
         21:11:27:f2:1e:33:e9:9b:d2:20:4b:79:7b:b4:e4:93:f3:18:
         fa:38:a7:02:26:82:3a:48:27:3d:2b:26:9f:21:a3:d6:77:a8:
         e4:f2:79:d8:c1:80:7c:67:d7:42:81:e3:8f:8f:04:b3:2d:20:
         2d:d3:2f:95:66:83:3a:f7:f5:73:37:87:88:9e:0c:3b:f7:2d:
         84:d0:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:08:57 2025 by rpki-client