Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e34382e302f32322d3234203d3e20323636393431.roa
File:                     34352e3232352e34382e302f32322d3234203d3e20323636393431.roa (raw, json)
Hash identifier:          I3BvNkMMKdn4vPbZqOeb0sP5W9Vr56k2foIPHJuJKzw=
Subject key identifier:   B6:31:A0:CE:63:55:49:8D:40:CE:DD:19:C2:3E:92:A4:63:C0:A6:F1
Certificate issuer:       /CN=0F65E02527C7C2583942CEAED0FA68C7FFC806C0
Certificate serial:       5179FA503673E5C5AA1ABEFD7E94B6429CE75110
Authority key identifier: 0F:65:E0:25:27:C7:C2:58:39:42:CE:AE:D0:FA:68:C7:FF:C8:06:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e34382e302f32322d3234203d3e20323636393431.roa
Signing time:             Wed 13 Mar 2024 20:05:06 +0000
ROA not before:           Wed 13 Mar 2024 20:00:06 +0000
ROA not after:            Wed 12 Mar 2025 20:05:06 +0000
asID:                     266941
IP address blocks:        45.225.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:79:fa:50:36:73:e5:c5:aa:1a:be:fd:7e:94:b6:42:9c:e7:51:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F65E02527C7C2583942CEAED0FA68C7FFC806C0
        Validity
            Not Before: Mar 13 20:00:06 2024 GMT
            Not After : Mar 12 20:05:06 2025 GMT
        Subject: CN=B631A0CE6355498D40CEDD19C23E92A463C0A6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:73:a7:75:d9:dd:23:51:c6:f6:c7:77:0c:
                    b0:a1:17:2c:ea:54:c3:ce:28:8d:5b:14:94:32:b3:
                    20:3c:55:80:95:a4:df:ed:79:dd:0e:51:89:10:09:
                    5b:3c:ac:8c:70:93:1a:29:6e:96:0c:e8:37:43:50:
                    15:06:11:18:96:4e:9e:b0:69:21:ed:68:74:a8:30:
                    86:5c:07:49:ce:3c:aa:1f:b6:04:8a:3a:67:40:fd:
                    fa:c3:0d:6a:8c:be:7c:ab:0d:8d:7c:6a:3e:b0:60:
                    dc:88:33:d7:5d:3f:4b:33:c6:9f:7d:f4:66:25:7a:
                    44:46:82:7b:8b:90:2c:5a:4a:64:f5:fd:20:23:d1:
                    e1:7f:fb:ac:54:9a:be:a6:41:2e:eb:05:16:43:f1:
                    98:8b:74:fa:f7:a3:ce:f1:ed:86:86:47:19:62:85:
                    d7:d4:c4:8e:d7:bc:b6:dd:89:c8:24:60:e9:3f:0a:
                    ee:09:7f:ad:f0:f0:01:c6:5a:89:86:33:4b:ef:e5:
                    59:5c:9d:40:47:06:28:0f:aa:11:9e:2b:5a:0a:41:
                    f2:dc:53:b2:49:e1:1c:22:57:b2:f7:7c:b2:f7:ab:
                    1b:3a:76:e8:c1:f7:93:27:97:98:88:3f:a6:90:1a:
                    d8:0f:70:1e:d8:d8:b6:69:71:16:bc:81:1c:16:2d:
                    98:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:31:A0:CE:63:55:49:8D:40:CE:DD:19:C2:3E:92:A4:63:C0:A6:F1
            X509v3 Authority Key Identifier:
                keyid:0F:65:E0:25:27:C7:C2:58:39:42:CE:AE:D0:FA:68:C7:FF:C8:06:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e34382e302f32322d3234203d3e20323636393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:2b:2b:e0:9c:f5:9b:1c:85:6c:ef:9f:e1:e5:cf:82:07:74:
         38:67:1d:29:59:3c:8f:96:b3:e1:4d:c6:12:83:19:cc:fc:00:
         28:32:03:0d:93:8a:e4:d6:af:dc:ef:5b:66:fa:d7:dd:2a:46:
         90:2f:1d:9d:73:0f:d1:f4:21:ed:ad:71:f8:d5:0f:b3:f7:9f:
         85:17:b8:1b:fe:ba:92:11:e0:09:03:23:38:25:96:3f:73:5c:
         3f:74:1b:fb:65:00:13:32:b8:e4:b9:bb:65:d2:0d:c1:9b:4a:
         e2:b8:9d:48:9c:4a:8a:00:22:bc:5a:e3:e7:00:11:7d:29:c7:
         68:4f:39:0a:ef:3c:87:c6:a8:13:f1:0b:af:4b:f3:90:11:08:
         e3:bd:6b:18:a2:0c:2e:87:e2:68:55:3d:21:2c:57:99:fe:57:
         97:bf:a6:d8:41:42:f7:72:8f:c5:36:04:b1:6b:5d:ab:df:c8:
         65:95:b1:67:80:c2:50:d8:ce:eb:2e:ff:03:2c:70:e3:a9:64:
         ff:01:7a:49:a9:33:0d:57:50:b0:43:13:bf:20:e4:28:88:4b:
         af:68:14:84:95:38:6c:09:af:67:2c:be:ae:88:5a:3b:a8:93:
         ac:df:f9:93:a6:22:2f:04:4d:a5:76:a8:62:a2:ab:81:3e:cf:
         23:e7:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:09 2025 by rpki-client