Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32322d3232203d3e20323638393235.roa
File:                     34352e3137362e342e302f32322d3232203d3e20323638393235.roa (raw, json)
Hash identifier:          CeATINeqNLdf60le/BIwkN/xOGs1y9rgqaE0qbq9X1U=
Subject key identifier:   CC:35:31:07:FB:EB:7F:A2:14:CC:9E:9A:1F:52:A1:F2:B2:D3:67:F6
Certificate issuer:       /CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
Certificate serial:       38068C6C0631F89D436B9BA4A33450DD2940F717
Authority key identifier: B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32322d3232203d3e20323638393235.roa
Signing time:             Thu 06 Mar 2025 08:14:52 +0000
ROA not before:           Thu 06 Mar 2025 08:09:52 +0000
ROA not after:            Thu 05 Mar 2026 08:14:52 +0000
asID:                     268925
IP address blocks:        45.176.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:06:8c:6c:06:31:f8:9d:43:6b:9b:a4:a3:34:50:dd:29:40:f7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
        Validity
            Not Before: Mar  6 08:09:52 2025 GMT
            Not After : Mar  5 08:14:52 2026 GMT
        Subject: CN=CC353107FBEB7FA214CC9E9A1F52A1F2B2D367F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:28:b6:5c:d7:e0:e0:57:49:d3:02:11:ca:
                    a7:9b:0e:62:22:83:5d:8c:ba:d4:ed:b0:8f:b7:23:
                    7b:47:13:8b:06:a2:1d:49:b0:93:a4:70:8d:63:d5:
                    e3:ad:ca:bf:62:fa:1b:2b:d7:0d:c1:03:91:98:60:
                    3f:d4:2e:75:2d:82:2d:b9:cd:dc:ba:25:b3:57:81:
                    03:72:88:ee:a2:13:d0:8f:c8:cc:30:9c:db:2b:ee:
                    d5:16:3f:b8:21:5c:da:e4:73:bc:de:04:5f:9b:a4:
                    fe:d7:a9:d1:17:37:ac:b7:6a:27:a8:d1:34:83:9a:
                    15:97:92:95:6d:3b:58:1b:01:48:fb:03:65:b9:d2:
                    0f:78:0a:1c:80:7f:1a:3f:d3:a1:43:ba:ff:e5:38:
                    eb:a9:d1:1c:85:a4:ac:d6:9e:70:e3:da:20:53:09:
                    9e:3a:66:07:65:12:88:01:b4:59:f1:23:82:bb:6d:
                    8d:94:f6:bf:20:16:91:5a:09:93:f0:03:a4:62:1c:
                    81:6d:5e:3f:ef:07:9a:2f:4f:6b:6e:21:a3:1f:d9:
                    24:bf:a3:73:8c:5a:89:04:67:9f:80:69:0c:e6:35:
                    03:18:16:77:f7:c1:e9:b7:6c:8d:74:47:63:5b:d0:
                    c9:54:e3:ca:3a:78:2c:ae:3f:95:74:96:86:e8:be:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:35:31:07:FB:EB:7F:A2:14:CC:9E:9A:1F:52:A1:F2:B2:D3:67:F6
            X509v3 Authority Key Identifier:
                keyid:B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32322d3232203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:de:c6:5c:3e:f4:d0:d1:6c:01:b1:14:5f:91:4c:81:11:9c:
         5c:ec:1f:c4:7c:1f:7a:b4:40:66:9f:a0:4a:78:bb:43:9d:9a:
         6b:1c:81:cd:10:5d:5e:ad:64:34:e9:17:c9:4c:8d:55:b9:f5:
         74:68:c4:6d:0a:f0:e8:19:38:1c:9d:bb:77:64:2e:94:f8:b4:
         0e:92:4e:6e:04:fb:70:a2:fd:ed:bf:90:91:06:a0:c4:31:18:
         09:3f:7d:50:47:8d:1a:af:4e:87:67:9c:98:c4:80:eb:45:4e:
         8c:a2:a0:60:93:3d:16:d2:3e:55:e2:06:b1:11:25:dc:ee:a5:
         6a:41:8d:1f:53:d0:f0:09:77:20:45:d1:cd:ec:19:0c:a9:79:
         2d:a3:17:30:be:32:0a:93:b3:13:9d:b8:96:f7:86:1d:7d:15:
         24:c9:82:4b:31:89:f0:bc:bc:67:26:74:99:03:85:09:8f:8e:
         83:0e:65:81:cd:64:05:ed:5a:af:d2:c6:21:82:43:0c:10:e0:
         e0:59:35:ad:c2:31:66:5b:f0:7c:4f:50:09:64:7d:b9:e7:81:
         55:a5:00:84:24:2d:01:27:d6:5b:3b:4f:b2:30:15:1e:10:fe:
         60:cd:36:f9:83:a2:17:1a:85:88:d6:95:5e:f6:67:a5:e0:de:
         bc:85:8e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:06:41 2025 by rpki-client