Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32342d3234203d3e20323638393235.roa
File:                     34352e3137362e342e302f32342d3234203d3e20323638393235.roa (raw, json)
Hash identifier:          iQVn+/RYhJbxcuOxvHYSQ4MIahkVvGdk370aZ6wPET8=
Subject key identifier:   D8:3F:DF:B2:63:E2:EC:80:A9:CD:73:19:37:7B:BF:4C:E0:39:D6:FC
Certificate issuer:       /CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
Certificate serial:       2FFE29314CABD446C6A0A74C5A4E0C6BA7D5D6A8
Authority key identifier: B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32342d3234203d3e20323638393235.roa
Signing time:             Thu 06 Mar 2025 08:14:53 +0000
ROA not before:           Thu 06 Mar 2025 08:09:53 +0000
ROA not after:            Thu 05 Mar 2026 08:14:53 +0000
asID:                     268925
IP address blocks:        45.176.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fe:29:31:4c:ab:d4:46:c6:a0:a7:4c:5a:4e:0c:6b:a7:d5:d6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
        Validity
            Not Before: Mar  6 08:09:53 2025 GMT
            Not After : Mar  5 08:14:53 2026 GMT
        Subject: CN=D83FDFB263E2EC80A9CD7319377BBF4CE039D6FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:1d:6e:19:e1:6a:e3:83:44:14:d2:c1:60:
                    87:d0:ff:9d:c9:eb:1b:11:36:d6:8e:6f:fc:ae:96:
                    2a:1f:8a:83:b0:f4:eb:9a:69:7b:a1:ab:e5:de:99:
                    e7:bf:03:9b:a6:35:9c:80:14:0d:b2:c7:e2:68:47:
                    1d:e0:7f:2a:7d:84:44:e5:32:a4:71:7b:c7:ed:a6:
                    e8:7f:73:e9:de:4b:5d:2f:7a:47:ff:b3:69:4b:7b:
                    55:24:09:e6:9e:04:db:d5:bd:33:2e:8f:2b:d6:7e:
                    f3:3d:a3:dc:09:53:35:16:95:48:a6:d7:e1:0f:2a:
                    8a:ae:7c:2e:8e:77:75:b1:7a:62:44:85:f4:f4:c3:
                    3c:2e:c0:f6:ff:7f:26:99:0f:91:e4:1f:76:4b:3e:
                    6e:91:41:5a:c9:22:7f:19:f7:d2:25:1b:d5:5c:c0:
                    36:42:8d:09:0c:8c:ed:81:5f:d3:a0:05:23:25:ad:
                    32:1d:07:e0:e8:b5:59:7e:81:73:4c:20:c4:7b:31:
                    eb:b9:95:ba:24:e6:26:a6:56:de:f8:6e:a4:8a:cb:
                    03:d2:81:b3:5e:3e:21:2d:43:83:99:e7:ec:72:53:
                    ae:ae:e9:b3:cd:99:5b:d2:32:cd:ec:8f:09:f7:b1:
                    bf:65:6a:1d:e7:c1:ad:e2:00:0f:4d:42:09:29:b2:
                    0f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3F:DF:B2:63:E2:EC:80:A9:CD:73:19:37:7B:BF:4C:E0:39:D6:FC
            X509v3 Authority Key Identifier:
                keyid:B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32342d3234203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:42:72:29:67:91:27:0c:06:b7:25:b6:42:9e:23:f6:08:0e:
         de:10:dc:d1:33:70:7c:3e:80:72:ab:77:ad:18:2e:52:ff:ba:
         df:6b:e9:94:b0:72:d4:7d:f8:f3:db:4e:9e:ab:4c:df:3b:a6:
         b4:3a:d5:66:a0:a5:ec:93:43:67:20:1b:ee:6d:77:4c:b5:3d:
         72:c6:f3:92:4d:fb:6c:2a:09:a6:ff:3f:89:6d:12:05:9b:94:
         49:e4:62:bb:04:2e:54:68:1e:1c:85:b3:26:45:af:ce:67:a4:
         f7:b6:5c:46:03:22:e7:f0:23:62:7d:4d:f5:9a:e3:a0:96:12:
         0f:84:5b:19:c6:c6:1c:44:83:c8:80:fc:9b:8c:73:ba:2b:72:
         e5:1b:e9:42:a9:47:1c:99:2e:ba:39:ee:5a:80:de:79:e0:50:
         a8:a1:95:c1:18:30:70:86:5d:76:c4:25:f8:4b:e9:54:67:0e:
         40:36:d5:8b:a4:5e:73:c9:0c:fa:5c:ce:57:93:de:3f:1e:18:
         e6:74:d9:43:3b:01:02:10:11:01:b3:50:4e:33:44:55:cb:82:
         41:4f:00:f1:4c:db:19:3a:35:8e:ee:d1:37:41:fe:0a:7a:25:
         d3:e1:08:05:ae:c8:62:d6:19:ad:18:a4:df:2d:3b:1f:5e:7b:
         04:8f:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:01 2025 by rpki-client