Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e362e302f32332d3233203d3e20323638393235.roa
File:                     34352e3137362e362e302f32332d3233203d3e20323638393235.roa (raw, json)
Hash identifier:          asoLWVKMTSqQN3zqUWKbkNd2t3Bbhqmk6pE9Na01b9g=
Subject key identifier:   FA:26:E0:5D:5A:F7:88:F4:A1:85:47:03:BE:00:47:9A:1D:3E:C4:88
Certificate issuer:       /CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
Certificate serial:       20E4374301A626ED15D34070A4D4951CC5B2E4AE
Authority key identifier: B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e362e302f32332d3233203d3e20323638393235.roa
Signing time:             Thu 06 Mar 2025 08:14:50 +0000
ROA not before:           Thu 06 Mar 2025 08:09:50 +0000
ROA not after:            Thu 05 Mar 2026 08:14:50 +0000
asID:                     268925
IP address blocks:        45.176.6.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e4:37:43:01:a6:26:ed:15:d3:40:70:a4:d4:95:1c:c5:b2:e4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
        Validity
            Not Before: Mar  6 08:09:50 2025 GMT
            Not After : Mar  5 08:14:50 2026 GMT
        Subject: CN=FA26E05D5AF788F4A1854703BE00479A1D3EC488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:fa:3b:35:00:81:f5:e4:93:a2:e0:ce:50:
                    ee:54:27:d0:c9:7c:80:b4:6f:85:d2:d1:cb:ac:7b:
                    b9:89:8b:45:5f:f8:61:b9:ab:c4:67:6c:80:5e:8b:
                    20:9f:f1:b1:71:ef:13:f4:de:5b:21:dd:85:3b:1a:
                    36:0b:55:96:dd:fc:44:69:99:26:a8:d2:5f:17:de:
                    4d:98:ba:d3:76:77:33:da:5d:06:62:99:84:cc:e9:
                    87:7d:e5:aa:e5:ed:81:54:9b:03:44:ee:f2:e4:7e:
                    b5:dd:5b:2e:14:4b:d0:91:da:d7:2b:e8:56:0c:8b:
                    93:50:ac:c3:9a:6d:98:50:d5:0a:7d:87:1e:1f:82:
                    fb:e0:dc:a2:f5:3c:7a:d3:e6:a4:7f:3d:98:f3:86:
                    41:f7:d7:3b:f8:0e:f7:d0:d4:10:b6:a2:ba:d9:c4:
                    3b:24:4e:c6:04:91:ea:cd:49:05:0c:cb:4f:a9:38:
                    5c:96:b0:40:f1:18:cb:92:25:e9:ba:25:d3:e4:d0:
                    55:65:47:92:f4:fe:6a:0b:5c:19:9f:c5:55:8e:69:
                    bb:bf:87:25:28:b8:9d:a4:05:19:05:07:86:36:7a:
                    d9:16:0c:bd:b9:7d:53:82:93:f8:2a:03:3a:29:7c:
                    03:2a:9a:e2:0b:8f:6d:69:41:ab:a0:fe:74:05:2b:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:26:E0:5D:5A:F7:88:F4:A1:85:47:03:BE:00:47:9A:1D:3E:C4:88
            X509v3 Authority Key Identifier:
                keyid:B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e362e302f32332d3233203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:a9:74:9a:dc:51:9a:05:71:c5:3a:1f:5d:a4:3c:4f:d3:05:
         8a:83:ee:45:be:3e:0d:47:42:bb:53:0e:e9:7e:ca:85:30:39:
         43:f2:60:22:c0:e1:ce:ff:28:4a:1c:62:12:c6:75:f6:90:2e:
         12:4c:55:2b:0e:33:aa:d7:47:f9:a6:7b:c4:7c:69:0c:86:4d:
         80:b6:e2:fe:11:d3:51:17:f4:36:ed:b8:d3:eb:fd:a8:3e:64:
         23:98:f6:63:c0:9f:fa:d9:9a:7d:35:9b:c7:4c:00:86:f5:30:
         73:41:25:40:ae:fd:f5:92:31:f8:38:a2:67:5e:5d:4c:a7:90:
         e3:2a:08:50:3c:0e:83:63:da:ec:85:fc:47:2c:eb:0f:f3:dd:
         7d:81:38:f0:53:5c:93:ba:a6:d0:6a:63:f4:5d:62:b5:21:f3:
         8b:6c:ea:dd:60:b0:fe:d2:02:20:a1:36:d8:fa:67:10:a5:0c:
         b0:da:73:df:b4:aa:59:65:7a:14:4c:f4:b1:f4:06:5d:69:25:
         c7:99:24:61:80:d8:9b:ac:dd:6d:51:a8:8e:1a:46:9c:7e:24:
         d0:8a:0d:71:46:14:da:ab:cd:91:9d:48:75:22:09:76:a8:7b:
         a0:67:39:4c:38:cc:d5:8a:da:2a:96:eb:7a:33:42:71:a6:7a:
         d7:bc:05:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:27:38 2025 by rpki-client