Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32332d3233203d3e20323638363734.roa
File:                     34352e3136352e39362e302f32332d3233203d3e20323638363734.roa (raw, json)
Hash identifier:          G96u8Es8rAMxBgadnJF1aLhiy1bc5gUbAouK+dNgJs4=
Subject key identifier:   80:C8:A8:31:95:E3:C2:AE:79:4A:3E:16:FD:1B:50:37:94:6D:C8:6B
Certificate issuer:       /CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
Certificate serial:       022CE8C16AB3505BFB1148B3573F39E7B93BE038
Authority key identifier: DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32332d3233203d3e20323638363734.roa
Signing time:             Thu 06 Mar 2025 19:00:12 +0000
ROA not before:           Thu 06 Mar 2025 18:55:12 +0000
ROA not after:            Thu 05 Mar 2026 19:00:12 +0000
asID:                     268674
IP address blocks:        45.165.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2c:e8:c1:6a:b3:50:5b:fb:11:48:b3:57:3f:39:e7:b9:3b:e0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
        Validity
            Not Before: Mar  6 18:55:12 2025 GMT
            Not After : Mar  5 19:00:12 2026 GMT
        Subject: CN=80C8A83195E3C2AE794A3E16FD1B5037946DC86B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:b6:92:4f:c8:ef:35:47:6c:97:57:24:12:
                    1e:1b:92:2c:e9:86:7f:bc:ca:00:3c:a7:ba:ca:f4:
                    9a:78:c7:28:fc:12:2f:40:e2:d8:a4:f4:9d:b9:04:
                    34:fd:44:35:ff:a2:0c:9d:e4:b9:ae:48:21:b2:3a:
                    fb:26:bd:fb:54:96:07:70:60:aa:bf:f2:41:60:87:
                    d8:6b:1a:f7:91:f3:e3:76:c9:f0:5c:03:f1:a0:4e:
                    a3:30:35:1c:cd:f1:c0:95:f7:48:11:2f:05:91:a7:
                    23:7f:4f:d4:94:9b:c5:94:f1:df:76:07:31:60:53:
                    28:fe:f0:94:20:8b:8a:9f:3d:0a:a2:31:c7:48:22:
                    27:61:ac:fe:8f:19:85:17:6a:bc:26:72:cf:ef:1a:
                    9a:e0:11:4e:f9:d0:3b:02:07:50:b6:4f:8c:41:7b:
                    a3:53:1d:91:ce:91:6b:b0:36:dd:9c:f2:85:13:bd:
                    35:c2:41:ce:a9:28:6d:be:78:01:44:ba:9e:78:d5:
                    40:e7:fc:09:75:d1:1d:31:8c:af:3e:20:28:98:29:
                    f2:b5:5e:cd:91:bf:b2:af:46:08:99:4c:05:98:a9:
                    2e:4c:0f:db:30:da:b2:78:d5:f2:ea:23:41:bc:42:
                    c4:2c:0b:ab:a9:83:e9:67:f2:27:6a:d3:d4:07:1b:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C8:A8:31:95:E3:C2:AE:79:4A:3E:16:FD:1B:50:37:94:6D:C8:6B
            X509v3 Authority Key Identifier:
                keyid:DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32332d3233203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:34:3b:37:89:79:c6:1e:c0:58:6f:e1:0d:d3:6a:37:8d:8b:
         a1:22:04:b2:3a:8e:9c:3b:eb:39:81:3b:26:ea:78:0e:e8:2c:
         cb:b2:a1:71:53:06:b6:bd:09:09:37:f7:06:81:09:41:ae:d4:
         b6:e6:ac:06:84:11:a5:e0:da:5c:09:95:6e:72:05:1b:eb:b5:
         1a:91:ff:18:03:ee:08:94:92:67:d8:c8:30:95:f9:f6:95:ff:
         f1:28:39:0f:8c:16:26:1f:19:40:e6:74:2d:8e:d2:8c:b2:89:
         5b:e3:53:e8:b5:e4:eb:4b:fd:f5:38:62:f9:1d:83:2d:4b:2b:
         ea:6f:fb:b8:87:5c:31:d9:68:95:2f:a7:42:1f:b6:d7:ed:ac:
         ab:97:17:81:c5:9a:24:0d:d1:35:c8:c2:ad:c6:7f:c1:4e:ff:
         1e:3e:45:51:99:8d:08:f2:f6:3b:3a:3b:a1:31:84:bc:70:53:
         ea:1e:bf:54:e5:db:e2:ea:da:8c:c5:9d:ff:65:17:15:5b:95:
         26:44:1e:66:c2:c6:02:8b:29:3d:92:46:fb:0c:eb:8c:c0:5e:
         75:74:22:bf:5a:79:f1:59:05:e2:a9:53:0f:9b:b6:26:8a:52:
         ff:42:d1:c8:83:31:35:1e:e4:33:04:93:9f:fd:38:1b:67:1d:
         eb:24:02:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:02:21 2025 by rpki-client