Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39382e302f32342d3234203d3e20323638363734.roa
File:                     34352e3136352e39382e302f32342d3234203d3e20323638363734.roa (raw, json)
Hash identifier:          9+i7sCc+fn6JzBJIPO9Mu7IMOuYn28ht0HhNneZTgdg=
Subject key identifier:   49:F5:33:45:EC:EE:D0:D7:2E:C0:62:97:D0:2F:C5:BC:12:7C:4A:66
Certificate issuer:       /CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
Certificate serial:       5C7AECFECB2B8F04A2DC4BDDC9E1658E883F52C1
Authority key identifier: DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39382e302f32342d3234203d3e20323638363734.roa
Signing time:             Fri 07 Mar 2025 19:23:22 +0000
ROA not before:           Fri 07 Mar 2025 19:18:21 +0000
ROA not after:            Fri 06 Mar 2026 19:23:21 +0000
asID:                     268674
IP address blocks:        45.165.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7a:ec:fe:cb:2b:8f:04:a2:dc:4b:dd:c9:e1:65:8e:88:3f:52:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
        Validity
            Not Before: Mar  7 19:18:21 2025 GMT
            Not After : Mar  6 19:23:21 2026 GMT
        Subject: CN=49F53345ECEED0D72EC06297D02FC5BC127C4A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:65:07:c6:ad:f0:57:a5:de:5b:65:f5:b9:
                    71:5e:82:db:aa:31:d8:4b:79:2a:bb:c4:e9:7c:00:
                    24:e2:ed:1b:2d:26:95:85:10:93:df:18:64:e2:55:
                    77:90:d0:88:86:2f:aa:68:a1:fd:57:e4:b8:ab:76:
                    0d:4e:4e:87:28:9e:f9:fe:ac:af:28:6f:b5:73:72:
                    7a:f7:37:56:3c:c7:d4:1e:ff:94:6d:20:b7:9a:de:
                    d0:ad:bc:3b:02:0d:d0:26:ec:7e:52:32:eb:d2:f3:
                    6a:6d:0c:54:57:ff:3f:97:aa:51:de:d7:ba:1b:c0:
                    85:93:94:41:48:bb:d1:b9:69:63:39:53:e9:e9:96:
                    15:00:a3:e5:49:70:82:27:87:bd:ce:c6:71:0f:47:
                    2e:b3:5d:84:11:b2:56:80:5f:38:35:33:13:2d:df:
                    60:8d:84:c8:26:07:4a:15:a6:bf:75:5b:c5:0c:67:
                    20:72:3c:06:bc:5d:3c:52:cf:11:ba:0f:d0:43:78:
                    c2:79:8b:7d:ad:11:b4:90:36:a3:1f:a1:42:ad:17:
                    3a:5b:41:14:80:b5:f6:f1:42:ba:5d:24:97:cf:52:
                    91:de:63:b6:72:3c:bf:6f:04:0d:15:9f:f5:8d:0f:
                    4f:11:46:1a:8b:0f:ec:86:9b:8c:85:57:ce:3a:36:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F5:33:45:EC:EE:D0:D7:2E:C0:62:97:D0:2F:C5:BC:12:7C:4A:66
            X509v3 Authority Key Identifier:
                keyid:DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39382e302f32342d3234203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:cd:69:25:d2:0e:60:cb:6b:ad:b3:0f:01:e8:48:67:00:cc:
         60:69:4b:ae:16:3b:45:ce:06:37:75:03:38:93:08:cc:f4:31:
         fc:24:58:84:97:51:d5:04:98:61:fe:66:6e:bd:95:db:e5:8f:
         d1:e2:07:0f:2f:c2:20:3d:e3:5e:1b:4b:e7:77:6a:9e:1c:c7:
         f6:cb:9b:2e:0e:2e:48:ca:9b:f7:2a:e3:05:f1:da:7d:35:d9:
         ea:98:28:c3:32:94:a7:3b:5b:12:2e:c1:bd:b7:9d:45:d6:6c:
         7e:32:ed:18:35:49:4b:06:87:dc:c1:dc:aa:00:2c:cc:87:99:
         27:be:5a:f4:28:dd:cf:f2:a3:58:6d:4a:89:29:66:4b:a5:db:
         ba:15:70:7c:42:17:a1:4f:69:fe:a2:38:cd:bb:94:19:26:c3:
         8b:7c:04:41:33:33:75:fa:f7:94:2f:f9:fc:23:21:3d:d3:86:
         14:f4:b4:e3:1a:1f:43:7a:25:4c:46:76:18:c4:3f:31:37:e6:
         6a:c4:ec:d6:b4:31:37:f5:5b:42:c4:25:f6:5d:6a:8d:90:09:
         5b:fa:7d:f5:4e:db:98:5d:f3:db:87:88:ba:28:d5:cb:b1:6f:
         4d:17:09:25:59:38:f7:9f:13:fe:b1:d4:48:73:9c:25:84:68:
         ea:e6:44:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:56:16 2025 by rpki-client