Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130312e302f32342d3234203d3e20323636303935.roa
File:                     34352e352e3130312e302f32342d3234203d3e20323636303935.roa (raw, json)
Hash identifier:          qJJWdBVptwRWOrHvJAb/ffiZsvB5WXq6moJu3ezYBIo=
Subject key identifier:   46:47:20:B4:0E:21:39:65:7D:6D:F2:7A:92:21:5E:05:EE:A3:FD:B0
Certificate issuer:       /CN=771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0
Certificate serial:       31DE8477CF1BC793D4164CBC89C4BA2AB6F1EBA1
Authority key identifier: 77:1D:E8:CD:05:B7:DC:3B:A5:A3:29:B2:F1:10:E4:AD:8D:6C:7B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130312e302f32342d3234203d3e20323636303935.roa
Signing time:             Fri 03 Jan 2025 14:22:20 +0000
ROA not before:           Fri 03 Jan 2025 14:17:20 +0000
ROA not after:            Fri 02 Jan 2026 14:22:20 +0000
asID:                     266095
IP address blocks:        45.5.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:de:84:77:cf:1b:c7:93:d4:16:4c:bc:89:c4:ba:2a:b6:f1:eb:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0
        Validity
            Not Before: Jan  3 14:17:20 2025 GMT
            Not After : Jan  2 14:22:20 2026 GMT
        Subject: CN=464720B40E2139657D6DF27A92215E05EEA3FDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:76:29:3c:6c:79:92:68:4c:1b:d1:34:bf:
                    3c:73:81:ce:f0:0c:b9:34:e8:13:6e:20:d8:ec:41:
                    4c:d3:ed:fc:05:76:62:8c:cf:ed:f2:63:cf:f9:ce:
                    97:35:e6:76:55:b7:b7:9b:1f:94:99:ca:b5:13:09:
                    e9:8e:b7:83:6e:d0:59:c1:5a:aa:25:e1:8a:cf:63:
                    13:39:f9:56:89:6f:01:6b:79:8d:df:24:03:48:d7:
                    c1:01:27:c3:10:bc:0b:0c:dd:c2:17:05:b7:f5:53:
                    9a:c6:53:b8:b8:2b:81:61:b9:ca:84:75:16:4a:95:
                    d1:f3:f6:80:50:51:59:60:c3:b7:1d:7c:03:46:d9:
                    60:de:00:38:f1:f5:ff:1b:72:5c:96:7d:da:92:71:
                    6f:e1:85:5b:99:f1:e6:7c:ab:1a:ac:a1:87:ac:d1:
                    1e:32:5c:b8:cc:1f:af:e0:f4:32:36:e5:c5:90:8a:
                    74:a8:39:fb:21:dd:89:a8:4f:5c:1f:43:bf:79:7b:
                    70:25:4e:83:b6:4b:ad:2b:ef:ff:2e:59:89:b0:0a:
                    b3:70:b4:3b:45:96:4b:c7:99:14:21:93:fc:95:45:
                    7b:2f:c1:85:ab:60:03:4f:c0:de:ca:6a:18:21:80:
                    9d:2c:b7:ed:3f:66:8f:c0:68:57:2e:10:51:5e:f4:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:47:20:B4:0E:21:39:65:7D:6D:F2:7A:92:21:5E:05:EE:A3:FD:B0
            X509v3 Authority Key Identifier:
                keyid:77:1D:E8:CD:05:B7:DC:3B:A5:A3:29:B2:F1:10:E4:AD:8D:6C:7B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130312e302f32342d3234203d3e20323636303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:29:66:eb:18:a2:b2:5f:c7:c9:82:fc:78:9c:b2:db:43:2c:
         9f:e5:6d:10:5b:dd:33:0e:13:04:90:ff:6c:eb:ed:09:71:09:
         e1:82:c0:75:6f:94:23:16:2a:b9:b4:48:d4:51:18:f4:61:00:
         ab:67:0c:86:c0:8e:75:7f:a7:22:60:1a:d1:5e:77:fc:4e:7a:
         38:a7:80:b1:a2:6f:7c:fc:52:8c:5e:41:c7:4b:e1:49:75:6d:
         9d:f1:0e:2a:fc:3f:50:5b:0f:d4:ee:0a:db:80:9f:7d:7d:ab:
         0f:2e:f5:fd:84:e7:b9:8b:18:4a:1a:0e:8f:76:af:5f:75:9b:
         02:ac:69:a3:3d:67:e8:22:a1:71:39:df:59:c1:63:13:65:99:
         32:32:95:5c:7f:cf:e4:e4:93:af:3c:c6:b0:94:d1:46:58:b9:
         a7:28:78:f5:7a:d0:6e:f1:9e:83:5d:e6:67:88:48:cc:72:2d:
         d4:3d:fb:93:b3:03:f3:2b:42:90:a7:21:d0:95:50:b3:ae:15:
         3c:52:68:8f:c5:0c:1b:c9:3c:cf:10:36:7f:86:46:d9:91:5a:
         6e:a0:f5:0b:8e:a2:13:32:e2:b2:78:55:b7:05:2d:e1:3b:81:
         cd:e4:89:28:c4:a6:9e:21:b7:36:17:24:cc:a6:74:3a:41:91:
         23:d1:17:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:21:37 2025 by rpki-client