Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131302e302f32342d3234203d3e20323639313833.roa
File:                     34352e3138312e3131302e302f32342d3234203d3e20323639313833.roa (raw, json)
Hash identifier:          CsySUJ5Ith9S5iKoal54iWjTpuAM1N8M1O1IQbgABOE=
Subject key identifier:   39:DD:FD:7F:7B:C3:28:93:4D:E7:0E:0A:D1:7D:FB:5C:58:FE:0E:0C
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       4A11E0ECBE31F831DBB22AB08AE5AC2B216668EE
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131302e302f32342d3234203d3e20323639313833.roa
Signing time:             Wed 19 Mar 2025 18:32:07 +0000
ROA not before:           Wed 19 Mar 2025 18:27:07 +0000
ROA not after:            Wed 18 Mar 2026 18:32:07 +0000
asID:                     269183
IP address blocks:        45.181.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:11:e0:ec:be:31:f8:31:db:b2:2a:b0:8a:e5:ac:2b:21:66:68:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Mar 19 18:27:07 2025 GMT
            Not After : Mar 18 18:32:07 2026 GMT
        Subject: CN=39DDFD7F7BC328934DE70E0AD17DFB5C58FE0E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8c:89:35:2a:0d:34:06:b8:30:03:36:d8:b3:
                    9e:78:c4:6f:72:f8:b4:71:de:66:6b:56:fc:51:46:
                    1a:14:e8:20:d3:e4:3b:ff:c6:bb:9b:c0:c6:c7:f1:
                    4d:60:3e:4e:d2:86:fa:09:94:d5:90:d0:b9:2e:55:
                    10:4a:a5:66:43:7d:1b:b3:7e:86:9f:03:7e:93:6e:
                    d5:d6:c4:39:a3:cd:2b:05:8b:3c:a1:bd:a3:ec:3c:
                    3c:bf:75:50:4f:5e:66:c8:a8:41:86:b5:35:17:54:
                    c2:99:35:70:41:f5:be:b3:44:9c:d1:a4:2a:04:28:
                    fb:80:a3:1e:da:41:89:66:3d:dc:13:e6:37:b0:86:
                    26:aa:cd:47:15:6a:41:f0:36:12:98:9c:f5:48:56:
                    40:f6:1d:e0:75:41:d8:91:34:b5:d8:e7:cf:ba:5a:
                    20:79:0f:c4:9a:9b:d7:e7:90:bb:c7:a1:25:0b:0b:
                    2c:d7:06:e0:b0:82:f9:be:63:be:47:ed:2e:8d:35:
                    16:e7:0d:f7:b7:24:4b:5f:98:ec:d8:1a:c4:3e:69:
                    dd:b7:2c:eb:75:db:83:9b:19:94:54:ca:9d:5f:d3:
                    58:e2:6d:a3:ef:91:38:69:f6:41:2a:b4:4c:36:8d:
                    0c:c2:62:eb:e9:c8:d8:10:75:a9:83:ea:f0:5a:74:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DD:FD:7F:7B:C3:28:93:4D:E7:0E:0A:D1:7D:FB:5C:58:FE:0E:0C
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131302e302f32342d3234203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:2d:31:0b:2c:88:ca:fe:a2:42:d0:77:8c:3b:68:a2:4f:
         5b:62:f2:1b:a0:f7:f7:a1:97:d3:c8:c9:f5:a8:54:7d:b3:76:
         33:ed:17:5f:79:ad:a5:0c:f4:a3:df:c9:ae:44:b1:b1:f9:0d:
         d7:e8:81:e0:65:55:30:2f:28:72:e9:f7:cd:a7:91:b2:3a:7e:
         68:2e:a6:b3:44:db:45:dd:68:63:b5:f8:ae:d2:ed:c6:a5:70:
         a3:96:8b:b5:53:ab:c9:c9:78:2f:56:7d:78:78:7c:fb:fc:04:
         de:05:41:43:84:36:d7:c4:ab:ea:4d:5f:67:2b:91:01:72:98:
         75:31:c5:7e:98:72:4a:69:11:a5:04:f7:8a:40:19:df:77:7e:
         b6:3d:4c:3b:61:bb:cb:c5:59:b5:dc:56:2b:8c:fd:78:97:61:
         ed:70:13:46:01:41:54:fb:a3:49:93:13:a6:c2:b9:07:16:70:
         09:e4:10:76:9b:cf:bf:5b:2d:dd:f9:91:fa:05:bc:a3:8a:ef:
         b2:f1:4c:2a:79:75:5c:d6:4e:f0:11:c4:8b:18:1d:b4:fb:d6:
         93:00:cb:45:cb:5f:07:7a:1c:eb:13:e2:48:63:98:0f:13:97:
         1e:62:9f:5d:5c:54:13:ad:b6:d2:fa:82:11:a1:40:10:24:f3:
         a2:9b:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:52:22 2025 by rpki-client