Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130312e302f32342d3234203d3e20323639313832.roa
File:                     34352e3138312e3130312e302f32342d3234203d3e20323639313832.roa (raw, json)
Hash identifier:          pnGPnMSh4W8J6uhvRhGprra32VIKeHt45MA6i3B756o=
Subject key identifier:   4F:7A:57:6B:1F:15:E3:D4:0F:61:DF:69:83:17:05:FE:8B:B4:8B:76
Certificate issuer:       /CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
Certificate serial:       2B052999E6F964F1ED0D5E29D7F51D063505B01A
Authority key identifier: 88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130312e302f32342d3234203d3e20323639313832.roa
Signing time:             Mon 17 Mar 2025 14:52:25 +0000
ROA not before:           Mon 17 Mar 2025 14:47:25 +0000
ROA not after:            Mon 16 Mar 2026 14:52:25 +0000
asID:                     269182
IP address blocks:        45.181.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:05:29:99:e6:f9:64:f1:ed:0d:5e:29:d7:f5:1d:06:35:05:b0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
        Validity
            Not Before: Mar 17 14:47:25 2025 GMT
            Not After : Mar 16 14:52:25 2026 GMT
        Subject: CN=4F7A576B1F15E3D40F61DF69831705FE8BB48B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:d7:cb:ca:dd:f9:94:82:ee:77:f9:26:eb:
                    a3:62:e6:52:e4:ea:41:24:1c:06:ed:1a:cd:1c:e0:
                    01:b7:f7:87:fc:ed:f5:11:c7:cc:bd:1e:55:28:58:
                    39:67:47:16:63:b6:b7:6e:21:9a:31:b4:44:f5:86:
                    c2:b9:c5:da:5b:83:68:5e:e7:be:f1:d6:fc:07:d1:
                    19:0d:0e:42:11:d0:e5:ad:78:54:f0:21:d4:c1:f3:
                    f7:89:ff:4c:cb:58:00:cc:ca:bc:ff:a5:2c:22:8a:
                    2f:c0:10:78:86:ca:97:81:1c:29:da:38:e4:fe:51:
                    c6:bf:36:4c:41:f7:c8:92:d9:01:3e:a1:15:94:0e:
                    d3:02:ca:ec:5b:4b:e2:63:3b:23:a4:75:a1:a6:f3:
                    c9:67:43:30:5f:81:29:20:27:8a:4c:13:a2:19:a1:
                    35:5b:65:6a:19:6a:ec:94:26:11:64:84:56:31:66:
                    b5:78:2e:0c:be:9d:da:ba:96:f1:29:23:23:8f:d4:
                    bf:ac:35:9f:93:88:8b:1e:f6:8d:24:af:e4:2b:4f:
                    6c:c1:68:36:7a:a2:66:ab:4f:dd:8c:1b:f2:4f:8a:
                    af:77:1e:a3:22:a0:aa:58:33:e1:8c:0c:2c:4c:2a:
                    8b:8c:4f:00:00:82:a3:02:93:24:74:b6:7f:3a:0c:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:57:6B:1F:15:E3:D4:0F:61:DF:69:83:17:05:FE:8B:B4:8B:76
            X509v3 Authority Key Identifier:
                keyid:88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130312e302f32342d3234203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:25:aa:83:3a:34:92:e3:0e:9f:d7:13:73:68:c0:a9:bc:fb:
         7a:d5:22:34:38:bd:b7:05:4d:a3:bf:66:09:9b:77:44:42:9f:
         76:7d:db:4c:d9:e7:51:1a:55:90:21:60:a5:5c:f7:eb:3d:8f:
         3f:fa:62:8d:47:32:86:8f:0d:a0:2f:4f:10:c0:89:4c:50:7f:
         77:12:f7:cd:fb:ee:04:a9:31:1c:34:0a:aa:12:84:da:ca:d7:
         e8:63:26:02:16:d9:0d:b1:2d:aa:0d:ea:c3:a4:ce:7d:f2:d8:
         90:5e:3e:7c:b8:dd:6f:e9:44:d5:46:c3:ee:32:51:f1:e8:43:
         c4:ea:f8:1a:43:01:b4:78:d6:8f:16:47:b8:15:0d:9a:3f:d2:
         9d:f5:b8:74:a1:8a:dc:7d:38:99:f0:4f:a5:7c:3a:52:99:31:
         86:33:47:15:10:a3:e5:39:58:a1:b1:76:af:7b:67:6e:fe:c9:
         56:ef:82:50:88:e4:6c:ae:c4:f6:f7:d2:8c:e2:73:5c:f7:76:
         20:73:39:fa:db:ea:a5:fb:5e:b1:4b:a6:ab:5b:dd:96:a6:71:
         48:42:4b:66:df:10:23:f7:33:30:ce:1e:b5:cb:8c:91:06:a0:
         e9:a3:5d:19:99:5b:21:77:95:4d:f0:bc:87:fb:ac:2a:85:3b:
         ac:d4:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:16:56 2025 by rpki-client