Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa
File:                     34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa (raw, json)
Hash identifier:          C6RmoZe9haLo/EbPq8aCC0HmOlmlYEi/Xw7EaGIUbXY=
Subject key identifier:   B2:CE:66:39:F8:5D:7C:E0:16:9D:8D:7B:1F:9F:94:20:4C:FB:C9:91
Certificate issuer:       /CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
Certificate serial:       5B4CC984E8642C6D3821BF30110645A5C0244843
Authority key identifier: 88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa
Signing time:             Mon 17 Mar 2025 14:52:24 +0000
ROA not before:           Mon 17 Mar 2025 14:47:24 +0000
ROA not after:            Mon 16 Mar 2026 14:52:24 +0000
asID:                     269182
IP address blocks:        45.181.102.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4c:c9:84:e8:64:2c:6d:38:21:bf:30:11:06:45:a5:c0:24:48:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
        Validity
            Not Before: Mar 17 14:47:24 2025 GMT
            Not After : Mar 16 14:52:24 2026 GMT
        Subject: CN=B2CE6639F85D7CE0169D8D7B1F9F94204CFBC991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:1d:ea:14:24:11:50:dd:ae:77:18:1a:1a:
                    71:37:44:7e:0d:96:74:3b:c1:a7:fd:ad:19:b1:f2:
                    b2:53:9c:80:67:cc:b8:be:e1:7e:c4:4a:68:09:e2:
                    2e:10:ae:98:47:db:6b:12:6a:35:5a:85:db:6d:9c:
                    fb:37:7b:55:68:d6:7e:dc:f9:d4:1b:73:62:ed:19:
                    19:0f:62:b8:df:a2:a9:7b:90:a5:cf:f3:07:2a:4d:
                    de:45:48:02:2e:b1:c1:bc:bd:95:eb:48:64:e2:72:
                    10:71:35:f2:53:1f:28:32:a0:36:38:de:4f:45:92:
                    ab:be:e7:27:7f:a1:0e:3d:73:24:50:7e:d1:af:9a:
                    f1:57:22:f6:d4:10:f5:d0:30:5e:9d:69:40:f1:47:
                    f3:5a:93:a0:64:a1:d3:b2:23:22:d2:80:13:7e:b9:
                    86:a4:2d:c6:d1:23:0d:e5:58:71:46:bf:b5:73:6e:
                    d2:ab:5c:8c:d2:0a:9b:af:88:ef:d8:72:08:6b:95:
                    aa:fc:cf:0e:fa:bc:95:b7:67:c4:65:59:5d:7b:df:
                    a8:e0:57:4b:34:06:ab:57:e8:4e:61:e0:66:d1:0d:
                    1c:30:04:78:46:a6:38:28:91:33:c4:c9:a9:4e:fe:
                    96:93:b4:2c:2e:6e:ad:58:fa:0d:82:b6:14:d3:49:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CE:66:39:F8:5D:7C:E0:16:9D:8D:7B:1F:9F:94:20:4C:FB:C9:91
            X509v3 Authority Key Identifier:
                keyid:88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:f7:3d:39:a8:4d:c3:58:51:51:7b:82:fe:d9:cc:f1:e3:ba:
         11:d0:19:8c:cc:d2:31:e1:42:ee:c2:c8:56:dd:f6:61:07:7b:
         3c:a0:a9:80:a3:45:94:43:5c:b5:cb:c3:5a:f4:ce:f9:46:f1:
         66:07:11:b2:1c:fb:98:c1:85:80:a5:6c:26:98:e9:4d:4b:fa:
         6f:b7:38:f9:ef:2a:bf:67:46:e4:00:60:ac:a2:f1:95:cb:06:
         0f:7d:35:70:e5:35:3a:c0:80:1b:b2:af:68:ca:11:2a:33:19:
         5f:c4:8b:d2:2c:6b:3a:f5:b1:44:62:db:28:ef:85:43:55:db:
         30:ec:52:18:31:d7:45:75:37:5e:91:6b:2f:e2:61:36:ef:eb:
         03:68:41:21:32:ae:7b:94:e6:bb:fd:b4:3f:eb:34:1f:ee:a6:
         33:c4:4e:72:0e:19:e1:fe:df:2f:33:ad:d7:3d:43:70:e7:41:
         97:98:54:4c:dc:7e:12:72:f3:19:a4:71:0f:e0:90:9a:44:52:
         f8:de:0e:a4:c3:ed:5d:92:8b:ab:8e:73:81:c7:df:3e:34:5a:
         ff:f4:40:0e:c0:7a:8a:8f:ea:19:5b:d6:d5:70:f5:cd:2f:c0:
         4c:f7:18:06:df:51:a7:d6:81:47:84:34:f4:89:3c:4a:2d:b8:
         ab:17:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:22 2025 by rpki-client