Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130312e302f32342d3234203d3e20323639303234.roa
File:                     34352e3137382e3130312e302f32342d3234203d3e20323639303234.roa (raw, json)
Hash identifier:          qL6SD8r8hJSDCrqPVvReCefmsxF1CAKArEh0IsqsDAU=
Subject key identifier:   83:03:90:EE:EC:B8:12:74:0B:98:E4:5B:75:84:03:24:D0:C4:4F:1A
Certificate issuer:       /CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Certificate serial:       72605B2A6E6D35DD6E0D995080A5CA5EAEDF8C16
Authority key identifier: DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130312e302f32342d3234203d3e20323639303234.roa
Signing time:             Mon 10 Feb 2025 18:03:53 +0000
ROA not before:           Mon 10 Feb 2025 17:58:53 +0000
ROA not after:            Mon 09 Feb 2026 18:03:53 +0000
asID:                     269024
IP address blocks:        45.178.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:60:5b:2a:6e:6d:35:dd:6e:0d:99:50:80:a5:ca:5e:ae:df:8c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
        Validity
            Not Before: Feb 10 17:58:53 2025 GMT
            Not After : Feb  9 18:03:53 2026 GMT
        Subject: CN=830390EEECB812740B98E45B75840324D0C44F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:63:6d:e6:80:e8:38:c3:21:6b:d1:35:c4:04:
                    64:09:45:81:07:9c:42:7c:a7:3b:12:8a:d3:3a:2e:
                    d6:0d:c0:4d:1d:35:e0:42:af:e6:51:da:1b:3b:fa:
                    d1:0b:54:0b:4b:c5:96:d3:a7:cb:00:e1:e1:02:d2:
                    32:ff:54:3e:b3:8f:6f:89:ad:4f:dc:e3:5e:e8:23:
                    d0:a2:74:2e:02:4f:ca:04:ef:9d:80:c0:7f:dc:3f:
                    47:a2:73:99:65:30:38:d0:b4:9f:a2:ea:fe:fd:15:
                    7b:9e:3e:24:20:c7:ff:02:de:45:37:18:c5:b3:31:
                    41:91:bf:69:fc:92:6d:5d:cc:30:26:87:b1:58:64:
                    37:a4:3e:f5:df:56:37:85:74:50:19:ed:f6:4c:41:
                    c6:a6:93:4c:fd:48:4e:7d:c3:80:8a:33:eb:84:a5:
                    bd:cf:48:96:35:32:1f:d9:7b:86:14:39:0a:08:7b:
                    66:83:c9:7c:59:ce:8f:20:99:07:11:a6:35:b6:85:
                    d9:b9:f2:8f:30:7c:0e:d2:81:d4:1d:99:47:b9:26:
                    97:64:3f:c0:df:f5:ef:e6:aa:6e:f2:87:31:98:b9:
                    fb:49:b1:40:b5:b4:c7:4d:52:08:3d:e8:bb:c1:7b:
                    6d:92:57:03:bf:43:6b:82:c6:bb:2a:17:b3:2e:44:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:03:90:EE:EC:B8:12:74:0B:98:E4:5B:75:84:03:24:D0:C4:4F:1A
            X509v3 Authority Key Identifier:
                keyid:DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/DDA22D6D75544BECC6E53486FED661DF02BAFC69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130312e302f32342d3234203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:05:b9:6b:f5:2d:6f:c3:cb:0a:45:b7:a9:0c:d5:9a:41:06:
         24:a5:a9:13:00:e6:da:82:50:4a:9a:b6:2d:2e:2f:cf:2f:e3:
         b5:da:97:e7:7d:48:58:35:0a:47:58:b8:7e:ed:46:06:ee:0c:
         72:45:f4:5b:b2:bf:fb:d8:ed:b1:32:47:b2:39:78:5b:b4:fd:
         b7:ee:82:13:8a:6b:44:72:a7:69:90:d7:0e:21:23:8e:7f:3f:
         d9:6c:27:89:36:a1:e9:bd:ee:70:f8:72:15:6b:1a:ee:83:77:
         30:53:00:57:cc:e5:0d:82:f8:ad:99:ef:c0:17:ec:6e:78:53:
         8d:e2:f4:42:3c:ed:18:bf:da:64:b2:74:a0:3f:55:c3:59:ca:
         97:f7:57:0b:69:d1:36:d4:1a:d4:c8:ad:69:ef:42:fa:5b:26:
         2f:e6:0e:47:1d:1f:48:6d:66:44:69:bc:bd:7f:3c:13:da:d5:
         fe:c3:ce:1b:23:c7:a7:0a:dd:83:b7:35:db:33:66:40:f1:23:
         56:3b:01:1f:16:98:2e:81:af:01:16:3f:01:1f:9e:9b:b1:c4:
         42:7f:bc:fe:75:3d:b5:56:31:10:9b:09:3c:75:2a:1e:33:37:
         17:11:e6:0f:ea:35:63:43:11:5e:dd:97:cb:99:52:37:35:7a:
         a4:ae:69:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:39:27 2025 by rpki-client