Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa
File:                     34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa (raw, json)
Hash identifier:          gKZiew9AoxtwHqTjgKi/51XEsE1x4R7NfkETJQnddv0=
Subject key identifier:   31:E1:FD:60:5F:3F:4F:8F:6C:A0:6B:67:4E:E2:E6:68:99:99:DA:84
Certificate issuer:       /CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Certificate serial:       3979305EE43E66B249A5742E9EDBFBC5A2EDB8E6
Authority key identifier: DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa
Signing time:             Mon 10 Feb 2025 18:03:52 +0000
ROA not before:           Mon 10 Feb 2025 17:58:52 +0000
ROA not after:            Mon 09 Feb 2026 18:03:52 +0000
asID:                     269024
IP address blocks:        45.178.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:79:30:5e:e4:3e:66:b2:49:a5:74:2e:9e:db:fb:c5:a2:ed:b8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
        Validity
            Not Before: Feb 10 17:58:52 2025 GMT
            Not After : Feb  9 18:03:52 2026 GMT
        Subject: CN=31E1FD605F3F4F8F6CA06B674EE2E6689999DA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:30:29:c0:d8:2d:39:01:6d:09:14:b1:64:
                    13:48:06:4b:35:d1:86:4b:41:85:36:39:28:60:0d:
                    29:dc:be:40:d7:92:f1:ac:f9:c7:e8:c5:98:a6:f0:
                    12:44:d8:aa:e5:d2:17:78:bb:7a:37:c1:57:05:14:
                    b5:fc:98:2b:cc:96:f8:b7:44:58:75:9f:a8:e9:a5:
                    6f:36:95:61:fe:ec:eb:08:60:fa:74:63:15:ff:fd:
                    df:4b:ed:fc:52:92:19:97:e1:8f:da:7f:f8:55:b1:
                    c0:a8:c6:b6:da:fd:bb:d4:42:98:76:8c:d4:f7:30:
                    da:be:04:ac:b5:69:dd:0e:e7:bd:49:a9:d6:05:e6:
                    fe:76:62:0e:1b:20:43:11:a3:52:49:d1:78:6e:06:
                    dc:85:3d:21:fa:39:b4:7b:b4:3e:eb:a1:c1:cc:cb:
                    4b:53:66:51:e5:8d:37:bf:bf:03:8d:5f:40:de:3a:
                    85:09:9e:05:d7:5e:55:52:4b:61:55:50:57:40:5b:
                    80:47:37:ad:3d:5a:93:59:a1:e4:d8:17:94:34:a1:
                    fa:1c:4a:5d:a5:42:63:8d:26:18:ee:5a:91:cd:3f:
                    2e:30:64:08:bd:c2:bf:c0:56:0f:2d:fc:e7:c1:7d:
                    49:62:e4:03:8a:79:e4:d1:ec:b1:f6:68:56:d8:d5:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E1:FD:60:5F:3F:4F:8F:6C:A0:6B:67:4E:E2:E6:68:99:99:DA:84
            X509v3 Authority Key Identifier:
                keyid:DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/DDA22D6D75544BECC6E53486FED661DF02BAFC69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:28:f4:d8:d2:38:e1:fe:e6:6a:2a:71:ae:6c:03:2a:0d:b5:
         7b:20:bc:60:04:8d:01:c6:d7:60:8a:c8:a6:4b:d9:2f:8b:37:
         b8:66:f5:65:2f:0e:6c:3e:b0:ef:3c:24:ec:73:d8:6f:fc:66:
         f9:c1:6b:8e:cd:f2:e2:74:2e:3c:f4:95:2e:71:a3:1c:c1:5c:
         1a:f8:98:53:ac:7b:ee:42:ae:df:6d:b0:2d:ea:e8:f2:b4:79:
         82:96:92:27:55:7d:1e:ca:4f:92:0a:37:c7:70:d1:e9:06:76:
         94:19:ac:98:96:84:b4:fb:da:e1:8c:ec:fa:e2:a6:cb:6b:44:
         11:01:0c:c8:1a:ba:8f:89:e4:d8:53:f9:c3:1b:0c:fe:19:aa:
         54:31:e5:0c:b3:e5:a1:28:50:6a:14:25:50:92:75:e7:16:86:
         d1:3e:e2:a4:80:1b:52:d8:e5:1c:cd:de:72:b5:1d:f0:97:fa:
         64:0e:02:92:54:76:c0:08:40:32:a8:5c:83:86:56:67:6c:e1:
         7d:06:a1:99:86:09:a1:89:ef:96:36:c7:f8:c6:12:79:f4:86:
         04:dd:9f:76:e0:09:63:e3:06:5c:31:a2:61:2c:6d:fe:82:93:
         81:23:37:c8:ac:d3:af:75:3e:98:d5:d2:9e:d0:6b:24:e4:80:
         11:17:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 08:00:18 2025 by rpki-client