Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32332d3233203d3e20323632353033.roa
File:                     34352e3138312e3232382e302f32332d3233203d3e20323632353033.roa (raw, json)
Hash identifier:          Ue5YbWydmIGoF0K36XiO4o+goFJf1M5rkm51+9meRkA=
Subject key identifier:   91:29:37:BC:F4:23:D7:9A:A5:1B:CE:02:4B:2C:46:97:FF:CA:08:63
Certificate issuer:       /CN=A5A5E563B461C001EA666874188010075B6CA70D
Certificate serial:       35B6A49AAB18FDC41F8179DA086E235A34A5F834
Authority key identifier: A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32332d3233203d3e20323632353033.roa
Signing time:             Sun 05 Jan 2025 18:58:45 +0000
ROA not before:           Sun 05 Jan 2025 18:53:45 +0000
ROA not after:            Sun 04 Jan 2026 18:58:45 +0000
asID:                     262503
IP address blocks:        45.181.228.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b6:a4:9a:ab:18:fd:c4:1f:81:79:da:08:6e:23:5a:34:a5:f8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A5E563B461C001EA666874188010075B6CA70D
        Validity
            Not Before: Jan  5 18:53:45 2025 GMT
            Not After : Jan  4 18:58:45 2026 GMT
        Subject: CN=912937BCF423D79AA51BCE024B2C4697FFCA0863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:fb:09:a0:20:6b:05:f0:c2:0c:b2:82:2b:
                    b0:4e:2e:c8:5c:5c:a5:26:5c:59:34:33:6b:ce:63:
                    36:68:77:95:a4:af:d9:80:0a:b9:e9:86:af:8e:aa:
                    3f:71:c8:50:fc:1b:fc:d1:b5:2a:52:2a:5a:06:64:
                    ce:c6:20:af:04:4e:e0:27:6a:90:4d:6b:a9:89:04:
                    7c:e1:91:1e:bb:ca:66:df:b7:0b:af:56:81:16:ea:
                    ea:c0:d2:5b:cc:6b:40:ac:04:81:3e:65:59:d2:d9:
                    8f:21:f4:dd:b5:d1:81:7e:c9:76:cf:50:bf:02:aa:
                    93:dd:6e:e7:4a:f7:93:e8:b6:d9:6a:e5:85:1e:8d:
                    9b:e3:8d:4d:81:0e:bc:7a:13:b3:ca:fa:ca:fc:f9:
                    29:ef:f8:2a:21:0f:97:a2:6b:75:35:a4:b8:6d:04:
                    e3:b1:df:d0:d2:d0:ec:be:af:50:11:0a:7d:50:13:
                    dc:ab:48:95:f9:f4:48:bd:54:92:45:5b:00:22:02:
                    ec:49:6a:98:5c:da:e0:f0:7c:6b:4e:ec:13:8d:d1:
                    5d:c0:dd:ee:22:6a:1e:be:79:10:ac:61:25:ef:fd:
                    3e:4e:77:d3:fc:d4:c1:69:ca:48:ab:13:4b:a6:b1:
                    1b:c0:c0:1d:cd:48:12:c6:48:f3:c6:f2:2a:42:42:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:37:BC:F4:23:D7:9A:A5:1B:CE:02:4B:2C:46:97:FF:CA:08:63
            X509v3 Authority Key Identifier:
                keyid:A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/A5A5E563B461C001EA666874188010075B6CA70D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32332d3233203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:a8:e9:b2:82:13:f5:27:4d:16:c4:d0:7f:77:59:de:bc:5b:
         e9:72:c8:b2:d4:8d:fb:a8:6a:6a:23:1b:05:95:38:f8:0b:e8:
         dd:71:1c:4f:28:06:0c:51:8f:74:15:42:8c:93:23:5e:04:11:
         99:91:29:76:6e:92:38:49:99:16:fe:84:fd:84:8d:09:1c:fb:
         ff:a0:d4:bb:04:5e:79:cb:84:9d:63:5d:ff:75:9e:89:1a:ea:
         1a:9b:9f:db:ef:57:e6:9f:92:6d:74:79:70:42:5d:e0:b3:84:
         bf:4b:a2:22:df:c1:89:4b:7d:81:d9:6d:78:7c:0c:22:50:52:
         8e:bb:e6:60:e4:1d:0b:eb:7e:55:82:5d:bf:ec:18:64:7e:02:
         4d:02:53:46:71:6c:d9:66:6a:6b:0d:05:38:6b:22:72:c2:70:
         ff:34:fa:d9:91:a3:ca:14:9d:26:bb:94:65:37:12:e3:ad:c6:
         5e:d3:da:26:04:80:d5:c4:4d:b3:99:fb:0e:5e:db:e9:ce:94:
         f4:61:7b:23:13:14:2f:3a:4c:d8:94:f8:9f:cb:8e:a3:ff:a3:
         0c:cd:37:5c:c9:93:63:82:12:8f:b9:f7:61:06:0c:69:eb:7b:
         ab:4c:05:da:7a:82:12:59:9a:7b:5a:52:de:1d:f6:a2:1d:aa:
         84:26:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:48:44 2025 by rpki-client