Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/34352e3138372e37312e302f32342d3234203d3e20323639343631.roa
File:                     34352e3138372e37312e302f32342d3234203d3e20323639343631.roa (raw, json)
Hash identifier:          tLfJYlBgT6CnqZBv7CqqRsH1BUz/7fXUXyC7+kPwMiM=
Subject key identifier:   5D:70:97:44:AA:F0:F7:E2:EE:D3:F7:77:A0:32:EF:F8:73:B7:44:D2
Certificate issuer:       /CN=121F6202CB0EE7F5E476D4E34E5818A48E42C8D0
Certificate serial:       377ABA548018A3B863980F26C5FDBF0DA1CA47ED
Authority key identifier: 12:1F:62:02:CB:0E:E7:F5:E4:76:D4:E3:4E:58:18:A4:8E:42:C8:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/34352e3138372e37312e302f32342d3234203d3e20323639343631.roa
Signing time:             Wed 05 Mar 2025 19:00:32 +0000
ROA not before:           Wed 05 Mar 2025 18:55:32 +0000
ROA not after:            Wed 04 Mar 2026 19:00:32 +0000
asID:                     269461
IP address blocks:        45.187.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7a:ba:54:80:18:a3:b8:63:98:0f:26:c5:fd:bf:0d:a1:ca:47:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121F6202CB0EE7F5E476D4E34E5818A48E42C8D0
        Validity
            Not Before: Mar  5 18:55:32 2025 GMT
            Not After : Mar  4 19:00:32 2026 GMT
        Subject: CN=5D709744AAF0F7E2EED3F777A032EFF873B744D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:31:0c:fb:55:af:ff:66:70:9a:fd:15:86:
                    dd:6a:93:1d:9d:ad:87:fa:ba:92:00:b9:12:52:68:
                    1f:86:b9:84:33:09:0c:13:98:ea:bd:ea:ab:45:3a:
                    0d:9f:7c:37:9e:7f:91:cb:18:87:8c:8d:1a:77:2c:
                    a0:d1:66:83:2f:9f:24:ec:cd:ee:f6:d8:31:73:60:
                    c8:f8:1c:11:21:36:61:13:4c:2d:74:19:02:9b:44:
                    84:a5:0a:8f:3c:6c:a2:68:71:4c:01:82:23:65:f6:
                    72:b6:a5:c3:20:90:70:dc:d6:0e:09:9d:ce:70:5a:
                    a0:81:88:50:c7:a3:71:6f:64:65:91:0e:d3:88:32:
                    54:45:84:9a:a4:28:f4:7d:a0:ac:15:a7:b0:eb:92:
                    94:52:aa:0e:ac:cd:fe:b5:bd:0f:33:b5:f4:2e:05:
                    32:96:c8:d2:23:83:b5:9b:29:a3:1a:3d:b4:7d:77:
                    d7:3b:ac:55:cf:6a:cd:5b:f2:bb:70:a2:08:53:19:
                    fb:74:0a:98:59:0c:0c:d8:68:67:4f:d2:f3:4d:66:
                    0a:ca:93:b8:28:4f:4a:56:b8:35:55:2f:60:37:f4:
                    e7:ed:17:64:11:23:ba:89:db:3a:d6:e8:de:61:e1:
                    31:e5:e1:f4:b5:fa:d0:11:97:c4:87:fe:64:12:d7:
                    d5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:70:97:44:AA:F0:F7:E2:EE:D3:F7:77:A0:32:EF:F8:73:B7:44:D2
            X509v3 Authority Key Identifier:
                keyid:12:1F:62:02:CB:0E:E7:F5:E4:76:D4:E3:4E:58:18:A4:8E:42:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/34352e3138372e37312e302f32342d3234203d3e20323639343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:94:cb:f9:1a:88:d9:56:cb:a7:64:ea:77:ee:19:1b:49:da:
         6c:65:0e:c0:f6:34:7d:e4:3c:90:16:2a:26:82:0d:63:4a:32:
         05:72:9e:c7:99:63:28:8b:3b:06:da:98:ee:49:aa:9e:f2:ea:
         5b:a0:e1:0f:07:88:51:59:61:19:2c:57:4f:73:7a:f1:e4:a9:
         cc:27:df:65:9c:fa:b8:ae:de:83:2b:a8:2b:a0:43:38:6a:d3:
         d6:ca:bb:5e:10:45:56:84:34:ec:05:11:60:5b:7d:24:1a:a8:
         ee:b1:55:df:74:51:02:ba:4c:90:03:26:ff:0a:7f:32:c0:50:
         37:09:75:bd:86:c5:dd:f0:25:d0:1d:34:54:2b:1a:a8:6a:00:
         f1:da:26:8b:3e:ae:25:e6:f7:61:2d:b6:c4:90:4d:fb:0f:81:
         49:46:6a:04:73:c5:86:70:f9:a1:47:d7:3e:19:fd:88:0d:a3:
         1d:26:b9:d7:82:b7:7b:b8:2a:d3:cf:b6:77:4e:48:f4:86:9e:
         a8:73:00:e8:4a:d9:37:e5:44:d1:d1:a2:e2:92:0e:52:18:93:
         4d:79:d7:31:db:8f:a4:1b:c6:1c:e4:41:6b:37:93:04:93:1a:
         da:df:76:c9:d2:6f:3b:86:1b:04:b8:8d:ac:52:6b:37:f0:aa:
         84:0e:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:57:26 2025 by rpki-client