Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3131302e302f32342d3234203d3e20323636303437.roa
File:                     34352e342e3131302e302f32342d3234203d3e20323636303437.roa (raw, json)
Hash identifier:          15IXHThD1if8zWExrGS21jTk+LhRr5qgF2+lKMYEiEQ=
Subject key identifier:   3D:B3:6E:8E:B8:FB:4A:54:5B:4A:EC:1C:62:FB:9B:1D:F6:0B:97:C3
Certificate issuer:       /CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Certificate serial:       169EF540E2D5DC657DFDF861E270DA06F56B9801
Authority key identifier: 5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3131302e302f32342d3234203d3e20323636303437.roa
Signing time:             Thu 16 Jan 2025 13:02:14 +0000
ROA not before:           Thu 16 Jan 2025 12:57:14 +0000
ROA not after:            Thu 15 Jan 2026 13:02:14 +0000
asID:                     266047
IP address blocks:        45.4.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9e:f5:40:e2:d5:dc:65:7d:fd:f8:61:e2:70:da:06:f5:6b:98:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
        Validity
            Not Before: Jan 16 12:57:14 2025 GMT
            Not After : Jan 15 13:02:14 2026 GMT
        Subject: CN=3DB36E8EB8FB4A545B4AEC1C62FB9B1DF60B97C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:af:96:2e:f6:61:70:dc:d5:1e:06:f5:9e:
                    3a:59:32:79:45:a4:0b:a7:69:26:e4:24:55:92:0c:
                    88:8e:f5:c7:d1:f4:02:eb:70:6f:c9:3d:7c:29:04:
                    e8:a5:56:19:ea:33:83:85:b0:72:4b:9e:ef:79:be:
                    5a:65:d9:c6:a3:5b:64:84:13:42:c7:40:12:72:7f:
                    15:42:5a:16:7a:bf:ea:5e:bf:2c:9e:49:62:65:76:
                    21:db:3e:f9:68:88:30:67:9c:91:d3:b3:cc:03:c3:
                    54:0b:82:c5:03:4b:0f:98:61:bc:18:4e:58:e8:b0:
                    23:5e:eb:20:b6:71:73:00:82:5c:05:3b:01:2f:33:
                    e0:ab:da:3a:37:a2:66:74:6d:39:5e:02:dd:20:dd:
                    92:65:6d:ed:64:02:53:0f:12:61:9b:85:40:88:98:
                    38:ea:c6:a2:98:b7:3d:55:b4:f2:a8:3f:35:e8:a4:
                    33:94:10:af:3a:d7:fc:a0:11:db:8e:41:31:e3:ef:
                    bb:05:e3:04:e3:34:06:01:f8:1c:9a:4a:c6:51:0d:
                    4a:ba:10:e7:a2:2d:32:96:75:cf:56:eb:c7:be:ee:
                    86:32:5f:f1:02:ce:aa:63:2d:7a:ae:75:e4:8b:53:
                    74:48:da:6d:cb:11:30:d2:da:5f:30:9c:47:76:dd:
                    25:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B3:6E:8E:B8:FB:4A:54:5B:4A:EC:1C:62:FB:9B:1D:F6:0B:97:C3
            X509v3 Authority Key Identifier:
                keyid:5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3131302e302f32342d3234203d3e20323636303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f7:79:62:52:11:18:ce:cb:b1:9a:66:22:e3:c3:d3:da:db:
         13:d1:1b:50:bf:d9:95:64:68:1d:31:38:22:ad:1d:08:bf:22:
         0f:de:60:8b:11:eb:fe:de:53:21:a9:e8:19:8a:0b:2c:5f:ca:
         97:59:b0:63:e0:25:63:45:0b:d8:a5:7d:17:c3:94:01:96:a5:
         9d:bc:08:b9:f1:d7:c0:e2:28:48:1f:3f:6a:7d:15:ee:23:5b:
         1a:a3:d6:4d:6a:32:b3:e2:a8:58:83:98:c3:31:c1:7a:13:77:
         a1:c1:98:db:dc:d1:33:5b:64:dc:bd:dc:ff:e9:af:74:33:7b:
         07:74:7a:52:da:e2:eb:87:aa:2f:9f:39:ad:4d:51:c0:e7:8f:
         b3:f6:be:54:31:c8:fc:f0:87:bf:11:5f:b6:5e:42:03:6e:90:
         dc:ac:c4:ec:b0:65:ad:de:d4:7b:cd:19:e4:f1:a9:e2:70:ac:
         d8:be:d7:c5:25:25:c4:f8:9e:f4:fe:c8:cf:f4:f7:84:73:83:
         59:be:61:a5:80:21:37:0c:4a:cf:33:7f:26:30:b6:85:5e:9b:
         6b:99:d3:00:b4:ce:20:a6:15:0e:25:3a:f8:fa:8b:ab:f5:3f:
         54:f7:d3:fe:7c:82:b1:d8:ea:cd:25:ac:19:00:21:ca:cf:29:
         41:e8:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:35:29 2025 by rpki-client