Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233312e302f32342d3234203d3e20323632363137.roa
File:                     34352e36352e3233312e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          SYDjj0WkaFAvOAU4/kg6AbzWc5Lkcmmlim6IomitRcM=
Subject key identifier:   5D:EC:5E:EC:26:7D:C6:1A:2F:4D:10:93:40:44:5C:3A:9E:28:05:CE
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       09545544A4518F5B70095FC29A30415BF64680EE
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233312e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 06 Mar 2025 18:36:37 +0000
ROA not before:           Thu 06 Mar 2025 18:31:37 +0000
ROA not after:            Thu 05 Mar 2026 18:36:37 +0000
asID:                     262617
IP address blocks:        45.65.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:54:55:44:a4:51:8f:5b:70:09:5f:c2:9a:30:41:5b:f6:46:80:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Mar  6 18:31:37 2025 GMT
            Not After : Mar  5 18:36:37 2026 GMT
        Subject: CN=5DEC5EEC267DC61A2F4D109340445C3A9E2805CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3b:aa:68:3e:61:18:f2:cd:64:e1:29:c2:61:
                    b8:3a:29:f6:ff:54:e9:2c:7c:78:52:7e:2e:21:ad:
                    e4:67:0e:98:b5:ea:ab:8e:a9:ce:5c:6d:28:f5:d9:
                    5a:4e:85:24:83:b7:eb:32:70:38:fd:6a:b3:65:62:
                    83:9f:8d:64:03:58:42:40:6f:51:03:8d:d0:5c:eb:
                    26:63:13:23:f7:ff:f4:ca:c4:a7:42:7b:bf:7c:b1:
                    7a:8a:b6:ac:71:2b:2d:cf:cd:ba:ee:fa:d5:5e:d3:
                    f9:a3:0c:9d:3d:57:5a:3c:4e:38:ad:f3:27:b1:f3:
                    cd:fd:f4:4b:80:3f:48:73:17:ce:44:a2:ce:07:77:
                    9b:8e:ce:7e:93:7c:e0:13:6e:e6:df:fa:37:e7:67:
                    36:13:e8:65:37:f3:27:99:5c:04:25:66:7c:8c:91:
                    06:c5:68:35:cb:a7:c4:23:c0:f8:12:59:39:18:70:
                    66:1c:36:45:4a:ff:8a:80:5b:74:ce:1a:27:04:3f:
                    32:5b:8a:f0:50:06:07:e2:db:51:8f:c6:3a:82:00:
                    6d:06:49:e2:64:24:0d:68:f7:6c:b3:6d:32:eb:71:
                    70:3a:e1:55:92:b8:f1:cc:e6:1e:7e:7d:4e:07:d2:
                    e7:a3:00:b2:21:a8:46:a6:9e:ce:17:f8:f5:26:d8:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EC:5E:EC:26:7D:C6:1A:2F:4D:10:93:40:44:5C:3A:9E:28:05:CE
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233312e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:d1:1f:ad:53:19:5d:f8:78:90:b5:66:9b:48:36:11:7e:ec:
         ed:74:2c:e4:fd:44:00:96:1c:d1:18:ea:0e:3f:e7:9e:2f:32:
         87:cb:cf:d7:d6:92:e8:e6:d5:f1:0e:ac:2b:a7:22:8a:83:9d:
         64:d7:35:97:e8:3d:f5:f5:9c:e9:9b:74:f8:0e:d2:fa:21:8d:
         0c:17:5f:50:05:f5:40:6d:69:d3:e2:63:d0:b8:91:f2:45:c3:
         72:7b:38:6b:a9:4d:70:b9:c2:1d:4b:c8:02:cf:2c:cd:40:8d:
         af:d4:fe:df:c2:d2:66:0e:15:c0:c5:39:cb:41:6d:3a:c4:5f:
         6d:24:1b:db:51:a9:73:0c:2e:e8:33:93:ba:f9:9f:b2:96:8b:
         50:d3:72:f9:5a:bb:f4:10:11:51:d6:d3:4a:92:94:d6:11:eb:
         9b:50:ab:13:00:31:44:3a:c3:7d:b8:59:e0:cd:7a:22:e7:a6:
         55:11:ef:a4:e9:2f:8f:0a:d6:a8:3e:fe:45:e9:49:03:f1:99:
         a6:60:c4:33:76:76:69:91:a0:78:31:76:d1:fa:ac:c4:d0:35:
         a1:21:19:f2:50:96:41:04:eb:74:9c:b2:4f:d1:b2:46:8a:53:
         0d:3b:1c:26:a2:be:67:42:a0:d8:92:52:fe:2e:52:e4:d0:50:
         56:38:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:49:41 2025 by rpki-client