Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/34352e3137382e3138382e302f32322d3232203d3e20323639303931.roa
File:                     34352e3137382e3138382e302f32322d3232203d3e20323639303931.roa (raw, json)
Hash identifier:          R9nE7BqBERJ9SCyqfUr8ziWc17ryihiqm8fi5mviSqM=
Subject key identifier:   14:09:8F:87:0B:C8:80:A2:0A:28:D0:D3:FC:35:97:74:DB:65:84:AC
Certificate issuer:       /CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
Certificate serial:       3DFE31F163F12B7A0F3E89BFDB5D8620B3272A58
Authority key identifier: BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/34352e3137382e3138382e302f32322d3232203d3e20323639303931.roa
Signing time:             Tue 04 Feb 2025 13:00:23 +0000
ROA not before:           Tue 04 Feb 2025 12:55:23 +0000
ROA not after:            Tue 03 Feb 2026 13:00:23 +0000
asID:                     269091
IP address blocks:        45.178.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fe:31:f1:63:f1:2b:7a:0f:3e:89:bf:db:5d:86:20:b3:27:2a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
        Validity
            Not Before: Feb  4 12:55:23 2025 GMT
            Not After : Feb  3 13:00:23 2026 GMT
        Subject: CN=14098F870BC880A20A28D0D3FC359774DB6584AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:1f:a6:b6:7e:3a:27:61:35:e5:3c:db:41:
                    01:3d:db:fe:83:19:3e:a4:af:82:37:71:e9:00:b3:
                    e8:b5:6e:97:ad:5f:4a:41:35:bb:b1:65:5d:98:97:
                    90:81:45:a9:c5:05:44:b1:1b:93:a6:e2:16:ea:c8:
                    fb:7b:43:89:c8:ef:16:b9:b2:65:f6:ab:47:d9:e8:
                    f7:76:f0:bd:d6:12:54:25:b6:38:06:2a:2e:13:9f:
                    ff:80:67:84:9d:99:81:61:b2:a4:8a:43:e7:8d:a6:
                    74:99:da:60:99:c7:bc:e2:f1:35:a7:d3:1f:b6:35:
                    19:0a:a3:18:e9:11:a8:ff:e0:f8:7c:83:ec:09:48:
                    95:82:a5:b8:f2:af:23:84:a4:25:c9:e1:76:b3:4c:
                    91:c3:79:11:98:77:ac:b7:8b:cc:74:2d:ac:a9:f0:
                    fa:d8:56:e4:ce:04:93:02:5e:df:af:55:0b:07:87:
                    6c:08:b0:e1:2d:c3:01:1d:08:27:63:c1:0a:aa:54:
                    eb:89:ce:94:ce:bb:ef:93:5f:c7:ba:39:fb:fe:eb:
                    2e:ea:eb:9f:47:6d:41:ee:ed:ff:a1:60:4d:ed:29:
                    69:a4:60:ba:6f:f7:e8:be:84:68:ce:e3:37:fc:e3:
                    96:2e:76:11:a0:00:a6:73:8f:45:7a:c0:95:c6:99:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:09:8F:87:0B:C8:80:A2:0A:28:D0:D3:FC:35:97:74:DB:65:84:AC
            X509v3 Authority Key Identifier:
                keyid:BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/34352e3137382e3138382e302f32322d3232203d3e20323639303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:db:60:b8:b2:4b:4f:f8:40:d1:d1:79:51:00:7a:4c:1b:56:
         75:4c:ec:6c:82:0f:1d:e2:3c:b6:23:7e:39:92:61:63:d8:e5:
         86:39:d0:25:9a:00:a2:57:fe:30:63:f3:7a:6e:69:64:3d:2f:
         09:f8:4e:42:c6:b2:3a:1b:96:ee:31:d5:e4:87:ed:84:85:3e:
         db:8c:2a:d9:17:73:e9:ae:5b:69:3d:91:8b:ac:4a:a9:ed:ff:
         6a:f8:85:c2:85:68:92:a4:32:39:da:96:fe:8d:eb:47:0d:34:
         50:d2:6f:13:c3:32:f4:ec:db:1f:21:a3:e3:de:ef:01:bc:65:
         d7:20:39:79:f9:3f:1d:2b:cd:a9:38:29:86:ec:07:f1:b3:89:
         40:f1:83:cf:f7:d4:6c:50:e6:f2:25:cf:e4:2c:09:96:e7:ef:
         a2:f1:da:ee:53:4d:a2:e7:78:34:6f:bd:56:ab:d0:0f:cd:08:
         d1:84:ad:0b:a7:50:4e:25:73:20:b0:9d:2a:0e:45:1f:46:4f:
         c3:b4:2a:25:80:9e:86:32:c7:38:29:5e:0b:83:fc:ee:99:85:
         0b:24:b2:bf:6a:5a:87:43:9b:f7:bc:44:5c:a3:c7:e5:f5:4d:
         4f:5e:7f:bc:57:87:59:5d:81:fc:63:0a:b3:7a:75:ec:59:25:
         b8:e4:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:19 2025 by rpki-client