Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3232203d3e20323638383135.roa
File:                     34352e3137332e3135322e302f32322d3232203d3e20323638383135.roa (raw, json)
Hash identifier:          9a3QyU93RaByJLR9hZDghZyYJ4aXY8Nv4MjbiGszfu4=
Subject key identifier:   A0:06:45:2D:A0:11:85:91:26:05:AA:96:3A:DB:CE:8B:4A:79:40:9C
Certificate issuer:       /CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
Certificate serial:       71874B6447DE9CDF8FF24736660FE1F7E4EBE281
Authority key identifier: 14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3232203d3e20323638383135.roa
Signing time:             Fri 13 Dec 2024 19:16:28 +0000
ROA not before:           Fri 13 Dec 2024 19:11:28 +0000
ROA not after:            Fri 12 Dec 2025 19:16:28 +0000
asID:                     268815
IP address blocks:        45.173.152.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:87:4b:64:47:de:9c:df:8f:f2:47:36:66:0f:e1:f7:e4:eb:e2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
        Validity
            Not Before: Dec 13 19:11:28 2024 GMT
            Not After : Dec 12 19:16:28 2025 GMT
        Subject: CN=A006452DA01185912605AA963ADBCE8B4A79409C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:fb:f6:ca:29:9d:7c:3c:2f:84:b3:ae:f7:
                    ed:5d:60:00:66:ef:11:df:2e:f5:23:c4:09:e5:78:
                    0b:97:c3:b3:07:c0:57:8e:3c:19:1e:84:e1:99:92:
                    c0:21:c8:45:9c:75:53:f2:8b:6d:ef:a7:ed:0e:78:
                    47:ab:e1:b0:55:cb:b0:9e:f8:3b:1f:64:a3:1b:0a:
                    aa:5f:cd:6d:5a:b0:27:ec:a6:59:f2:3a:ab:59:73:
                    d7:f5:eb:9e:f3:a5:dd:c8:83:40:18:f4:34:01:d8:
                    d7:9c:06:91:87:56:c4:c0:75:9a:65:1b:4f:97:7a:
                    2a:19:9b:e7:66:38:4a:83:c8:86:53:81:aa:49:2b:
                    9b:12:23:47:1b:4a:32:51:f7:0c:ef:ce:cd:ed:29:
                    93:c6:18:99:a7:1c:cf:25:bd:65:a7:99:e5:be:76:
                    e0:70:db:06:d9:08:e9:a4:ba:43:05:d7:ff:b7:21:
                    ed:2a:cd:88:90:d1:dd:14:2c:37:ae:23:ac:e1:85:
                    29:a4:24:f7:90:64:81:eb:12:3c:93:d8:e0:8a:d4:
                    11:bb:9c:11:c1:95:1f:c0:0c:40:41:59:ba:5d:63:
                    88:f5:28:d1:4d:ea:0c:55:0a:06:82:be:4b:73:b4:
                    20:cd:a0:3e:b2:94:ce:99:7d:59:3b:a7:da:09:09:
                    b7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:06:45:2D:A0:11:85:91:26:05:AA:96:3A:DB:CE:8B:4A:79:40:9C
            X509v3 Authority Key Identifier:
                keyid:14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3232203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:b5:00:b6:61:83:8f:1c:3c:d0:90:75:98:79:85:cf:34:31:
         b3:bb:31:d2:bb:cb:de:36:07:40:08:15:d6:10:80:75:e3:59:
         b5:2d:ae:4a:38:a1:01:f8:4c:58:06:68:77:06:63:b3:86:3c:
         87:72:21:47:e9:6f:ac:5f:84:cd:87:d9:43:5b:48:81:1d:06:
         e5:5e:e7:7c:9b:47:f9:cb:29:ac:b0:a0:4c:83:81:ba:6c:3c:
         eb:c2:6d:e7:92:ae:8d:dd:52:54:df:b8:44:89:a5:dc:81:6d:
         d1:e2:6a:f2:8d:98:7f:31:a4:2d:d7:cf:03:84:89:34:64:37:
         27:01:a6:40:c6:42:ad:25:f8:eb:97:b6:8a:f6:ac:b2:13:02:
         ea:3f:30:91:db:c9:20:ff:e3:b7:35:0d:04:fe:85:28:07:f8:
         3e:6e:e0:a6:ba:63:f1:66:48:88:a7:f0:40:47:1a:48:9c:74:
         21:a4:7b:0d:60:bd:75:b5:69:4f:88:58:22:dc:79:5d:0c:f9:
         19:ad:64:92:f7:05:8e:55:1f:03:d6:2e:c6:05:98:f8:fa:f6:
         ad:7e:e7:67:04:df:7a:e7:98:71:47:c9:89:1e:76:28:4d:1a:
         3f:38:e0:bb:38:09:f9:ec:5a:d6:fc:d9:02:e2:19:9c:e6:7e:
         5f:b4:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:42:37 2025 by rpki-client