Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135342e302f32342d3234203d3e20323638383135.roa
File:                     34352e3137332e3135342e302f32342d3234203d3e20323638383135.roa (raw, json)
Hash identifier:          8fp1As9ytveWJX7aNKpirnFI0/KpQJNTBWXeDSWpKCA=
Subject key identifier:   C3:4A:78:C7:9C:6B:80:CD:F2:A6:A7:62:42:18:D8:33:A1:94:E9:3B
Certificate issuer:       /CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
Certificate serial:       2E81F58A837F0A5FFA8B1EFBEAF78B3D51F99C50
Authority key identifier: 14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135342e302f32342d3234203d3e20323638383135.roa
Signing time:             Fri 13 Dec 2024 19:16:35 +0000
ROA not before:           Fri 13 Dec 2024 19:11:35 +0000
ROA not after:            Fri 12 Dec 2025 19:16:35 +0000
asID:                     268815
IP address blocks:        45.173.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:81:f5:8a:83:7f:0a:5f:fa:8b:1e:fb:ea:f7:8b:3d:51:f9:9c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
        Validity
            Not Before: Dec 13 19:11:35 2024 GMT
            Not After : Dec 12 19:16:35 2025 GMT
        Subject: CN=C34A78C79C6B80CDF2A6A7624218D833A194E93B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:e5:e5:07:40:e5:4a:6b:06:f5:6e:0e:8f:
                    de:16:0d:1c:07:18:40:f3:84:fe:c8:91:25:ad:68:
                    2d:76:fb:b1:70:3d:23:38:3c:2b:73:6d:d3:6d:30:
                    14:b9:2c:b1:92:ef:36:9f:49:a6:f4:11:fe:97:91:
                    10:34:c0:65:fe:80:89:0c:53:76:48:77:a2:1b:35:
                    17:dc:b6:d1:1c:ef:a8:2b:42:5c:c6:7e:db:9d:0a:
                    70:61:8d:47:e0:4b:98:bc:70:41:79:db:c6:fe:ca:
                    9e:81:97:e8:35:cb:f0:f1:8f:c6:ee:b1:85:9a:82:
                    3b:da:87:e2:03:ad:fb:f8:d2:da:c2:f0:0f:cc:1c:
                    e5:3d:f0:86:9f:9e:7d:67:66:30:67:9d:4d:fe:01:
                    44:c9:b7:5b:2f:79:b1:72:b4:b1:8f:e1:1f:c2:65:
                    6a:b2:48:05:5b:f4:34:dc:a4:ba:70:06:b7:16:e5:
                    9b:1e:9c:b5:f7:7c:0e:e3:19:1e:bf:a4:3c:59:93:
                    6a:6b:6b:1a:24:93:f2:8b:be:4e:98:53:27:bc:2f:
                    b0:48:9d:ee:44:26:2b:06:c9:6b:e3:92:9c:85:d1:
                    9d:bc:ea:b1:f8:60:34:fa:5c:b6:e3:00:29:76:96:
                    62:2e:c3:f5:8b:d4:94:d9:20:ce:c3:63:d8:ac:01:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4A:78:C7:9C:6B:80:CD:F2:A6:A7:62:42:18:D8:33:A1:94:E9:3B
            X509v3 Authority Key Identifier:
                keyid:14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135342e302f32342d3234203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:49:8b:c5:d3:2c:ea:13:95:c8:c9:ed:24:c3:82:6a:1b:83:
         08:a1:fa:04:ee:14:86:f3:33:d2:bd:61:e8:b8:0a:2a:c8:8b:
         16:ab:3a:8a:bb:04:a3:10:f7:16:0a:17:cc:ff:64:12:38:f2:
         2e:7f:18:c0:55:93:4b:70:4f:55:06:25:4c:34:21:dc:11:25:
         6b:f9:d8:71:70:91:f4:f1:be:f6:8a:d7:71:7e:79:da:6f:64:
         1d:35:85:a2:24:66:93:99:56:1a:7d:a1:3f:84:1f:78:b1:cf:
         48:26:08:97:76:47:84:6e:73:b6:fa:86:bb:c8:a0:0b:0b:df:
         a8:09:28:b7:f5:55:b6:94:8c:25:8c:0b:3a:89:78:1a:9d:33:
         28:1c:66:3b:f0:13:d9:da:7b:09:c5:5e:05:be:a2:7f:77:5e:
         49:1e:4d:9c:8c:73:a9:41:89:65:24:e0:08:90:5e:d5:1f:7e:
         20:63:b5:09:88:b5:c3:5c:33:d1:e1:45:3f:69:03:c4:20:ef:
         13:05:e0:e7:65:82:05:19:29:c2:06:19:09:a5:06:5d:37:46:
         24:78:c3:6d:d5:b9:6c:51:81:53:0e:64:b1:1e:a1:66:94:ec:
         ff:61:3f:1b:9f:9c:08:54:fb:17:86:c5:8e:60:83:b3:81:45:
         4d:cc:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:52:56 2025 by rpki-client