Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135352e302f32342d3234203d3e20323638383135.roa
File:                     34352e3137332e3135352e302f32342d3234203d3e20323638383135.roa (raw, json)
Hash identifier:          ugqXGaCBK1QId1FRLn34U818UbwLz3aQK+IEqQEtJQ8=
Subject key identifier:   8F:6D:45:64:77:F9:2D:79:B5:23:65:5B:71:67:7B:26:C8:B0:DA:19
Certificate issuer:       /CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
Certificate serial:       6129205F963EB6C31CF2E66E3F1E9393A6C8C66D
Authority key identifier: 14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135352e302f32342d3234203d3e20323638383135.roa
Signing time:             Fri 13 Dec 2024 19:16:37 +0000
ROA not before:           Fri 13 Dec 2024 19:11:37 +0000
ROA not after:            Fri 12 Dec 2025 19:16:37 +0000
asID:                     268815
IP address blocks:        45.173.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:29:20:5f:96:3e:b6:c3:1c:f2:e6:6e:3f:1e:93:93:a6:c8:c6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
        Validity
            Not Before: Dec 13 19:11:37 2024 GMT
            Not After : Dec 12 19:16:37 2025 GMT
        Subject: CN=8F6D456477F92D79B523655B71677B26C8B0DA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:2e:b7:6b:39:62:0f:b0:cf:5f:ca:ed:10:
                    0f:d4:59:11:2a:b7:4c:3a:71:68:99:48:4f:82:5f:
                    2b:1a:50:34:0d:4b:94:08:1e:61:b5:49:ed:46:c6:
                    e3:6e:72:76:1d:34:cc:53:11:f2:f6:96:9a:8d:9c:
                    bc:71:e1:3e:bd:18:95:c7:87:28:97:2d:19:da:ee:
                    5f:05:61:51:cc:0f:1c:f4:d3:1b:b9:cf:d3:14:ee:
                    ac:03:ba:2c:c6:75:43:df:66:2e:ec:ca:43:01:c1:
                    f8:c1:41:d2:05:b4:d0:21:41:ed:7c:66:a5:ca:95:
                    4e:9b:0b:64:08:c7:6a:07:7b:ed:72:1c:21:b3:2a:
                    19:9a:0c:94:be:f6:fb:80:a7:a3:2c:e9:82:3c:64:
                    dd:1e:64:f5:4b:50:32:89:fe:c7:0f:f5:f7:6d:dc:
                    f5:82:78:8d:ad:3d:5b:b0:cd:2a:0b:47:d9:05:75:
                    42:35:58:db:85:d3:b3:12:ea:29:1e:a0:3b:be:fd:
                    ae:1a:9f:a0:fb:a5:82:f9:a9:c8:c6:b8:86:6d:8f:
                    8a:af:81:48:49:df:ea:0e:36:39:09:88:a1:12:e8:
                    33:e8:f5:88:33:3c:c3:04:fe:06:03:63:03:a1:51:
                    d9:d6:0b:d3:43:78:49:ea:d1:87:de:94:7f:23:e6:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6D:45:64:77:F9:2D:79:B5:23:65:5B:71:67:7B:26:C8:B0:DA:19
            X509v3 Authority Key Identifier:
                keyid:14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135352e302f32342d3234203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:3b:ab:9d:15:da:d2:49:99:60:b4:62:60:ae:f2:15:16:4a:
         f9:54:9e:83:de:d5:06:87:05:20:2d:aa:86:dc:50:a6:58:cc:
         21:9b:55:f9:c7:63:8a:4b:95:f9:98:55:3e:49:ce:ce:5d:05:
         88:c6:48:6e:77:6a:22:f8:95:62:9f:0b:8c:e0:38:87:08:d9:
         7f:9a:f0:a4:f1:5b:51:b3:9e:f7:f2:4a:b0:0f:8d:c9:71:25:
         8d:f0:bf:46:a3:e3:b0:fa:55:f9:4d:b7:8f:cd:b2:ad:dc:82:
         fd:c5:cc:70:48:98:fd:11:4a:af:d5:67:1c:eb:9b:70:86:6c:
         0b:81:53:77:a4:bf:b9:c4:cb:2d:d1:e3:1f:d6:93:10:42:3f:
         0f:3c:5e:79:b8:b4:ae:28:3a:72:33:66:00:32:24:f7:87:40:
         80:f1:c8:76:40:bd:28:02:0f:87:88:8e:eb:62:10:cd:04:fd:
         6c:70:24:7d:77:7a:d4:96:3f:50:db:7d:8e:d9:74:69:2c:82:
         4e:47:a7:bf:ac:61:0c:e2:2e:ca:8d:6a:16:5a:c7:67:b6:41:
         d5:8c:23:7e:02:f9:92:fc:67:dd:1d:2f:85:37:89:db:cf:4a:
         5e:0e:eb:ec:0f:c1:75:6c:66:5d:a4:b8:1c:c4:25:95:27:34:
         40:81:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:36:29 2025 by rpki-client