Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138302e302f32322d3232203d3e20323638303638.roa
File:                     34352e3136382e3138302e302f32322d3232203d3e20323638303638.roa (raw, json)
Hash identifier:          D0Uoi0aZ9RHHVfDoRC6u4UciSF2YxK6+tCSePSg0Y9A=
Subject key identifier:   51:FE:18:E8:31:67:05:59:89:76:0A:15:53:64:84:5D:E5:62:45:4C
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       7AFC63A51B6CD4B2CC7ABE5F57AA81CB38007209
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138302e302f32322d3232203d3e20323638303638.roa
Signing time:             Thu 06 Mar 2025 06:00:20 +0000
ROA not before:           Thu 06 Mar 2025 05:55:20 +0000
ROA not after:            Thu 05 Mar 2026 06:00:20 +0000
asID:                     268068
IP address blocks:        45.168.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fc:63:a5:1b:6c:d4:b2:cc:7a:be:5f:57:aa:81:cb:38:00:72:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Mar  6 05:55:20 2025 GMT
            Not After : Mar  5 06:00:20 2026 GMT
        Subject: CN=51FE18E83167055989760A155364845DE562454C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:eb:ff:8c:90:7b:43:8e:eb:cc:37:e2:18:
                    22:5d:75:9d:27:bc:67:2b:56:ba:35:5f:ff:76:7d:
                    74:a8:f7:a2:11:93:53:a2:9f:59:18:64:57:72:bc:
                    83:14:07:2a:f6:2a:9b:5f:58:d8:e0:27:53:02:a5:
                    42:ba:32:2b:f3:44:06:24:bd:37:db:79:a7:c7:15:
                    93:06:66:e3:1c:69:82:6b:c5:39:05:f2:23:ac:0c:
                    77:4f:9f:f5:37:4e:29:13:ff:7a:4f:85:af:8b:b7:
                    37:f9:c2:21:ab:c2:25:aa:30:b6:b3:62:e8:84:02:
                    0a:a9:30:81:b8:96:e6:3f:4c:e6:fa:1d:56:07:d5:
                    99:fd:15:ff:f4:81:17:ed:b7:5a:9f:1f:1a:b8:24:
                    86:0f:9e:8e:62:05:68:fa:6a:e6:3d:f5:0d:73:ec:
                    9d:12:b7:93:46:63:74:4a:7f:d0:02:e8:08:87:c9:
                    b4:53:4b:2c:56:38:09:89:56:21:41:f5:7b:d3:51:
                    42:52:a2:62:04:0d:ac:e6:35:5f:96:b7:cc:52:06:
                    a7:7f:3d:f4:72:b6:8d:94:52:e6:f8:83:cf:3a:c0:
                    de:32:a3:13:4e:c7:64:6d:6c:d5:5e:2c:a7:ec:ca:
                    47:bc:51:85:59:99:aa:99:ce:a2:d4:49:1a:7c:39:
                    ff:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FE:18:E8:31:67:05:59:89:76:0A:15:53:64:84:5D:E5:62:45:4C
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138302e302f32322d3232203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:24:f1:c8:64:39:3e:35:4d:2f:a9:0a:27:12:24:6b:29:09:
         33:4e:42:81:64:ee:5f:ab:f9:02:e3:9c:d3:68:57:a1:84:96:
         8d:e5:44:2d:0f:33:77:90:1c:8f:ec:b2:55:45:b5:aa:6c:34:
         43:b8:f9:c6:27:17:4e:0f:1a:b6:04:8b:98:35:92:dc:cc:8f:
         9b:51:4a:df:1f:98:82:33:4a:26:b2:29:b2:b8:02:79:37:b1:
         c2:16:8c:00:24:6e:8c:13:38:e4:96:47:3b:cd:4f:3e:d4:0a:
         b8:39:6a:d2:63:15:56:f2:d1:1b:b7:24:eb:40:bc:cf:84:cc:
         7e:73:35:30:eb:70:99:be:52:d2:88:f3:ab:89:00:70:f1:c0:
         b8:3e:75:01:6f:09:6e:7d:ac:17:bc:19:d5:a8:f8:5a:7f:fc:
         c9:a0:32:8c:88:2d:8c:ed:31:b8:a5:ae:de:9c:fc:eb:ed:fd:
         bd:ac:93:00:96:da:d8:ee:4c:b2:7e:14:28:03:01:9d:03:3c:
         e9:44:2e:7d:86:1b:b9:f9:71:5d:0c:d7:be:5e:72:33:a9:be:
         e6:e6:dd:63:21:ad:8e:7c:45:a8:57:b1:d1:a0:93:bf:55:3b:
         47:97:75:7e:9e:78:d1:65:b2:04:4f:7a:bd:e2:89:98:8e:d9:
         55:7e:d2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:32:19 2025 by rpki-client