Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa
File:                     34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa (raw, json)
Hash identifier:          A6R95jAQFrIs3Urq2ONNpGOi2F+3/TsTu22kA4hqSZs=
Subject key identifier:   61:A0:15:0C:57:17:34:58:70:6B:73:AF:D9:26:2A:65:90:C9:1F:7D
Certificate issuer:       /CN=B325121E804B0FC95B1063C1102CA90077C97D97
Certificate serial:       3F712C5BDAD56B6680DDFF7D3A33FF24597F87AE
Authority key identifier: B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa
Signing time:             Sun 02 Feb 2025 00:02:53 +0000
ROA not before:           Sat 01 Feb 2025 23:57:53 +0000
ROA not after:            Sun 01 Feb 2026 00:02:53 +0000
asID:                     269014
IP address blocks:        45.176.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:71:2c:5b:da:d5:6b:66:80:dd:ff:7d:3a:33:ff:24:59:7f:87:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B325121E804B0FC95B1063C1102CA90077C97D97
        Validity
            Not Before: Feb  1 23:57:53 2025 GMT
            Not After : Feb  1 00:02:53 2026 GMT
        Subject: CN=61A0150C57173458706B73AFD9262A6590C91F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:53:ed:d0:16:71:20:20:6b:de:58:b0:bf:
                    16:b1:14:44:45:56:0e:62:28:6a:17:72:a9:8e:a3:
                    e5:97:81:f3:c9:24:e1:dc:be:8d:10:da:8b:5b:d3:
                    bc:a7:f0:52:81:27:97:8a:b8:f1:9d:45:79:98:ab:
                    53:44:0a:9d:e9:91:ed:6d:8e:ff:35:ec:18:cb:20:
                    87:12:ad:6e:ac:db:86:99:9f:f7:eb:8b:a8:52:b6:
                    04:92:25:f6:d9:88:e6:b6:b2:d4:f0:b8:af:b2:f9:
                    cc:98:18:5c:e8:54:4c:0b:08:90:28:ea:d7:0b:fd:
                    7e:a9:b7:8a:41:a1:23:6e:2c:90:08:29:b5:47:63:
                    61:ef:94:21:9d:ad:87:f1:49:70:a9:ad:fa:e2:f5:
                    a0:71:70:31:00:0e:b7:58:40:54:73:f0:73:2c:63:
                    2d:b0:b6:25:00:74:ca:97:a6:22:21:a2:2d:42:34:
                    64:6f:3e:bc:92:0d:26:ec:ca:26:f9:d5:9c:d8:be:
                    f6:ae:77:0b:da:af:3b:4e:65:10:27:90:20:15:1b:
                    44:b5:7c:7d:69:99:2d:1d:cd:62:5f:c6:17:02:b4:
                    0c:71:4d:cd:d0:34:68:0f:97:87:71:bb:5e:ac:53:
                    c0:f3:47:41:ec:ba:a3:5a:aa:e0:26:db:76:2e:03:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A0:15:0C:57:17:34:58:70:6B:73:AF:D9:26:2A:65:90:C9:1F:7D
            X509v3 Authority Key Identifier:
                keyid:B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:ad:0a:17:0a:2f:07:d6:60:20:c8:fc:6e:9a:41:db:53:09:
         f4:d6:c5:54:1e:87:8a:98:f2:f1:1c:61:3c:e0:bb:23:55:5a:
         c7:03:52:47:7f:a7:32:6e:c0:9f:95:a4:6c:38:d7:47:fd:2a:
         70:22:f8:ed:2a:55:1d:eb:08:fb:01:53:33:02:2c:79:11:eb:
         7f:d4:9a:05:68:7d:8b:8f:37:06:47:be:e0:52:6f:86:0f:2c:
         66:3b:24:5a:32:02:3d:68:26:a8:61:e2:95:e0:08:9d:d3:96:
         09:34:ea:14:bb:81:74:42:37:74:cf:77:a3:0f:c1:f2:94:59:
         bd:f6:fc:d9:68:35:10:11:d7:81:7f:dd:c7:72:e0:1b:20:2c:
         84:8d:25:c1:4f:c6:33:4f:71:ff:3c:74:10:e7:95:12:c4:b2:
         9f:66:d6:2f:04:80:cd:32:d5:a1:41:0a:96:e0:e4:18:d0:15:
         00:a5:ff:f8:0f:6a:e9:a6:d7:02:fd:48:48:19:af:1c:95:52:
         76:8b:f2:4c:97:ae:a1:00:f3:8b:2d:70:97:f8:5d:56:50:c6:
         55:14:00:76:bf:20:d7:05:83:5c:7b:5a:90:d1:2e:af:23:2f:
         60:c1:fb:87:78:d4:2e:e8:80:67:2e:d8:d5:f1:27:96:67:f5:
         de:4d:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:42:56 2025 by rpki-client