Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa
File:                     34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa (raw, json)
Hash identifier:          CUVCv0i8so3z7lXmBnj5IRT1LMGMDXwwdKfqGiZLD2w=
Subject key identifier:   DD:E8:AE:C6:7E:ED:7A:27:AB:21:D4:79:81:06:F1:2D:B3:2B:1B:64
Certificate issuer:       /CN=B325121E804B0FC95B1063C1102CA90077C97D97
Certificate serial:       41A02C5C78D9F03789EFFF59436EF8F403DC939C
Authority key identifier: B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa
Signing time:             Sun 02 Feb 2025 00:02:51 +0000
ROA not before:           Sat 01 Feb 2025 23:57:51 +0000
ROA not after:            Sun 01 Feb 2026 00:02:51 +0000
asID:                     269014
IP address blocks:        45.176.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a0:2c:5c:78:d9:f0:37:89:ef:ff:59:43:6e:f8:f4:03:dc:93:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B325121E804B0FC95B1063C1102CA90077C97D97
        Validity
            Not Before: Feb  1 23:57:51 2025 GMT
            Not After : Feb  1 00:02:51 2026 GMT
        Subject: CN=DDE8AEC67EED7A27AB21D4798106F12DB32B1B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:93:34:63:a1:1f:8a:0a:0c:cf:c5:ad:df:
                    fd:10:71:a6:d2:b6:93:94:f6:f4:07:78:93:3c:78:
                    dc:f0:f1:16:13:e0:93:29:e3:46:8f:8c:c9:fa:cc:
                    ff:07:72:2f:f2:b4:56:11:e2:1b:63:2d:1a:b2:05:
                    46:06:b7:b6:54:13:3e:d9:7e:1b:14:11:52:e1:be:
                    91:a2:e8:b5:06:d4:e7:ca:0b:6c:31:e5:53:51:5e:
                    c3:c7:65:53:58:ea:8d:00:ec:b2:1c:21:34:18:c5:
                    7c:cf:84:c2:28:9c:22:13:9f:32:fc:5e:6e:32:35:
                    33:1f:dd:dd:13:08:79:2a:92:87:52:08:bf:76:0a:
                    be:f5:33:5d:0f:95:6c:2a:02:b1:1c:c0:cd:49:1f:
                    9c:68:dc:23:9c:b6:5b:54:b1:f5:ae:a5:6d:54:4a:
                    16:47:67:97:10:1a:5d:32:90:0b:e6:8f:4d:38:97:
                    84:d1:2b:7f:4b:75:a8:3d:06:ef:08:0a:b4:94:c8:
                    30:50:91:56:c1:54:fa:b9:b3:fe:b8:8f:40:08:99:
                    70:e5:0c:6f:4a:5e:37:59:58:cc:c8:d4:81:89:cc:
                    81:ca:7e:71:6c:61:f4:cc:ca:68:70:45:91:71:30:
                    cc:26:fd:bd:55:68:db:eb:de:e6:a9:df:79:22:af:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E8:AE:C6:7E:ED:7A:27:AB:21:D4:79:81:06:F1:2D:B3:2B:1B:64
            X509v3 Authority Key Identifier:
                keyid:B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:3c:eb:84:e6:30:7d:f8:9a:89:9a:df:a0:cd:86:f9:f3:e7:
         ab:36:e8:72:d8:f6:3e:93:9e:07:20:0f:f7:90:59:ca:54:0d:
         3d:a2:54:fb:b4:29:59:2a:46:9a:f3:f6:db:34:1b:e5:b6:89:
         0f:d3:e2:a0:e2:3b:9c:25:83:c8:d1:24:c1:f4:43:32:d7:5e:
         9f:09:d9:34:89:df:ec:ad:5c:ac:ec:a9:e0:b0:1a:8c:39:5e:
         31:44:3b:a5:b5:ef:19:5f:23:78:17:d8:56:47:c2:4b:f0:74:
         95:0b:af:fb:4c:9a:db:a6:01:2e:53:95:3a:3b:c2:21:0a:cc:
         dc:89:b8:9f:9d:56:22:ed:5a:9d:94:16:0d:df:fb:6e:f5:27:
         36:5c:9f:9a:08:1f:46:08:87:f8:27:a2:c4:bb:08:d3:d5:eb:
         f5:cc:24:c4:29:a4:72:11:90:8f:c8:96:c4:1c:c3:8a:74:b3:
         44:fb:51:ed:6f:d4:a4:14:6e:91:10:f5:5e:21:c3:1e:0e:07:
         55:94:73:2c:94:39:2c:f0:14:c1:8b:5e:37:c5:13:3a:33:dc:
         f6:0c:14:a1:a2:69:d0:39:e6:15:b7:d4:ef:62:d4:e3:c1:d8:
         db:1b:96:0b:4f:f5:24:b2:2a:fa:dc:eb:df:3b:a1:65:1e:36:
         8b:54:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:42:54 2025 by rpki-client