Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/34352e3137362e3139362e302f32322d3232203d3e20323635323135.roa
File:                     34352e3137362e3139362e302f32322d3232203d3e20323635323135.roa (raw, json)
Hash identifier:          Qcry4zVuGazvA6zQux/ldB88ELkf7siWBVfukUIonz4=
Subject key identifier:   C4:A6:93:48:26:12:FB:21:C9:29:48:74:42:29:68:25:47:E3:B0:CB
Certificate issuer:       /CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
Certificate serial:       4468FFA85670CD33329D003396D675F3CFF122BE
Authority key identifier: 07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/34352e3137362e3139362e302f32322d3232203d3e20323635323135.roa
Signing time:             Wed 08 Jan 2025 16:35:22 +0000
ROA not before:           Wed 08 Jan 2025 16:30:22 +0000
ROA not after:            Wed 07 Jan 2026 16:35:22 +0000
asID:                     265215
IP address blocks:        45.176.196.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:68:ff:a8:56:70:cd:33:32:9d:00:33:96:d6:75:f3:cf:f1:22:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
        Validity
            Not Before: Jan  8 16:30:22 2025 GMT
            Not After : Jan  7 16:35:22 2026 GMT
        Subject: CN=C4A693482612FB21C92948744229682547E3B0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:57:fb:a7:2b:42:1c:5e:f0:27:50:41:57:
                    b8:61:e3:bc:ac:2b:2d:7c:ce:b4:62:e4:1b:46:65:
                    26:ca:d5:16:dc:53:b1:d2:97:2c:b2:a5:52:81:ce:
                    bb:ab:26:ec:68:e6:aa:09:72:c1:e6:f2:b0:86:21:
                    f2:a3:41:8a:16:c8:2e:11:df:00:dd:ba:95:0d:0c:
                    4f:e9:5d:b7:9c:98:9f:b0:d1:0c:85:9c:36:91:df:
                    6a:0c:1d:45:37:29:54:51:81:0d:b1:d9:8f:37:3e:
                    c4:7c:63:23:7e:d2:b9:85:2c:3b:8e:37:41:68:9b:
                    f2:af:ae:4f:c0:cf:3f:ee:f7:aa:95:d8:ba:fa:2e:
                    4f:18:11:ac:a6:df:d3:60:14:1a:6d:5f:52:7f:91:
                    f1:de:7e:ad:0d:23:dd:58:26:b2:a9:38:5e:f4:4a:
                    b0:bc:33:78:c5:dc:9a:74:92:3c:5f:2f:3b:f7:56:
                    67:49:d2:70:15:41:8f:09:7e:68:7b:b8:8b:de:30:
                    52:73:fb:90:50:78:b2:65:88:fc:42:3c:aa:97:13:
                    01:7f:4c:1c:e8:91:6c:4d:a0:61:b3:5b:8d:d6:31:
                    68:28:1d:12:7d:53:82:74:ef:93:42:30:97:cc:04:
                    53:44:3e:74:12:80:8f:91:9a:8f:bf:ab:2e:a8:f5:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A6:93:48:26:12:FB:21:C9:29:48:74:42:29:68:25:47:E3:B0:CB
            X509v3 Authority Key Identifier:
                keyid:07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/34352e3137362e3139362e302f32322d3232203d3e20323635323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:11:9c:f7:7e:34:00:7a:aa:67:f0:59:44:9c:eb:28:c0:06:
         a2:ea:df:84:70:2c:42:57:32:ca:3b:56:30:ea:fd:96:9e:0f:
         7f:03:41:e3:1e:09:b3:10:87:d1:80:d2:8a:b6:72:f4:18:0f:
         16:d7:5e:3f:eb:03:64:0d:ff:c6:4e:ab:1c:5e:9f:86:7b:0e:
         61:e4:26:33:bf:53:da:b2:2f:8a:d4:69:48:1b:44:69:4d:da:
         ef:d4:c5:fe:a2:c7:3a:27:36:45:6d:2e:3a:8f:44:4e:97:16:
         b3:67:a8:0c:d9:e5:b2:15:db:54:5b:88:2c:5f:16:97:e7:28:
         cf:3e:1d:fe:50:b8:79:40:fc:4b:e9:5a:39:54:12:0a:4b:90:
         47:17:e1:29:ce:fa:8a:e3:43:22:c3:82:e6:e1:bd:35:12:be:
         dd:0b:84:0d:76:84:14:8f:20:06:c9:ab:76:88:93:69:a6:97:
         44:01:d4:a9:d1:d6:3d:a3:c6:78:7d:84:1d:f9:e3:4c:88:3f:
         ec:c1:59:62:a1:37:ec:d3:7b:3b:72:51:37:14:51:2e:5e:2f:
         d4:71:cf:05:40:14:5c:9e:da:25:aa:9b:07:4e:6f:c3:e2:5e:
         2e:5a:89:76:a8:ed:d6:61:d7:4e:ce:f2:d2:81:6f:62:b1:c3:
         24:1d:52:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:08:02 2025 by rpki-client