Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39392e302f32342d3234203d3e20323639313238.roa
File:                     34352e3138302e39392e302f32342d3234203d3e20323639313238.roa (raw, json)
Hash identifier:          jBDxJ+3Aexsu2fDdMK9aKkb+U8qu1C9X8gr7JHzM1Jo=
Subject key identifier:   5F:D0:A5:04:A1:04:B3:7A:59:8F:13:F3:DE:42:B0:F6:27:72:DF:DC
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       039512A29352AD7C5B73584A0D89E73168CEA9DC
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39392e302f32342d3234203d3e20323639313238.roa
Signing time:             Thu 06 Mar 2025 09:00:35 +0000
ROA not before:           Thu 06 Mar 2025 08:55:35 +0000
ROA not after:            Thu 05 Mar 2026 09:00:35 +0000
asID:                     269128
IP address blocks:        45.180.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:95:12:a2:93:52:ad:7c:5b:73:58:4a:0d:89:e7:31:68:ce:a9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Mar  6 08:55:35 2025 GMT
            Not After : Mar  5 09:00:35 2026 GMT
        Subject: CN=5FD0A504A104B37A598F13F3DE42B0F62772DFDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:ca:41:50:08:3d:09:90:84:a4:0c:ea:f2:
                    fb:b9:a8:4f:87:7a:00:f8:f5:a0:b6:06:5b:62:4a:
                    f2:a5:4c:42:c2:7e:cd:9c:0f:c7:2e:7a:fc:43:dd:
                    82:4e:44:95:c2:b6:9b:4a:d2:bc:e6:71:ba:ae:a7:
                    b2:9c:ef:7b:85:b1:cd:89:57:89:20:4b:0e:a6:7c:
                    ef:85:bd:3a:34:bf:b7:06:32:45:dc:ab:30:c4:2b:
                    d1:68:12:dd:87:e6:08:cc:73:1d:a3:0f:75:1f:d4:
                    ed:cc:76:0f:3e:28:1f:71:8e:92:63:2d:ae:23:5f:
                    09:63:67:35:6a:d1:f0:3b:65:ba:33:6d:a2:32:a8:
                    bb:13:6c:ef:0d:53:2d:49:d9:ff:45:71:ce:23:1d:
                    d1:0c:76:97:69:01:4f:d0:0e:bf:c3:2c:31:b5:81:
                    eb:3d:6e:be:f4:b5:4b:b4:2f:ec:44:ab:25:0a:f3:
                    00:93:65:74:1f:c0:27:75:0b:fb:ac:6e:a6:4c:9d:
                    f5:ad:13:8b:ce:bd:30:01:23:c7:e1:6b:04:91:8c:
                    36:df:93:52:10:15:b5:38:11:18:77:98:8b:3e:8c:
                    48:78:5d:4c:b7:31:a4:08:6c:1a:41:47:71:df:22:
                    d3:7b:09:6e:d5:ec:c2:9e:a1:53:79:c6:10:a8:a5:
                    35:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D0:A5:04:A1:04:B3:7A:59:8F:13:F3:DE:42:B0:F6:27:72:DF:DC
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39392e302f32342d3234203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:63:6d:67:44:44:f7:99:ab:e0:70:4e:74:50:8f:6f:eb:32:
         41:a2:b8:c4:bd:68:9c:3f:ea:e6:de:e1:ff:16:a0:ed:64:43:
         8d:13:0c:b1:03:37:fa:97:3a:b0:62:e7:d4:96:d8:50:a4:0e:
         48:ed:5b:09:1f:43:b5:66:23:4b:28:fe:fc:69:58:e4:3f:7e:
         16:18:6f:9c:1e:c1:4a:8c:6a:9b:db:de:bf:85:96:f2:11:d4:
         cc:1c:76:5d:24:9a:eb:f5:97:38:2f:78:1a:78:3a:24:72:b0:
         af:81:72:43:f4:b3:2a:69:6c:cf:1d:2d:5b:7a:88:68:48:9b:
         42:ad:15:d2:c4:88:d8:97:01:4e:99:2b:0e:61:3b:e0:f0:d2:
         d8:48:c9:f4:53:2c:00:2e:1c:e2:3e:96:24:48:33:54:34:c3:
         55:3c:d6:df:59:49:2c:a4:18:59:58:09:70:0f:1b:df:39:e4:
         70:d4:3b:ee:36:56:13:75:e8:b2:a6:fa:37:ec:40:89:94:ee:
         dc:db:0f:3e:f7:b1:70:56:93:dc:88:79:ba:ee:b5:a6:dc:6b:
         7d:d6:c5:c3:80:2e:49:53:34:e0:a9:85:3b:72:04:d9:11:f8:
         48:c4:b5:20:a7:4b:9d:72:57:be:36:3f:76:89:8f:4b:af:18:
         8d:0c:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:10 2025 by rpki-client