Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa
File:                     34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa (raw, json)
Hash identifier:          vLmdo9KQ58nXNGaKvn9M76mAb5Rkp6osL4lr4pCuSjQ=
Subject key identifier:   27:C5:0C:E9:AC:79:98:C7:E1:F8:E0:F5:3A:7F:08:CC:C6:DE:88:C3
Certificate issuer:       /CN=CC8086D196E8A5C61982081F90E17B277D50F224
Certificate serial:       1A3A670FFFBC016466C7FD9930AE2B1077F2602D
Authority key identifier: CC:80:86:D1:96:E8:A5:C6:19:82:08:1F:90:E1:7B:27:7D:50:F2:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     265905
IP address blocks:        45.161.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3a:67:0f:ff:bc:01:64:66:c7:fd:99:30:ae:2b:10:77:f2:60:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC8086D196E8A5C61982081F90E17B277D50F224
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=27C50CE9AC7998C7E1F8E0F53A7F08CCC6DE88C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:87:0d:54:ad:05:a1:51:bd:29:bd:32:5a:
                    4e:0d:65:9d:81:bf:e6:64:43:4e:d9:b9:a4:8c:09:
                    17:9f:95:bf:37:26:81:6a:dd:db:51:9f:5a:53:97:
                    7e:12:90:cd:88:52:c2:73:40:dc:b2:4b:be:be:b9:
                    d9:12:28:89:16:d7:8c:d3:01:65:ec:d0:71:51:9c:
                    60:be:ef:f9:bc:19:59:ea:de:d3:87:0e:80:ce:e1:
                    cd:e3:68:97:46:cb:ec:22:34:95:17:7e:1c:2c:c5:
                    df:c1:97:64:45:ac:d5:90:82:a4:05:aa:a8:9b:96:
                    d9:a3:1f:a8:92:27:26:35:99:d8:49:46:02:0e:53:
                    0e:3d:f3:47:b9:86:41:9d:cc:1d:55:1d:5c:de:8c:
                    72:8c:13:c2:00:20:74:13:1e:2e:d8:e8:a4:70:22:
                    61:6f:51:fb:b5:53:1e:77:5e:fc:5f:1f:76:b4:e1:
                    c4:f7:86:fd:a8:10:7b:21:24:4c:37:54:64:3b:09:
                    ad:01:5f:7f:c1:28:42:41:37:9d:62:2c:f1:37:7d:
                    0e:e6:c0:fa:47:09:00:d6:11:ee:46:7f:3b:2e:d3:
                    5a:93:48:7a:03:e3:ad:a6:eb:37:8d:83:40:0b:2f:
                    3e:38:85:f8:ba:17:4f:92:06:25:c5:d0:5f:42:cf:
                    5b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C5:0C:E9:AC:79:98:C7:E1:F8:E0:F5:3A:7F:08:CC:C6:DE:88:C3
            X509v3 Authority Key Identifier:
                keyid:CC:80:86:D1:96:E8:A5:C6:19:82:08:1F:90:E1:7B:27:7D:50:F2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:a0:dc:0a:a3:cc:2d:43:01:c5:6b:00:1c:09:a7:e4:0a:05:
         db:e4:eb:5f:ef:02:bf:44:e5:81:13:cc:c7:82:7b:e1:eb:6a:
         ef:75:e7:73:0c:83:df:e9:59:4b:1c:9b:f9:60:c0:da:7d:02:
         87:f1:04:b8:92:be:fa:3f:0a:86:0b:95:8a:4e:a0:75:5e:fe:
         b6:6f:52:a2:78:d6:1e:e0:29:c2:f7:d7:4d:ee:b1:5a:f3:27:
         42:f6:81:fb:2b:c9:63:cf:78:39:ce:dd:a9:38:06:16:c5:bb:
         ae:17:e1:9f:29:f8:b3:91:b5:39:15:27:8f:52:46:97:a3:c4:
         60:a4:a4:47:10:82:1c:c6:e9:3b:de:05:a4:8f:d5:5c:a8:be:
         ff:18:d3:e1:d2:6e:fe:cf:e9:d8:c7:58:dd:b0:12:10:fe:aa:
         ac:5b:c6:7c:96:7f:73:44:38:b3:41:12:3e:72:f2:4e:0a:d2:
         04:11:e0:2e:c2:6c:cd:71:39:5c:05:cf:b8:5b:68:96:b0:f6:
         d9:8f:e6:84:4e:0a:d4:b3:2c:5f:9d:dc:0a:dc:71:af:33:fd:
         4b:69:ff:47:9b:c0:dd:26:96:ba:21:b2:b6:c7:49:39:3e:ce:
         14:d2:98:ef:65:b9:7d:b4:3d:0d:e7:bd:b0:cb:f2:68:09:03:
         62:4b:ba:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:28:20 2025 by rpki-client