Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32342d3234203d3e20323639323230.roa
File:                     34352e3138322e36302e302f32342d3234203d3e20323639323230.roa (raw, json)
Hash identifier:          Smp5RjFC+aOrPRfwBDvr4yYySvnazFHsl6c92ZLy014=
Subject key identifier:   36:CB:F5:18:AB:2D:00:0B:15:AA:C8:0F:31:CF:FB:46:F1:79:D1:17
Certificate issuer:       /CN=4FCF39CBA2BF707C1033E8DC521C56B19D3FC243
Certificate serial:       30450B6DD20927CEF62AAD1B2FFD5807C3A213DB
Authority key identifier: 4F:CF:39:CB:A2:BF:70:7C:10:33:E8:DC:52:1C:56:B1:9D:3F:C2:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32342d3234203d3e20323639323230.roa
Signing time:             Fri 10 Jan 2025 12:17:40 +0000
ROA not before:           Fri 10 Jan 2025 12:12:40 +0000
ROA not after:            Fri 09 Jan 2026 12:17:40 +0000
asID:                     269220
IP address blocks:        45.182.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:45:0b:6d:d2:09:27:ce:f6:2a:ad:1b:2f:fd:58:07:c3:a2:13:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FCF39CBA2BF707C1033E8DC521C56B19D3FC243
        Validity
            Not Before: Jan 10 12:12:40 2025 GMT
            Not After : Jan  9 12:17:40 2026 GMT
        Subject: CN=36CBF518AB2D000B15AAC80F31CFFB46F179D117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:15:49:fc:df:60:2c:f5:61:26:58:84:2f:
                    ee:68:db:8f:e4:84:b9:bd:7c:bf:4e:a5:47:57:a1:
                    33:8d:83:6f:4d:bb:ed:72:87:69:5a:b7:5f:5f:de:
                    70:c4:85:c4:32:0b:51:58:44:c2:dc:36:7a:dd:de:
                    d8:45:30:f5:dd:76:bb:e1:18:ea:c4:85:40:f0:be:
                    7e:8b:ab:e3:6d:aa:0c:af:31:f0:01:99:cc:a8:d9:
                    a6:9e:41:df:07:ed:0e:0a:df:5e:28:f9:ac:79:cd:
                    93:fb:e5:5c:8b:9b:14:59:b8:9d:ce:0e:0d:77:2c:
                    41:a6:ea:44:58:5e:8b:5a:30:30:f3:06:77:cd:b6:
                    fc:de:e9:92:d0:d9:fd:64:a0:4b:97:c0:66:7f:7d:
                    09:84:c4:38:d6:92:5e:67:2e:38:c7:f3:45:ae:a7:
                    2a:ab:95:c6:7d:e7:f7:f9:51:ff:4a:35:45:05:52:
                    3c:bf:c2:73:0b:fb:2a:35:e6:83:c2:4c:ff:8d:49:
                    89:70:6f:92:46:00:41:97:55:94:90:1a:97:21:13:
                    d4:15:26:e6:9a:3f:50:a5:35:91:fa:0e:aa:fa:91:
                    28:eb:c4:a9:24:7e:bd:fc:10:4d:a8:a7:b5:e0:c2:
                    80:7e:b1:73:5c:ea:53:d3:55:1d:5f:2c:dc:b7:7c:
                    e2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CB:F5:18:AB:2D:00:0B:15:AA:C8:0F:31:CF:FB:46:F1:79:D1:17
            X509v3 Authority Key Identifier:
                keyid:4F:CF:39:CB:A2:BF:70:7C:10:33:E8:DC:52:1C:56:B1:9D:3F:C2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32342d3234203d3e20323639323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:92:aa:b2:7d:2e:9a:ef:4e:b2:b0:e2:f8:69:0b:a5:b2:bd:
         6a:a0:5e:61:6f:6f:70:a7:84:2a:12:8f:f3:03:49:53:74:3a:
         d8:f6:f8:a2:d3:6d:d0:18:ec:1e:bc:42:ec:5f:93:12:db:e4:
         9b:b1:33:42:7b:48:f9:16:c0:fb:92:8e:2e:9d:ec:cc:f3:28:
         d8:ab:b0:43:ce:60:88:0f:db:07:1d:3f:b4:ee:61:86:08:5e:
         b1:44:f7:b4:a5:a7:78:0a:4f:81:e5:a5:b5:47:2a:ed:ba:83:
         47:48:64:e0:c2:d6:51:0d:3a:be:dc:e2:bd:6b:4c:9c:1f:68:
         7a:c4:4b:8d:de:d7:44:a8:a3:da:1e:f5:25:4a:b7:d2:e0:3b:
         88:70:13:c1:87:1e:9f:bc:bb:ec:3c:2e:1e:14:49:37:fb:d9:
         87:5d:62:59:74:a9:21:61:55:27:40:49:bd:37:0b:9b:ba:39:
         82:3c:4c:46:9a:44:3f:5a:df:21:e8:1c:b9:16:48:72:4a:f9:
         05:5c:0c:fb:ad:9d:df:7b:5f:9d:be:3a:32:54:71:7a:03:c4:
         d5:c9:ea:83:69:23:b5:dd:16:ae:b5:c3:27:ae:c8:3f:18:f6:
         f5:40:be:d5:01:96:90:ca:65:2b:53:bd:d2:15:0b:bf:c4:e1:
         16:21:a7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:26:03 2025 by rpki-client