Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36312e302f32342d3234203d3e20323639323230.roa
File:                     34352e3138322e36312e302f32342d3234203d3e20323639323230.roa (raw, json)
Hash identifier:          GdKHhwPCtCj/EruBiyS+aWBB4G6TDHThuwSxyPTMQ5s=
Subject key identifier:   FE:8D:6F:00:57:78:0A:39:CE:08:2F:3F:F0:10:1F:A9:4F:88:38:25
Certificate issuer:       /CN=4FCF39CBA2BF707C1033E8DC521C56B19D3FC243
Certificate serial:       43D7156E0A98A5DDFFE15125CAE8AECA73DA2FB9
Authority key identifier: 4F:CF:39:CB:A2:BF:70:7C:10:33:E8:DC:52:1C:56:B1:9D:3F:C2:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36312e302f32342d3234203d3e20323639323230.roa
Signing time:             Fri 10 Jan 2025 12:17:41 +0000
ROA not before:           Fri 10 Jan 2025 12:12:41 +0000
ROA not after:            Fri 09 Jan 2026 12:17:41 +0000
asID:                     269220
IP address blocks:        45.182.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d7:15:6e:0a:98:a5:dd:ff:e1:51:25:ca:e8:ae:ca:73:da:2f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FCF39CBA2BF707C1033E8DC521C56B19D3FC243
        Validity
            Not Before: Jan 10 12:12:41 2025 GMT
            Not After : Jan  9 12:17:41 2026 GMT
        Subject: CN=FE8D6F0057780A39CE082F3FF0101FA94F883825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a7:f6:56:90:11:fc:08:ba:6e:46:08:a6:03:
                    d9:4a:59:5e:e8:ea:c8:9e:b5:57:56:aa:a9:ae:ed:
                    93:cb:69:d8:f9:41:e8:0c:ca:8f:19:84:5e:3e:3d:
                    69:63:07:0c:12:72:ce:a0:c5:e2:8a:5a:b5:b4:bd:
                    44:ab:ac:cb:1a:39:b5:0f:e2:08:f1:ea:96:a5:5f:
                    e0:9d:e5:ed:09:21:62:d1:80:71:78:bb:b8:5a:9c:
                    0b:5a:15:43:54:cd:62:84:14:ab:83:29:ae:9f:1c:
                    dd:ea:1c:5e:11:3e:ac:e5:3e:9f:82:9c:13:ff:83:
                    31:35:4b:4a:e3:c4:0d:69:9d:9e:8a:0c:29:95:7a:
                    a3:10:3e:c8:5d:e5:a9:3e:7c:f5:94:22:e1:e7:ee:
                    7d:07:85:92:09:6b:20:00:ed:be:d8:69:54:9f:34:
                    7e:47:87:3a:1a:20:66:e0:47:3d:b1:a7:94:33:ab:
                    fc:97:2e:cd:b4:90:3e:0f:39:d7:8c:26:c9:80:29:
                    7c:dc:2d:db:5c:18:8d:bd:d4:8c:5e:5e:ca:10:de:
                    ec:22:92:72:9f:18:91:40:ef:77:49:a0:cc:0f:ad:
                    00:b2:cd:e0:dc:56:f1:22:2e:05:50:71:8c:e9:83:
                    4f:c4:71:66:a1:4a:82:8f:59:e9:2b:9a:c8:5a:69:
                    df:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:6F:00:57:78:0A:39:CE:08:2F:3F:F0:10:1F:A9:4F:88:38:25
            X509v3 Authority Key Identifier:
                keyid:4F:CF:39:CB:A2:BF:70:7C:10:33:E8:DC:52:1C:56:B1:9D:3F:C2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36312e302f32342d3234203d3e20323639323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:9e:da:8c:16:4b:4b:ca:d2:84:11:1d:a9:cf:c5:60:b3:4e:
         8b:40:8f:17:e1:c1:61:3b:f1:f1:b7:86:cd:9a:c2:d4:82:96:
         e6:ac:e2:df:66:25:61:f2:53:ab:9c:70:72:42:64:3d:d9:6d:
         94:31:46:dd:68:92:3d:7b:63:56:17:6e:f5:1b:24:20:9c:fe:
         82:35:4f:7b:90:d0:37:df:6e:e5:5e:97:77:4a:22:85:f4:3e:
         88:89:f4:c5:8b:1f:a2:be:85:a0:b8:ec:e8:d0:2f:9f:df:fc:
         32:c4:df:e1:12:3d:64:ce:cc:50:81:b1:1b:a3:7d:c0:2c:c0:
         e3:90:9b:ba:d6:c0:71:72:38:2e:e9:de:10:05:96:33:e7:1c:
         87:d8:2d:8a:a5:b1:b8:8f:9f:a0:bd:22:2a:47:f1:d8:72:75:
         c2:b5:a3:1e:54:70:d5:a6:f3:98:b6:d3:42:86:ea:83:3f:6e:
         f6:a4:e9:56:6b:91:d8:d6:04:9c:a0:1b:7f:2b:2a:5a:7e:63:
         7a:d1:ab:68:4c:1f:12:31:fb:93:13:da:ca:69:41:d9:50:a1:
         1f:ee:cf:26:25:53:4d:f4:10:c6:f0:ed:c5:c3:fd:d2:1f:10:
         14:26:15:ef:b2:c0:09:f7:36:f1:29:8b:07:5c:97:77:c9:54:
         70:35:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:58:27 2025 by rpki-client