Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa
File:                     34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa (raw, json)
Hash identifier:          znyWn9wGUvDsfG8CETfksd730Xv1Qq367zOUtJ8J2Kc=
Subject key identifier:   18:11:9F:A2:C5:D9:D5:CB:F7:55:99:48:3A:23:50:93:59:EC:52:0D
Certificate issuer:       /CN=2A50FAE337A6C3B2403E936C43EE2E93CE369248
Certificate serial:       1BD72AB6C089091E98A6CEF92CABFDD3A5AD3DEB
Authority key identifier: 2A:50:FA:E3:37:A6:C3:B2:40:3E:93:6C:43:EE:2E:93:CE:36:92:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A50FAE337A6C3B2403E936C43EE2E93CE369248.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa
Signing time:             Wed 18 Dec 2024 14:42:39 +0000
ROA not before:           Wed 18 Dec 2024 14:37:39 +0000
ROA not after:            Wed 17 Dec 2025 14:42:39 +0000
asID:                     269186
IP address blocks:        45.180.108.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d7:2a:b6:c0:89:09:1e:98:a6:ce:f9:2c:ab:fd:d3:a5:ad:3d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A50FAE337A6C3B2403E936C43EE2E93CE369248
        Validity
            Not Before: Dec 18 14:37:39 2024 GMT
            Not After : Dec 17 14:42:39 2025 GMT
        Subject: CN=18119FA2C5D9D5CBF75599483A23509359EC520D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:31:29:1c:d3:f6:62:0d:ab:7d:50:63:64:
                    50:bb:6d:68:79:7a:0f:c6:84:0c:39:8d:bd:42:1f:
                    1c:d0:f1:4a:f2:c4:37:76:91:3f:00:dc:1d:b0:16:
                    b4:55:01:11:a3:62:9c:7b:11:12:a9:b5:5c:0f:43:
                    73:6a:cd:f7:39:30:f7:24:04:2e:dd:38:8f:66:74:
                    92:8b:3f:c4:0e:8b:c5:62:24:83:b4:9a:83:dc:84:
                    60:95:b8:e6:50:58:21:be:c3:2b:8d:b1:4a:4b:e4:
                    b1:c6:7b:ce:8a:59:84:e2:72:98:8f:0a:e3:3b:13:
                    f6:dc:a5:4c:85:6b:51:a3:60:60:af:23:83:a4:92:
                    f0:94:86:5f:b1:f2:6d:66:e4:c0:21:cb:2b:63:b7:
                    85:09:2b:ab:bc:0e:01:63:1d:2e:9c:5e:de:18:9a:
                    c2:02:c3:66:ed:52:ce:b5:54:d3:d5:11:6d:22:b9:
                    8c:82:ce:04:f9:8a:4d:12:6a:6d:11:e7:d5:9e:10:
                    24:1e:f6:b7:59:4f:59:82:c2:b8:8f:ba:8d:b5:08:
                    4d:27:d7:89:d9:73:af:1f:fd:d0:7e:c8:32:00:ea:
                    51:0b:94:c6:5e:b0:f1:c3:44:a1:d0:c9:40:af:26:
                    8e:bf:5c:73:ed:fe:34:0c:86:17:ee:34:34:a8:3d:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:11:9F:A2:C5:D9:D5:CB:F7:55:99:48:3A:23:50:93:59:EC:52:0D
            X509v3 Authority Key Identifier:
                keyid:2A:50:FA:E3:37:A6:C3:B2:40:3E:93:6C:43:EE:2E:93:CE:36:92:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/2A50FAE337A6C3B2403E936C43EE2E93CE369248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A50FAE337A6C3B2403E936C43EE2E93CE369248.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:ee:ea:09:93:5d:38:f7:d8:f8:17:fa:4e:b6:d9:ca:87:5d:
         f0:60:4f:08:b9:8a:e0:23:20:c1:11:13:a9:b1:da:0f:b6:7d:
         0f:c9:f6:9b:15:22:9d:95:ad:12:3c:21:86:b3:56:f8:ec:31:
         2f:8b:6d:63:bc:ca:47:af:ec:f4:ba:77:83:fb:2b:d4:c1:84:
         cb:ed:fc:c9:8c:82:be:18:c7:0d:5d:18:5c:a9:bc:15:90:b5:
         12:00:43:2d:b9:f7:83:76:6a:87:60:bc:eb:7e:ef:cb:0d:b1:
         46:28:c1:0e:e0:58:4a:2b:25:5a:cf:0b:4e:08:31:4a:7e:5e:
         2d:73:dc:f0:db:e3:88:f5:30:30:42:d6:e0:a8:9c:6c:f2:ac:
         a8:8f:0c:ec:8e:82:38:9f:5d:e1:56:b6:96:97:a3:52:7e:b4:
         7c:67:26:49:7d:de:61:ad:51:8e:a5:c9:c7:b6:72:22:44:d3:
         be:cf:c2:55:fd:0c:a4:8e:49:35:5a:78:32:73:db:e6:88:78:
         f6:43:ec:c3:bc:94:30:f0:de:89:fe:cd:78:1a:4a:09:f9:21:
         18:91:fd:d6:d2:25:ab:1d:70:07:63:37:2d:75:db:85:22:f3:
         60:28:0c:68:d8:25:6b:a1:c4:0c:d3:0f:f4:9c:8c:90:58:90:
         69:58:0c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:03 2025 by rpki-client