Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32322d3234203d3e20323639353032.roa
File:                     34352e3138362e302e302f32322d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          9SfeJghxwFZaKACPC5Q+yt/V5g2GLG7HXhWlywSy0B4=
Subject key identifier:   1C:58:49:91:20:7B:9D:FE:EE:86:6F:D7:DE:CD:6E:80:54:94:8F:A5
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       3CF7AA1F16D5E3ED3DB89C309DB58CE27515F778
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32322d3234203d3e20323639353032.roa
Signing time:             Tue 26 Nov 2024 19:11:54 +0000
ROA not before:           Tue 26 Nov 2024 19:06:54 +0000
ROA not after:            Tue 25 Nov 2025 19:11:54 +0000
asID:                     269502
IP address blocks:        45.186.0.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f7:aa:1f:16:d5:e3:ed:3d:b8:9c:30:9d:b5:8c:e2:75:15:f7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Nov 26 19:06:54 2024 GMT
            Not After : Nov 25 19:11:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:5a:d9:ba:1e:30:91:ab:fd:3c:93:00:c2:
                    c7:20:79:c2:3a:cc:56:26:54:37:04:6f:90:0d:ae:
                    43:20:b1:cf:87:65:3b:dd:57:54:f8:36:14:5b:6d:
                    42:4d:66:fe:47:d4:b7:b9:a4:2d:41:35:55:71:12:
                    2c:35:74:8f:58:7c:fa:e0:24:c1:b2:f7:30:76:a1:
                    a1:1d:3c:68:ff:40:de:e3:7b:8f:8f:d3:97:6e:f7:
                    1a:69:bb:d1:bd:c6:27:34:5b:39:63:78:8e:c8:65:
                    8b:4c:d7:b1:53:e2:fb:20:53:04:b1:94:ec:cd:7d:
                    82:bd:cc:f1:c7:81:6e:da:a9:b1:a8:0a:8c:7c:f4:
                    b6:fb:07:4a:5c:d8:e8:da:86:9c:84:57:39:65:a2:
                    28:72:c7:69:2a:bc:64:9c:45:6c:dd:3b:20:d6:44:
                    29:1f:ec:ca:5f:92:5f:cd:14:79:89:f5:79:c8:8d:
                    4f:26:d8:c2:77:1a:ab:b8:03:07:28:fa:b4:ef:d0:
                    da:c5:aa:04:bf:33:0e:2c:31:8a:b8:de:d7:07:ab:
                    ef:1f:fd:90:fb:92:e6:a3:36:10:5e:d3:5f:e6:d6:
                    4d:40:01:87:31:ae:32:b4:25:d3:84:86:2f:47:f6:
                    72:97:f6:19:2d:12:a7:c0:ec:ed:bc:b6:27:e8:ed:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:58:49:91:20:7B:9D:FE:EE:86:6F:D7:DE:CD:6E:80:54:94:8F:A5
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32322d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:05:16:18:34:25:15:e0:36:30:27:1b:14:a2:be:50:8a:2c:
         ab:5d:30:e5:ad:96:d0:c1:f6:c5:e2:2b:61:d2:e0:53:1c:11:
         76:06:93:f5:f6:41:e6:a1:64:a7:1c:17:16:d9:21:62:49:25:
         dd:24:84:a3:c0:51:f2:fa:bb:06:ab:eb:09:06:af:24:3c:a3:
         0b:e0:60:b8:8b:d8:07:8e:13:e0:f0:e0:c6:29:b3:00:66:83:
         80:92:fa:24:4c:68:38:40:88:49:62:4c:fd:5d:cd:50:ff:aa:
         95:9b:a3:39:00:60:1a:27:e8:ff:6e:c7:43:28:e4:32:36:0c:
         95:f7:52:5d:66:59:8c:65:d5:09:3c:83:19:fe:06:ba:4e:90:
         6a:d6:87:1a:22:2c:af:f5:4f:7f:2e:d4:84:10:a8:ed:0b:1f:
         5a:1e:0b:e3:77:0f:0f:fe:00:70:37:7b:cd:16:b6:7d:b9:eb:
         a2:2d:bd:cf:7e:12:66:ff:5d:55:f7:bf:28:d7:0f:aa:39:1d:
         1d:b8:17:a1:2d:3a:08:c5:0e:1a:8a:31:7d:9f:26:8a:65:b7:
         0e:c0:27:f2:bd:a4:00:97:61:8f:74:8b:c9:8c:b1:78:d0:cf:
         0a:01:48:55:2e:f4:12:ad:58:dd:d8:dd:64:fa:42:b7:55:d9:
         06:13:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:52:29 2025 by rpki-client