Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/34352e3138302e38342e302f32322d3234203d3e20323639313339.roa
File:                     34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (raw, json)
Hash identifier:          jySJyY9nMaQG7UMWI0p3ckE9o6HbVEUcBaHE9eU8jt8=
Subject key identifier:   57:03:70:CA:2E:29:91:50:6C:93:7D:76:4E:C4:5A:20:B9:C6:E3:1E
Certificate issuer:       /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E
Certificate serial:       3B70C4AABE1E35D95C14F95C231F9400ECB5FBBD
Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/34352e3138302e38342e302f32322d3234203d3e20323639313339.roa
Signing time:             Thu 06 Mar 2025 01:40:30 +0000
ROA not before:           Thu 06 Mar 2025 01:35:30 +0000
ROA not after:            Thu 05 Mar 2026 01:40:30 +0000
asID:                     269139
IP address blocks:        45.180.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:70:c4:aa:be:1e:35:d9:5c:14:f9:5c:23:1f:94:00:ec:b5:fb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E
        Validity
            Not Before: Mar  6 01:35:30 2025 GMT
            Not After : Mar  5 01:40:30 2026 GMT
        Subject: CN=570370CA2E2991506C937D764EC45A20B9C6E31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:0e:c9:ae:2e:56:d2:84:b4:c6:74:61:cc:
                    a4:c5:cc:ea:a5:42:57:bb:b7:fc:fc:e1:d5:3e:e6:
                    55:43:ba:4b:24:6d:97:96:35:38:ee:b7:a8:c7:1a:
                    5a:fc:b1:47:0e:4a:41:ee:ae:d0:dc:2c:dd:07:17:
                    46:b9:0d:37:53:5e:4f:6c:d5:36:8d:5f:f2:e3:d5:
                    2e:39:af:2a:82:e5:01:1f:c9:16:8d:66:cc:10:d9:
                    12:e8:61:5e:0f:1a:fb:b5:e4:57:24:2c:de:8e:86:
                    7b:dc:a8:2e:03:97:10:59:9b:a9:50:60:ff:31:4c:
                    54:fe:7c:c8:b8:06:dc:04:7c:d3:b6:10:be:0a:62:
                    c7:cf:f8:48:0b:d4:a2:b5:45:b2:46:c1:48:3b:3c:
                    72:44:8e:ac:b3:79:b2:78:5d:c2:40:66:59:b4:7d:
                    f4:97:32:a2:59:4d:35:1c:56:04:a3:5d:95:97:56:
                    c1:27:50:c5:f8:df:7e:30:ea:50:94:75:d2:97:c6:
                    2b:51:7b:20:2a:93:55:1e:5e:16:d0:e0:4a:77:23:
                    32:1b:4d:59:29:e6:50:00:1a:64:f8:8a:4b:e8:65:
                    3e:22:f2:3d:10:c9:74:3b:ff:8b:32:4e:35:8e:b4:
                    6a:90:05:c8:a8:ff:db:06:6a:cd:96:44:87:10:df:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:03:70:CA:2E:29:91:50:6C:93:7D:76:4E:C4:5A:20:B9:C6:E3:1E
            X509v3 Authority Key Identifier:
                keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/34352e3138302e38342e302f32322d3234203d3e20323639313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:0c:5a:4c:d8:41:0c:df:35:c9:89:57:a7:ef:b3:6a:c8:07:
         9e:b0:9a:b3:d5:24:36:2d:f0:37:7d:e7:96:24:0e:56:b4:e4:
         7b:0b:ce:f3:bb:03:71:1a:d1:7b:0b:08:7d:d8:15:33:91:98:
         43:84:19:f7:f1:4b:58:7b:fe:85:09:f3:47:2e:c2:c7:22:ae:
         8f:7c:72:f5:52:74:90:b9:6c:6f:06:53:c8:77:6e:35:bb:3e:
         c7:16:07:77:54:aa:49:ff:4f:e7:26:6d:ce:2a:fa:30:25:14:
         69:17:58:92:3c:5c:c0:2b:71:9a:67:30:62:3c:e2:1a:c5:bc:
         3b:ae:e7:10:ca:2a:89:82:1e:52:12:8f:39:e2:2c:87:99:c8:
         82:0b:9d:eb:d8:7d:7f:72:3d:ed:47:a9:2e:ac:06:b6:55:13:
         75:90:95:b5:20:48:93:e2:35:6b:08:1e:39:f1:d2:1c:07:a4:
         78:45:c5:7e:61:d1:cd:b4:c2:f9:f1:ad:ce:5b:ad:3d:37:fe:
         a7:8f:12:b7:b3:f2:38:da:9e:d4:66:ae:ba:77:4b:8c:e7:2f:
         eb:7b:4b:9c:7a:5e:7c:98:0a:73:67:b1:a8:cb:c9:4b:a2:e5:
         49:25:81:66:da:01:e7:fe:00:2b:10:d3:ed:f3:6a:42:1a:a0:
         8c:68:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:55 2025 by rpki-client