Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/34352e3138372e39362e302f32322d3234203d3e20323639343632.roa
File:                     34352e3138372e39362e302f32322d3234203d3e20323639343632.roa (raw, json)
Hash identifier:          GviSFkcSpAkiMNgDIzLC1p+SGzY5OorXpd6a3CvdsFA=
Subject key identifier:   9C:E7:A7:56:6E:02:DE:E9:5C:6A:BA:F0:B9:4D:0E:FA:01:FF:2C:7F
Certificate issuer:       /CN=9E5498CF2BF865A6C6012312932A13ACCDC56CC1
Certificate serial:       6E82D8A965428106F523EACB2E867345FB84DBB2
Authority key identifier: 9E:54:98:CF:2B:F8:65:A6:C6:01:23:12:93:2A:13:AC:CD:C5:6C:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/34352e3138372e39362e302f32322d3234203d3e20323639343632.roa
Signing time:             Thu 06 Mar 2025 21:17:05 +0000
ROA not before:           Thu 06 Mar 2025 21:12:05 +0000
ROA not after:            Thu 05 Mar 2026 21:17:05 +0000
asID:                     269462
IP address blocks:        45.187.96.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:82:d8:a9:65:42:81:06:f5:23:ea:cb:2e:86:73:45:fb:84:db:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5498CF2BF865A6C6012312932A13ACCDC56CC1
        Validity
            Not Before: Mar  6 21:12:05 2025 GMT
            Not After : Mar  5 21:17:05 2026 GMT
        Subject: CN=9CE7A7566E02DEE95C6ABAF0B94D0EFA01FF2C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:39:a0:8d:da:bd:4d:e8:a3:35:9e:15:4d:
                    64:28:8f:56:74:f0:bb:1c:1f:be:f7:a2:87:37:c8:
                    c4:3b:2d:a3:25:71:c3:fd:63:94:7c:04:db:81:64:
                    35:17:0e:74:6b:fa:84:f2:6f:8c:09:68:5b:77:8c:
                    2f:fd:17:55:48:af:be:3f:54:b2:c8:41:47:58:a0:
                    30:7b:da:bb:25:71:ea:85:c4:50:f0:86:bb:1c:49:
                    37:d2:a4:88:ba:67:af:18:2d:fe:ff:a8:13:d3:2d:
                    31:7d:3b:39:2d:0c:97:f7:f9:a8:8d:4c:8c:e1:51:
                    dc:94:c0:76:6e:de:b2:44:9f:7c:6d:4c:0f:8f:7a:
                    c7:c6:4f:db:cb:5f:0c:07:ff:b8:be:5e:1c:ac:d6:
                    2e:9f:9f:37:72:6e:3c:f8:e5:df:46:49:eb:d2:65:
                    aa:3a:f6:f1:6c:14:1c:6a:37:9f:ff:52:11:d1:bd:
                    04:81:83:a6:42:af:97:db:64:3b:fb:9b:21:1a:7e:
                    84:f3:32:eb:ae:71:3d:47:5d:d1:8e:0c:68:a2:ee:
                    2f:c1:eb:59:82:34:f9:8a:21:db:70:5e:96:37:78:
                    85:8f:f7:8e:9c:57:ac:b2:20:bb:71:e4:d0:36:2d:
                    e8:29:ba:f3:0d:99:4b:c8:9d:78:1f:98:99:c5:03:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E7:A7:56:6E:02:DE:E9:5C:6A:BA:F0:B9:4D:0E:FA:01:FF:2C:7F
            X509v3 Authority Key Identifier:
                keyid:9E:54:98:CF:2B:F8:65:A6:C6:01:23:12:93:2A:13:AC:CD:C5:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/34352e3138372e39362e302f32322d3234203d3e20323639343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:8f:ce:d5:3e:37:e7:5d:9d:b3:83:6a:70:6f:c5:b1:28:a2:
         2d:db:27:0f:3d:0b:fb:ae:9b:f0:13:74:f4:c3:85:d6:70:6e:
         9e:f3:80:ce:cf:1b:55:a7:e9:ce:5b:f7:ab:0e:04:e0:87:88:
         d2:88:7d:f8:e7:74:15:b9:cd:bd:a6:63:8f:e3:dc:fa:6f:00:
         3e:71:7c:74:69:a7:e8:d6:b0:ef:0f:fb:a7:f2:22:0e:9f:e5:
         68:68:c7:7f:fe:80:a7:3e:a5:1a:da:84:53:e1:6c:0f:f9:e8:
         f4:0a:a2:9e:a3:ce:47:1b:e3:76:be:8f:6d:94:50:c1:49:6e:
         86:83:b3:85:e7:aa:9c:da:48:05:2e:f4:5c:e4:05:87:3b:3a:
         6b:71:49:d4:b2:23:08:bd:30:75:7c:c2:84:ad:1f:1e:5b:18:
         8d:5d:51:df:74:33:e9:a6:f4:d5:bd:c4:30:37:fa:77:2f:ce:
         49:79:e9:6f:0d:80:ee:38:27:f8:cf:58:3a:11:a1:21:c5:e7:
         bf:4e:48:eb:ed:69:d2:d1:97:5e:c7:96:05:d8:5f:ac:67:4f:
         03:29:4a:ab:48:8e:4a:22:ad:7b:de:8e:8b:f1:4e:a8:eb:0e:
         97:45:6f:ed:28:14:fa:61:36:bc:a7:b3:ed:5e:07:2d:6e:d3:
         a9:36:ba:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:54:59 2025 by rpki-client