Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34382e302f32342d3234203d3e20323638373933.roa
File:                     34352e3137332e34382e302f32342d3234203d3e20323638373933.roa (raw, json)
Hash identifier:          i1YGC5uv7qDilxJy56sH/DADbJgKktsJUWslUM3whO0=
Subject key identifier:   AC:0A:93:43:B1:10:B6:3F:6F:45:42:2D:9F:3A:22:19:2C:EF:93:C3
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       7B27293726A1DB653B99F0299FC755485AA0A607
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34382e302f32342d3234203d3e20323638373933.roa
Signing time:             Tue 17 Dec 2024 16:00:19 +0000
ROA not before:           Tue 17 Dec 2024 15:55:19 +0000
ROA not after:            Tue 16 Dec 2025 16:00:19 +0000
asID:                     268793
IP address blocks:        45.173.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:27:29:37:26:a1:db:65:3b:99:f0:29:9f:c7:55:48:5a:a0:a6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Dec 17 15:55:19 2024 GMT
            Not After : Dec 16 16:00:19 2025 GMT
        Subject: CN=AC0A9343B110B63F6F45422D9F3A22192CEF93C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:f1:d8:68:c1:42:82:e6:82:88:e6:f7:56:
                    89:15:eb:cf:20:48:d5:24:9b:38:58:19:06:8d:5c:
                    f5:7d:5b:dd:f6:df:8c:1f:78:e8:41:49:03:32:6a:
                    05:f7:ff:f9:24:6f:ec:d1:44:8d:95:70:59:3c:d2:
                    88:a2:09:71:cd:02:c5:9f:68:06:df:02:94:8b:7d:
                    c1:be:45:50:3c:c9:2b:6e:85:10:52:36:03:ee:fc:
                    82:84:f0:d8:fc:c4:d1:d6:85:f0:03:b1:41:96:06:
                    5a:6c:41:0d:25:9c:bc:e4:0a:dc:e6:d4:8f:6e:40:
                    64:e9:61:bd:c0:60:87:60:dc:ef:1c:3a:03:f2:2e:
                    7e:c5:a2:ea:01:17:83:ce:12:af:5e:a4:bc:2d:e8:
                    37:bf:e6:82:f7:52:21:72:99:87:ba:f9:79:00:e1:
                    e0:8d:9e:7e:de:3e:d5:d8:a9:50:ec:63:4b:01:5b:
                    89:24:ee:7c:a9:90:9a:11:80:6a:f3:e0:91:14:c2:
                    c5:af:29:59:29:5a:de:1e:31:c5:3b:ab:bf:f5:1d:
                    f1:87:8c:8b:6c:f8:29:3c:da:0f:84:cf:87:61:f6:
                    bc:94:a8:58:17:73:ae:ca:b0:2d:2a:d3:1f:34:cf:
                    3a:0f:75:4f:a7:1a:5e:8f:41:c0:18:94:1d:0c:d8:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0A:93:43:B1:10:B6:3F:6F:45:42:2D:9F:3A:22:19:2C:EF:93:C3
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34382e302f32342d3234203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:8f:e8:53:b5:77:47:e5:f2:52:3c:2e:39:ef:98:5b:9f:e2:
         d1:b5:1f:e2:25:ec:f7:ff:e6:b6:53:14:64:34:67:78:5e:c8:
         bf:58:94:09:88:8a:b1:94:8d:7c:09:03:e4:ba:83:e9:72:5c:
         28:3b:27:02:fd:46:48:b3:57:34:4c:09:01:d9:65:c9:28:7b:
         63:d0:05:32:f9:b0:fa:9d:5c:3d:34:42:c9:43:78:02:53:89:
         fb:55:72:21:c3:b4:a8:c0:5d:ec:25:65:f8:36:a9:34:3f:f1:
         67:92:1b:cb:49:89:83:83:84:34:5b:d3:79:f1:84:64:a1:81:
         a1:55:3a:dd:88:7f:c1:00:62:a6:89:76:10:79:bf:e1:28:15:
         0a:c1:9e:b3:37:0e:ff:be:46:87:93:71:e3:c8:aa:59:1d:21:
         ad:4a:09:6f:28:49:88:c6:9e:98:81:18:07:13:94:5a:40:da:
         fd:ff:bb:3e:86:14:7f:08:4f:62:28:bb:45:d5:41:e3:21:54:
         b4:90:d3:6b:a1:6b:29:b0:8f:89:00:82:fc:c7:83:f6:51:9f:
         24:39:89:ef:92:86:23:14:66:b6:ad:8d:0d:4d:26:88:ee:79:
         8c:f7:de:bb:fc:b0:00:24:f6:d8:0b:82:07:41:bf:ab:5e:cd:
         fb:07:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 21:58:09 2025 by rpki-client