Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e35302e302f32332d3233203d3e20323638373933.roa
File:                     34352e3137332e35302e302f32332d3233203d3e20323638373933.roa (raw, json)
Hash identifier:          BuHiIcpJ7UHfS2WeNJILtPKRPzyg0kv8IeXFG4vzHhs=
Subject key identifier:   38:82:B7:B7:F3:1C:C5:24:DD:4B:F9:ED:C8:EE:94:24:44:CF:10:74
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       57B80F95E510D5868C069A8A2E555B749240A149
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e35302e302f32332d3233203d3e20323638373933.roa
Signing time:             Mon 13 Jan 2025 18:55:00 +0000
ROA not before:           Mon 13 Jan 2025 18:50:00 +0000
ROA not after:            Mon 12 Jan 2026 18:55:00 +0000
asID:                     268793
IP address blocks:        45.173.50.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b8:0f:95:e5:10:d5:86:8c:06:9a:8a:2e:55:5b:74:92:40:a1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Jan 13 18:50:00 2025 GMT
            Not After : Jan 12 18:55:00 2026 GMT
        Subject: CN=3882B7B7F31CC524DD4BF9EDC8EE942444CF1074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:75:2e:aa:58:22:49:56:be:dc:ba:3a:01:
                    2d:28:42:aa:3f:0f:0e:08:79:d2:63:18:20:9a:d6:
                    39:8f:7b:16:5b:51:81:8d:20:6d:d0:73:93:9c:79:
                    bc:65:4f:98:8a:11:ad:dd:d5:3d:11:e1:74:99:59:
                    c2:00:7c:9a:e8:24:b5:77:93:85:6d:09:6c:2a:ee:
                    8f:06:a5:dc:64:37:28:b7:51:5e:38:8e:cc:a1:c5:
                    9d:97:07:45:7e:69:41:dd:40:24:ff:78:bc:3a:92:
                    ba:e4:85:ab:f4:a9:42:e3:69:76:2a:16:1d:18:ee:
                    c8:72:df:4c:2a:e0:b1:fc:16:4d:11:d5:6f:70:3f:
                    df:e0:39:87:b1:80:16:04:63:84:f0:4f:65:8f:01:
                    ba:79:23:f2:59:d3:1e:92:d7:f2:c3:84:b6:86:01:
                    9e:3e:d4:dd:78:ee:bb:13:70:c9:3b:ac:d5:d6:7b:
                    5b:e0:55:e7:e0:ae:84:5c:00:92:18:2a:ef:14:0a:
                    1b:80:fe:30:68:aa:d9:9f:17:56:01:27:54:3f:a1:
                    6f:7f:4d:2f:b9:0b:c8:6b:60:fd:93:7f:b8:9e:3c:
                    6c:2c:16:fc:c0:c4:ce:17:b9:73:70:ea:ed:40:72:
                    08:c7:31:8b:1c:9d:85:03:be:6e:d0:b0:13:af:a1:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:82:B7:B7:F3:1C:C5:24:DD:4B:F9:ED:C8:EE:94:24:44:CF:10:74
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e35302e302f32332d3233203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:64:00:86:cc:b8:6f:8a:52:c7:a8:ca:e5:33:73:1b:28:62:
         cc:08:ac:0a:30:9d:91:24:72:e9:4b:a0:3a:f4:fc:0c:18:08:
         e7:36:30:7d:5a:16:56:1f:cb:1d:e0:c9:86:03:d1:e9:87:ab:
         4d:66:20:b1:f8:ed:8e:16:dd:ac:6d:79:76:86:d5:3d:e7:24:
         e2:7d:2a:22:d8:da:5d:c5:6f:07:f9:3e:c6:a5:59:67:ee:38:
         ec:eb:35:bf:11:f7:27:2a:f3:c0:92:ef:2d:c9:b6:69:ff:93:
         93:83:61:d6:65:d9:cf:7b:38:7e:0b:16:a5:ba:be:1d:c3:f1:
         83:d1:29:e1:41:b4:90:a1:fd:6e:bd:87:af:84:f4:e7:f6:58:
         95:55:7e:0f:f3:07:0b:75:99:cf:0e:92:2e:41:4b:cb:4e:a1:
         35:9e:16:92:e0:2f:d1:73:65:44:3b:d7:e0:43:d7:de:91:0f:
         92:6d:d0:6b:2e:e4:5d:f7:5a:d1:b7:65:58:82:a0:cc:95:f7:
         97:b3:ca:d2:25:aa:99:cf:78:34:bf:7a:85:a3:5b:0e:c3:de:
         e0:d6:25:c1:bd:4a:99:87:f5:74:3a:cd:1d:b5:a3:9e:23:f6:
         0b:3b:5f:75:54:72:fb:e0:26:82:44:2d:22:08:58:f9:76:7b:
         d4:1e:b3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:09:12 2025 by rpki-client