Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/34352e3138352e3136382e302f32322d3234203d3e20323639333837.roa
File:                     34352e3138352e3136382e302f32322d3234203d3e20323639333837.roa (raw, json)
Hash identifier:          IyfGitpg7vqjRZWWtNvHdl5rjclfLvfgqcTu3rC8/1E=
Subject key identifier:   94:8E:45:D0:6F:8D:03:C7:EA:97:7D:79:90:1A:AA:85:4E:48:11:A6
Certificate issuer:       /CN=C7B317212DB90FCD08BA0577C6C41F8E21F91280
Certificate serial:       70D9131EAAE9EEDB200416E311E1C5788B63B3EE
Authority key identifier: C7:B3:17:21:2D:B9:0F:CD:08:BA:05:77:C6:C4:1F:8E:21:F9:12:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/34352e3138352e3136382e302f32322d3234203d3e20323639333837.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     269387
IP address blocks:        45.185.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d9:13:1e:aa:e9:ee:db:20:04:16:e3:11:e1:c5:78:8b:63:b3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7B317212DB90FCD08BA0577C6C41F8E21F91280
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:f4:56:d8:9a:67:a4:e7:c7:ef:05:a9:9d:
                    cc:69:77:66:a0:a7:1c:bf:21:3d:52:95:c5:48:f2:
                    63:eb:95:8c:ee:4c:f4:b3:0f:a0:77:80:d7:7f:04:
                    04:bd:a2:75:a7:6e:ef:f5:9c:13:87:30:0a:6b:8e:
                    bc:26:d6:66:54:83:a9:5d:f4:d3:fd:2d:a0:3f:0e:
                    99:46:22:bc:3d:70:c0:37:6f:43:e3:0e:95:04:e6:
                    28:f5:4f:2a:4a:21:44:9b:60:39:91:8d:ce:3c:3e:
                    bc:e5:40:f3:4c:f8:23:63:bd:30:6e:77:ca:f4:34:
                    a3:f5:88:37:6f:1d:20:2e:c3:fb:9e:01:f6:44:0d:
                    0c:ea:f9:02:a4:59:dd:5e:05:00:af:b8:14:f9:a6:
                    d4:58:4f:33:48:c5:73:a5:5c:a2:b3:ab:69:0b:2e:
                    db:d8:df:01:9b:d6:6d:3e:99:00:13:f5:45:c2:97:
                    ff:05:6c:e7:fb:9b:7b:8a:58:5e:0f:dd:82:76:f3:
                    f8:4d:c7:d5:2d:36:c0:a6:cb:5a:36:cc:9f:83:eb:
                    d7:fb:f0:6c:93:44:ad:07:af:c9:f1:25:43:98:21:
                    9d:54:d6:e6:cb:81:a6:02:e7:08:b9:57:9e:2d:c0:
                    24:2d:bb:cb:ad:c3:ec:ed:63:99:78:7e:6f:ba:b8:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8E:45:D0:6F:8D:03:C7:EA:97:7D:79:90:1A:AA:85:4E:48:11:A6
            X509v3 Authority Key Identifier:
                keyid:C7:B3:17:21:2D:B9:0F:CD:08:BA:05:77:C6:C4:1F:8E:21:F9:12:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7B317212DB90FCD08BA0577C6C41F8E21F91280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/1/34352e3138352e3136382e302f32322d3234203d3e20323639333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:98:f0:12:6e:94:13:c0:55:9e:04:7d:20:c4:96:7f:a9:0a:
         d4:c9:9c:02:48:77:82:4e:44:bc:a2:7b:90:57:8f:38:40:c6:
         6d:b1:76:50:2e:c2:a6:82:ab:21:f8:b2:a8:52:67:71:9c:c5:
         fe:9e:eb:3a:b7:ac:7c:39:49:93:73:25:27:d8:00:e7:1e:72:
         59:64:24:70:c3:0f:1a:12:38:94:31:6c:3d:f6:25:c5:2b:7c:
         3c:04:48:30:f2:41:25:8d:fd:f2:45:a0:0b:fd:92:fb:72:0c:
         b9:98:af:34:36:59:6f:c8:31:74:71:3e:bc:82:8b:7e:ff:36:
         df:8d:95:cc:f0:07:14:98:c5:2c:be:40:6d:15:13:b5:ba:ee:
         aa:2f:d9:27:ca:c3:30:49:e1:fb:7f:d1:a6:86:21:ca:60:a8:
         78:07:c5:6f:33:8d:98:99:ef:94:82:cd:4d:53:d5:23:1b:bd:
         13:41:7b:bd:0a:ff:2d:b8:d4:b1:db:bb:23:8f:0d:50:54:4b:
         31:bf:5d:08:e7:63:cd:57:60:de:3f:36:48:9e:2c:f3:98:00:
         59:d9:27:54:29:86:8a:1b:46:51:8f:5b:c6:79:84:13:c8:1a:
         65:92:96:bb:78:0f:db:f5:3f:72:5a:28:ad:9b:e3:75:58:76:
         0d:2c:70:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:29:06 2025 by rpki-client