Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/34352e3138332e3133322e302f32322d3232203d3e20323637353031.roa
File:                     34352e3138332e3133322e302f32322d3232203d3e20323637353031.roa (raw, json)
Hash identifier:          whbJOHwvs12dRJMFP+TeWCNH9HH+UdY7BwsO6Zq0r+o=
Subject key identifier:   85:0B:31:DA:7A:9B:32:0B:00:FF:F6:8C:A9:60:97:37:2B:B3:F6:E5
Certificate issuer:       /CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
Certificate serial:       2E72E774545F4A527380CAB45B31C48356F5D61E
Authority key identifier: C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/34352e3138332e3133322e302f32322d3232203d3e20323637353031.roa
Signing time:             Tue 03 Dec 2024 10:28:20 +0000
ROA not before:           Tue 03 Dec 2024 10:23:20 +0000
ROA not after:            Tue 02 Dec 2025 10:28:20 +0000
asID:                     267501
IP address blocks:        45.183.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:72:e7:74:54:5f:4a:52:73:80:ca:b4:5b:31:c4:83:56:f5:d6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
        Validity
            Not Before: Dec  3 10:23:20 2024 GMT
            Not After : Dec  2 10:28:20 2025 GMT
        Subject: CN=850B31DA7A9B320B00FFF68CA96097372BB3F6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:1b:72:3a:ae:b6:b2:4e:71:a2:fb:2d:f2:
                    29:fd:70:eb:23:ff:c6:8c:f8:06:98:f4:62:ec:df:
                    11:2a:0b:bb:50:5c:36:b9:f3:43:67:85:e2:3e:c0:
                    54:7e:b8:1b:18:d1:8a:a8:e4:fd:0c:a3:41:00:c5:
                    74:96:5b:7f:d8:1c:77:f3:2e:4d:04:07:e2:15:0e:
                    ec:4d:67:35:8a:ed:7c:f6:98:34:50:fc:fb:82:ef:
                    76:48:c6:8b:86:b1:50:65:68:fc:60:6c:0f:77:16:
                    20:80:c1:ec:56:17:d6:06:0e:de:97:b7:ac:5f:d4:
                    1d:04:94:4c:97:c0:d1:a0:64:19:04:dd:cc:db:4e:
                    15:23:ac:71:03:80:dd:c1:eb:3b:27:0a:58:0a:4c:
                    eb:64:bb:01:e6:24:07:a5:0d:61:93:d7:60:d1:60:
                    87:92:58:38:eb:34:29:a8:05:be:47:04:c4:de:d9:
                    ec:5b:29:4f:e6:81:88:88:ec:c4:1b:88:3a:e8:ec:
                    59:6a:45:98:4f:a2:55:63:87:fb:a9:ac:21:3d:ca:
                    c7:07:d5:b6:0b:cf:a2:10:d1:de:61:d5:3c:24:54:
                    cd:27:59:29:b7:49:6a:1f:9c:4d:4d:e3:9c:e1:20:
                    09:bd:bb:06:88:37:2b:4d:a5:5e:33:d1:8c:76:e9:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0B:31:DA:7A:9B:32:0B:00:FF:F6:8C:A9:60:97:37:2B:B3:F6:E5
            X509v3 Authority Key Identifier:
                keyid:C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/34352e3138332e3133322e302f32322d3232203d3e20323637353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:1d:cc:52:58:1e:53:b3:a2:c4:68:2c:36:24:c0:72:08:1c:
         70:9a:6a:f9:58:5d:6b:66:57:1a:53:de:74:4c:6b:5e:ab:ec:
         56:58:d2:94:3f:14:8f:1b:1f:a9:c7:38:40:4a:35:d9:eb:6e:
         2d:09:ec:37:91:fe:3d:ec:84:b7:12:08:5e:12:e9:77:df:98:
         c7:cf:ea:56:d4:d0:d2:28:92:96:88:51:9e:c4:d0:09:ed:7f:
         7c:fa:1c:79:aa:2c:ec:00:62:0e:24:16:14:90:ab:5a:6b:44:
         04:ab:d0:5d:4b:3e:c2:31:d5:9a:69:18:09:0e:e3:eb:f9:04:
         9d:d1:bc:c1:e3:e5:5a:4c:4c:8c:4a:41:f7:a6:dc:ef:37:bf:
         4e:63:aa:d4:37:0c:a3:e1:9d:eb:93:e4:1a:42:1e:aa:52:5f:
         c9:77:d3:50:cc:1b:30:9b:26:c7:ae:86:aa:bf:d4:94:5a:34:
         20:92:52:0c:be:2e:aa:6b:95:cb:c9:88:97:10:d3:55:20:bc:
         c4:3a:6a:ed:0b:fe:44:54:6e:54:cc:0c:4d:d3:cf:61:da:dc:
         0d:14:fc:c7:4e:13:97:9a:a6:b9:8d:be:af:d4:96:a1:cf:2a:
         d5:87:64:bc:c9:f0:b6:7e:a9:cc:38:60:f4:21:a0:46:6b:53:
         78:85:fa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:04:17 2025 by rpki-client