Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/34352e3138332e3133322e302f32322d3234203d3e20323637353031.roa
File:                     34352e3138332e3133322e302f32322d3234203d3e20323637353031.roa (raw, json)
Hash identifier:          x22Sqd8tyZako73yAbdOsOV53LyvnF6DIgj2zLzcjX8=
Subject key identifier:   C7:81:78:77:70:64:B6:01:ED:29:BD:F6:48:37:84:B9:FE:A6:3A:09
Certificate issuer:       /CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
Certificate serial:       4B6ED82BE49C56842F95C3F7B6D722D4193C59A3
Authority key identifier: C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/34352e3138332e3133322e302f32322d3234203d3e20323637353031.roa
Signing time:             Tue 03 Dec 2024 14:12:24 +0000
ROA not before:           Tue 03 Dec 2024 14:07:24 +0000
ROA not after:            Tue 02 Dec 2025 14:12:24 +0000
asID:                     267501
IP address blocks:        45.183.132.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6e:d8:2b:e4:9c:56:84:2f:95:c3:f7:b6:d7:22:d4:19:3c:59:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
        Validity
            Not Before: Dec  3 14:07:24 2024 GMT
            Not After : Dec  2 14:12:24 2025 GMT
        Subject: CN=C78178777064B601ED29BDF6483784B9FEA63A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:de:4e:f4:98:c2:c5:6e:44:99:8f:93:ba:
                    00:6b:7d:41:f4:88:4a:15:4e:21:48:03:23:e7:b9:
                    96:57:72:a4:66:99:db:d0:1e:58:f5:3f:c5:b2:55:
                    81:1c:fc:fe:15:81:21:74:11:7f:60:7a:c5:44:18:
                    28:2f:aa:91:d6:55:c1:bd:cb:21:e6:9f:46:f5:f8:
                    03:36:2e:0a:b3:2e:c8:79:a9:48:cc:61:8d:1a:8c:
                    e3:6c:16:1d:15:31:d7:aa:04:99:0f:26:bf:c0:1c:
                    04:2f:75:62:cb:5f:92:1d:fb:b5:b3:96:76:76:83:
                    3f:0a:e1:e1:9d:f0:81:c9:ee:de:d8:f1:7e:41:73:
                    5e:e6:7d:f7:6a:ab:42:84:2c:6a:dc:71:3b:72:9d:
                    25:0f:26:ba:ef:49:9a:7b:c9:a7:5d:02:75:db:6d:
                    78:14:75:03:67:89:ec:6e:fc:98:20:f1:00:8f:0b:
                    52:66:f2:d4:4d:ca:b6:de:62:5c:bf:b9:98:4c:f9:
                    ad:2e:e8:30:98:83:9b:a4:48:fe:e7:44:ec:96:0e:
                    6b:8e:ee:e2:a3:de:b7:43:23:3c:f5:08:82:7e:bb:
                    17:d2:a4:d8:81:8b:d7:a9:cf:b1:0c:7a:4a:7a:53:
                    a2:28:26:15:10:05:92:46:41:92:be:93:34:61:16:
                    1c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:81:78:77:70:64:B6:01:ED:29:BD:F6:48:37:84:B9:FE:A6:3A:09
            X509v3 Authority Key Identifier:
                keyid:C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/34352e3138332e3133322e302f32322d3234203d3e20323637353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:fd:ac:e0:50:2e:d8:ab:b2:1a:a5:f7:12:3e:42:1f:3b:77:
         99:78:9a:db:cf:62:89:45:0d:7b:8f:2a:ac:f5:2f:83:c9:2a:
         92:65:87:f4:b3:2e:bd:9c:97:6a:5f:99:05:d8:51:c9:6b:08:
         a1:13:2d:d9:1c:f4:a5:eb:ca:07:2b:22:02:bb:d6:64:71:f2:
         ba:75:2b:9d:dc:68:89:77:a5:49:13:42:07:19:53:1d:9e:b8:
         8a:bb:e9:ec:99:38:20:fb:b9:d1:d5:f0:ff:6c:f7:c2:6b:78:
         34:7c:70:99:c6:85:eb:86:7c:40:f4:50:d3:90:a7:85:d7:c3:
         7a:52:64:37:af:17:93:19:12:02:05:31:fd:3a:6e:c4:b7:18:
         17:71:44:b8:61:e3:3a:23:bc:e2:71:65:dd:7d:be:b7:2e:99:
         7a:59:be:fe:2d:e6:49:13:29:5e:2e:65:29:8c:4c:fe:01:5f:
         70:37:f3:0e:24:c1:01:26:f2:70:21:49:8d:9f:c7:7c:b5:a7:
         2b:28:d3:50:d1:bd:30:42:56:9c:bd:50:f9:3a:c6:2e:4c:4b:
         f8:8f:10:87:fe:b7:c9:49:aa:2e:2d:18:3f:eb:0e:2d:cc:93:
         f5:2d:16:76:fb:ab:c7:24:3b:ed:d6:22:0e:7c:99:df:62:5d:
         98:59:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:35:20 2025 by rpki-client