Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/34352e352e3131322e302f32322d3234203d3e20323636303934.roa
File:                     34352e352e3131322e302f32322d3234203d3e20323636303934.roa (raw, json)
Hash identifier:          FG5YEqlYx8IqFZxqv1nrzOmi4vNzJ6qV0GgInXRmxSk=
Subject key identifier:   8B:C2:EC:13:96:7B:41:E0:EA:AF:42:29:DC:A3:22:FF:F6:71:73:7C
Certificate issuer:       /CN=4A152848A0A73932BBFCD8A6794FD8534F237DD6
Certificate serial:       63C6D38CD31F2AA1BBFBE7323D22C7775E6A81F1
Authority key identifier: 4A:15:28:48:A0:A7:39:32:BB:FC:D8:A6:79:4F:D8:53:4F:23:7D:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A152848A0A73932BBFCD8A6794FD8534F237DD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/34352e352e3131322e302f32322d3234203d3e20323636303934.roa
Signing time:             Tue 17 Dec 2024 18:48:42 +0000
ROA not before:           Tue 17 Dec 2024 18:43:42 +0000
ROA not after:            Tue 16 Dec 2025 18:48:42 +0000
asID:                     266094
IP address blocks:        45.5.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c6:d3:8c:d3:1f:2a:a1:bb:fb:e7:32:3d:22:c7:77:5e:6a:81:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A152848A0A73932BBFCD8A6794FD8534F237DD6
        Validity
            Not Before: Dec 17 18:43:42 2024 GMT
            Not After : Dec 16 18:48:42 2025 GMT
        Subject: CN=8BC2EC13967B41E0EAAF4229DCA322FFF671737C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:6b:76:4f:a0:91:ed:6c:da:79:e5:fd:35:
                    36:c4:11:f5:4a:59:e3:1b:b1:7f:3e:58:e2:db:3d:
                    56:f5:45:7e:93:00:d4:ae:a7:65:d5:0b:f5:f3:08:
                    62:6f:5c:c2:d6:ba:9b:fc:8a:64:49:87:af:70:85:
                    3f:09:ac:ea:2c:bd:8c:eb:9f:f5:b2:a1:67:e8:97:
                    eb:1f:4a:5a:bc:17:78:a9:a2:27:76:9e:02:4a:fd:
                    3a:19:e7:0d:9e:e8:48:ef:a1:ba:a6:b4:35:31:b4:
                    60:18:af:f7:d0:b1:87:0c:f9:f3:f4:8b:32:0f:23:
                    6e:bb:dc:c4:8d:c9:3e:a4:88:07:64:91:fe:22:5b:
                    96:a7:a4:ac:fc:bc:d1:56:9c:3c:81:3b:81:ae:59:
                    1d:a1:e0:74:69:49:c9:db:73:03:68:ec:33:55:8c:
                    6f:68:d4:bf:81:ae:fb:50:4c:fc:cf:bd:5d:70:e8:
                    32:6f:bb:83:05:0f:b7:67:58:0c:77:be:80:59:20:
                    8c:d7:16:f9:cb:08:cd:af:1f:83:90:51:e7:5d:06:
                    52:4b:4f:9f:ec:3e:1f:a6:64:85:ac:4b:37:99:3d:
                    be:87:f7:1b:c7:5d:26:13:6e:5c:2d:00:67:ce:e9:
                    3f:24:4a:ef:a4:28:00:33:1d:a1:1d:b3:c5:a8:39:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C2:EC:13:96:7B:41:E0:EA:AF:42:29:DC:A3:22:FF:F6:71:73:7C
            X509v3 Authority Key Identifier:
                keyid:4A:15:28:48:A0:A7:39:32:BB:FC:D8:A6:79:4F:D8:53:4F:23:7D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/4A152848A0A73932BBFCD8A6794FD8534F237DD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A152848A0A73932BBFCD8A6794FD8534F237DD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/34352e352e3131322e302f32322d3234203d3e20323636303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:a6:97:ff:86:98:08:76:77:92:f5:17:43:04:3e:69:48:00:
         c8:46:6a:36:be:5e:66:5b:67:01:3f:29:54:c5:15:8c:90:ea:
         09:b2:83:78:f8:98:32:02:db:19:d0:8f:d7:7c:eb:38:d9:c7:
         9b:04:59:d9:88:44:cf:0e:95:aa:6e:8a:07:99:6d:04:a8:77:
         69:66:58:92:c2:55:7c:ca:b2:6a:5d:a6:75:a5:6c:e0:1a:f6:
         07:8b:74:03:1e:96:c2:55:ee:82:d8:ec:de:0a:05:41:df:c3:
         9b:05:ac:91:87:f8:c3:3c:7e:c4:40:70:61:2b:15:40:a3:8a:
         1c:79:c1:7e:84:5f:a4:64:61:df:d1:17:32:a0:fb:6f:a1:1e:
         6c:47:9a:4c:26:33:e7:a8:60:1b:83:21:be:d9:bc:58:9b:fc:
         10:6b:dc:b7:9f:58:67:95:f4:d2:37:b6:f6:b3:7f:2c:62:76:
         ad:8d:2e:38:42:83:bf:c1:63:fe:6e:72:8a:9a:ca:45:36:c9:
         77:7f:a1:aa:71:9c:04:f0:61:55:30:d6:37:24:7d:79:98:b1:
         85:61:0b:43:6a:83:50:3e:22:83:30:81:c3:86:eb:2c:97:a4:
         8c:20:52:37:a1:30:94:1c:98:75:f7:d0:3d:2a:2b:4f:c1:5a:
         31:20:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:45 2025 by rpki-client