Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/34352e3233322e3139362e302f32322d3332203d3e20323637323739.roa
File:                     34352e3233322e3139362e302f32322d3332203d3e20323637323739.roa (raw, json)
Hash identifier:          A+QRMQ/+6I0w603+Fjf0wYWrJiaGzon4RuL9x4MeoUA=
Subject key identifier:   89:F5:40:A1:9F:96:C9:FE:89:26:4A:D5:DF:8A:24:96:B3:81:82:E0
Certificate issuer:       /CN=0F538A055BDE468027F0DC85B799FCB986F9AB96
Certificate serial:       1A5657940080BDAC190D829762165347FC4C06E0
Authority key identifier: 0F:53:8A:05:5B:DE:46:80:27:F0:DC:85:B7:99:FC:B9:86:F9:AB:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F538A055BDE468027F0DC85B799FCB986F9AB96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/34352e3233322e3139362e302f32322d3332203d3e20323637323739.roa
Signing time:             Mon 17 Feb 2025 17:33:18 +0000
ROA not before:           Mon 17 Feb 2025 17:28:18 +0000
ROA not after:            Mon 16 Feb 2026 17:33:18 +0000
asID:                     267279
IP address blocks:        45.232.196.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:56:57:94:00:80:bd:ac:19:0d:82:97:62:16:53:47:fc:4c:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F538A055BDE468027F0DC85B799FCB986F9AB96
        Validity
            Not Before: Feb 17 17:28:18 2025 GMT
            Not After : Feb 16 17:33:18 2026 GMT
        Subject: CN=89F540A19F96C9FE89264AD5DF8A2496B38182E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:8d:4e:ac:40:fe:a3:d6:aa:44:d5:ed:6d:
                    2c:df:b6:87:df:e1:e3:ef:75:62:5f:20:04:10:57:
                    56:c0:d8:1c:91:11:66:f3:ae:ff:9c:4d:fa:da:3c:
                    05:4b:b8:c0:a5:1e:37:00:bf:e1:63:bc:f4:03:da:
                    6b:7d:58:20:23:1c:c2:d0:23:34:b7:60:da:38:8a:
                    3a:8e:a0:1f:8c:b7:ea:e6:e0:32:1f:53:42:3c:b3:
                    04:ef:43:dd:82:8c:3b:80:0b:3e:32:be:a9:cc:ca:
                    31:bb:29:a4:ba:a4:c2:cf:7a:c4:38:1a:0f:3f:41:
                    6a:d8:c5:65:72:12:12:47:d5:03:df:48:34:53:e2:
                    79:0d:04:5e:79:ad:cc:e1:19:1c:d2:55:fb:f2:6b:
                    45:c9:e5:aa:64:c6:85:93:a4:00:c0:14:4d:10:89:
                    20:84:12:32:80:bd:77:0c:2b:fc:70:c6:a4:8c:09:
                    5c:05:45:48:d6:65:95:3e:55:9d:c3:fa:bf:9e:e4:
                    a3:7d:86:34:f5:71:08:f7:40:b3:a5:49:c5:72:f6:
                    b6:7f:d5:9c:51:45:92:78:5d:e3:b3:10:a1:24:f3:
                    c2:04:30:c5:47:40:04:73:90:dc:49:bb:b0:4e:66:
                    be:db:8a:8c:cb:f1:13:26:40:23:8e:a2:cb:3c:09:
                    60:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F5:40:A1:9F:96:C9:FE:89:26:4A:D5:DF:8A:24:96:B3:81:82:E0
            X509v3 Authority Key Identifier:
                keyid:0F:53:8A:05:5B:DE:46:80:27:F0:DC:85:B7:99:FC:B9:86:F9:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/0F538A055BDE468027F0DC85B799FCB986F9AB96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F538A055BDE468027F0DC85B799FCB986F9AB96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/34352e3233322e3139362e302f32322d3332203d3e20323637323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:a1:a9:7f:fd:f6:9d:d8:d0:54:0a:f7:ff:63:d1:75:dd:c9:
         ef:75:ed:3c:31:b3:58:9c:71:51:93:90:48:85:a0:63:aa:1f:
         bd:8b:5a:2b:72:57:3b:8e:53:4f:aa:e0:c8:08:60:6f:fd:1e:
         d1:7e:43:d8:d1:6f:27:20:76:c4:0d:10:fc:7f:ce:f5:7f:2e:
         5a:ed:a0:c5:eb:45:4b:00:ec:5e:2e:e1:12:de:e1:49:e3:c6:
         44:7a:64:dd:e9:49:cd:6c:2c:10:84:23:ea:da:17:db:ef:72:
         49:de:25:40:c8:0c:52:35:24:e3:57:92:55:7c:38:58:20:be:
         22:8c:d7:0b:13:22:d4:d0:23:2e:5f:74:9d:0e:b2:58:29:da:
         c8:b2:66:65:8c:b4:32:d0:e3:1b:74:ee:a0:24:c8:d5:69:5d:
         a8:ef:3b:23:1c:0a:2b:81:fd:e9:42:da:94:14:d3:82:72:17:
         75:ab:2e:5d:cb:f9:a5:f0:2d:1e:80:11:23:05:0f:48:3e:94:
         64:c4:ef:8e:96:3b:6c:5e:f1:c3:db:6a:f8:6d:dc:ed:bb:3f:
         5c:46:e8:63:51:0d:49:85:f1:d7:c4:48:4f:33:89:fa:63:c9:
         cf:c0:f9:2c:5e:29:d2:ff:54:5e:04:2e:23:62:dd:bb:d7:04:
         fc:c1:71:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:45 2025 by rpki-client