Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa
File:                     34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa (raw, json)
Hash identifier:          1sff9NdDM8ae6LeFzTUU8LdWcZO6befRji+jsbyJSF8=
Subject key identifier:   82:8A:E0:1B:35:A6:DA:8C:FC:32:62:A6:EF:7F:02:02:00:12:9B:06
Certificate issuer:       /CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
Certificate serial:       01BAA573986CEBF1695EDA8BF9C4B20054AD3EFD
Authority key identifier: 41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     269449
IP address blocks:        45.186.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ba:a5:73:98:6c:eb:f1:69:5e:da:8b:f9:c4:b2:00:54:ad:3e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:e6:c1:71:9a:38:33:f8:70:30:75:96:21:
                    11:47:a0:32:0f:5f:8d:8f:e1:e0:a9:23:69:76:ca:
                    c6:9a:39:5e:ca:60:b8:f1:cb:43:19:8d:46:fb:d6:
                    9e:3d:51:f2:20:ae:12:16:52:02:25:30:fa:07:e0:
                    c1:85:3d:c2:76:2c:54:c6:76:2f:94:9f:ad:8c:4a:
                    97:32:7d:39:19:55:c7:2f:64:60:fe:2a:4b:74:31:
                    49:ce:9f:c2:65:24:ed:c2:cc:3b:bd:0a:84:54:d5:
                    01:4f:67:e2:fe:7c:1f:05:4a:e5:da:7a:81:2f:c2:
                    ed:9c:ec:a8:39:8e:91:b1:ec:c3:6f:9d:d3:8f:0d:
                    c5:56:6b:df:b6:eb:06:85:ff:33:e8:b3:f9:df:96:
                    d7:3c:1a:5d:b6:4b:71:bc:dd:91:22:fc:ec:4c:fb:
                    f7:51:81:c1:b1:b5:cf:4d:a5:6f:be:ff:f9:49:1e:
                    f8:45:b1:64:b0:7d:e5:57:66:e4:7c:aa:8e:bb:8d:
                    76:57:43:7a:66:55:1f:a7:78:bc:93:43:81:c3:bd:
                    35:8f:7d:26:b0:97:6b:d1:dd:ae:3e:e4:aa:3a:d2:
                    3d:0c:ed:20:53:bf:29:4b:29:0f:3d:d3:75:26:2f:
                    34:4f:f7:bb:d8:90:72:0d:4a:3e:42:1a:f5:f0:6f:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8A:E0:1B:35:A6:DA:8C:FC:32:62:A6:EF:7F:02:02:00:12:9B:06
            X509v3 Authority Key Identifier:
                keyid:41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:94:f9:56:c5:73:98:60:a4:7f:5d:76:bf:cb:8d:91:2b:bb:
         49:31:e8:c3:1e:c2:dd:fd:bb:7a:a3:b5:d8:44:59:d0:c9:be:
         61:f5:71:36:5c:60:1d:e1:4d:a8:74:4c:27:01:62:89:39:e4:
         e2:68:6b:a8:d4:f0:86:b2:94:79:61:6a:76:37:d6:ae:95:2d:
         59:5b:24:fb:07:9a:38:9f:f7:9c:ad:43:c4:d1:fe:1b:b0:3c:
         ce:3e:71:9e:a2:17:f0:8f:47:21:71:7b:00:cc:b8:e8:16:fd:
         73:b2:1b:0b:54:f3:c1:99:99:cc:aa:12:4a:da:07:cd:40:3d:
         13:84:55:d4:a1:f1:ef:f2:c9:f4:7b:48:8d:37:ab:3b:12:ef:
         4c:38:ad:1f:1d:0e:b9:80:fa:0e:95:b8:4b:e5:71:37:93:6e:
         ed:61:67:56:b2:ea:eb:7a:9e:b7:64:bc:3e:81:31:e7:d1:79:
         9f:2c:6c:a9:62:c7:e7:6d:9b:72:84:83:ea:29:5f:e0:e4:f3:
         ee:eb:aa:d9:0e:c4:34:65:43:50:d6:f4:90:d8:15:ad:25:87:
         01:0d:e7:32:06:79:d1:d1:a7:17:76:f4:ea:dd:20:d1:c3:fc:
         d8:08:62:d5:5e:2c:58:c0:40:56:10:e0:8f:4f:e3:e6:88:48:
         2b:83:8f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:16 2025 by rpki-client