Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa
File:                     34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa (raw, json)
Hash identifier:          dBAS+xM7DuOudxpNVsgv94NdzeOkHb+CFuG/rvTxlwU=
Subject key identifier:   0D:BB:BA:57:CA:73:18:03:8C:54:CD:89:26:83:11:EC:2C:C7:EF:63
Certificate issuer:       /CN=9C5D5C9A5599F77587485119C21214F577AB3947
Certificate serial:       05E0F8C7546C3FA3AD8105C927CFFA52A26BB728
Authority key identifier: 9C:5D:5C:9A:55:99:F7:75:87:48:51:19:C2:12:14:F5:77:AB:39:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5D5C9A5599F77587485119C21214F577AB3947.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     268426
IP address blocks:        45.160.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e0:f8:c7:54:6c:3f:a3:ad:81:05:c9:27:cf:fa:52:a2:6b:b7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C5D5C9A5599F77587485119C21214F577AB3947
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:14:c4:a3:61:7b:dd:bd:1a:25:d9:1e:10:
                    46:12:eb:3a:37:41:ac:b6:d5:45:d9:5a:49:90:e0:
                    21:58:ed:4d:37:82:58:a4:7c:ed:57:bb:96:bc:bb:
                    66:ca:92:4b:fe:33:a1:e5:47:f1:b9:2c:4c:78:2e:
                    76:a3:5a:c9:95:f7:8c:4d:5c:57:44:7d:7c:79:da:
                    55:67:bb:d6:4f:2b:78:76:94:45:f8:1b:58:7a:76:
                    c2:73:fc:30:de:66:69:b3:e4:6a:bb:f4:22:66:e4:
                    9e:db:5c:f6:39:26:e4:d0:e2:47:ee:20:8d:61:b2:
                    da:d1:43:bb:48:e6:71:4c:b4:5e:32:8c:64:53:88:
                    c9:94:b2:be:ae:24:3a:0b:8a:77:60:1f:72:ec:6d:
                    68:eb:4e:da:27:93:ff:72:d5:57:37:a0:81:8c:89:
                    76:b7:e4:3c:b2:fa:c0:8e:44:64:2d:b7:11:d0:d0:
                    d1:cf:48:01:88:b5:b8:59:73:28:9f:a5:7c:59:30:
                    1e:29:96:be:e5:0c:ca:f7:bb:e8:99:bd:f5:b9:6d:
                    45:35:a1:0b:0f:72:4c:ae:6c:d5:ee:f7:82:23:8a:
                    7d:b9:26:69:c5:a5:86:a6:e6:e2:b4:1a:04:81:da:
                    60:16:ad:43:2b:3c:3e:b9:cc:ca:31:6f:41:8a:0a:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BB:BA:57:CA:73:18:03:8C:54:CD:89:26:83:11:EC:2C:C7:EF:63
            X509v3 Authority Key Identifier:
                keyid:9C:5D:5C:9A:55:99:F7:75:87:48:51:19:C2:12:14:F5:77:AB:39:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/9C5D5C9A5599F77587485119C21214F577AB3947.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5D5C9A5599F77587485119C21214F577AB3947.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:51:83:01:d4:a0:4b:6f:1c:ca:c6:2a:3b:72:db:94:90:87:
         4c:ba:2f:56:bc:b0:7a:88:9c:ff:39:2a:cb:45:e1:3e:01:68:
         18:39:42:e2:ee:2f:d1:fa:84:c0:69:d4:0c:64:22:c9:1e:ae:
         4c:4b:e1:c2:c1:e7:a2:b6:da:f3:c0:f0:c9:d2:4d:b2:6c:a3:
         c2:2d:7b:d9:bd:78:29:48:5c:54:27:00:86:b9:06:ed:c4:66:
         fc:b2:1f:e2:38:34:e5:8f:74:b1:b7:ec:81:91:77:7e:05:11:
         54:d5:43:de:c5:6a:44:26:46:47:d2:47:30:ad:e3:b8:0e:f5:
         e7:b7:ef:bb:35:65:00:97:7a:21:c5:13:65:e7:85:d5:cd:2d:
         e9:d4:5a:3a:d7:09:f3:52:63:31:61:09:36:5d:ea:2f:ad:2e:
         b5:af:f0:50:52:34:a8:d3:0b:22:99:67:2a:17:38:cc:9a:76:
         3b:8e:fe:98:e4:a5:a0:aa:2b:6b:5f:2f:69:a6:de:75:64:4d:
         d5:fb:25:e2:d0:33:2e:fd:fd:60:b1:07:9c:6d:7e:36:15:56:
         8d:ba:ee:88:fa:95:2a:99:2f:cb:b3:9e:ab:02:e7:e2:5b:96:
         38:45:74:e8:13:42:95:45:0c:17:e6:14:01:8c:32:1f:72:c1:
         74:87:86:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:24:45 2025 by rpki-client