Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          XC80ni81mADvW8cZ54+vgXe41X26ttzkk2jgQqAMcAE=
Subject key identifier:   D7:FB:89:83:26:03:ED:5B:42:E6:A3:D1:3E:22:35:87:A3:B2:3E:99
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       2933586272229FFD72530284929F6C9011F3816B
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa
Signing time:             Thu 06 Mar 2025 17:57:48 +0000
ROA not before:           Thu 06 Mar 2025 17:52:48 +0000
ROA not after:            Thu 05 Mar 2026 17:57:48 +0000
asID:                     271632
IP address blocks:        45.172.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:33:58:62:72:22:9f:fd:72:53:02:84:92:9f:6c:90:11:f3:81:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Mar  6 17:52:48 2025 GMT
            Not After : Mar  5 17:57:48 2026 GMT
        Subject: CN=D7FB89832603ED5B42E6A3D13E223587A3B23E99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:09:1c:52:7e:ad:2d:8a:13:45:ef:ef:eb:
                    fc:b0:8c:34:11:cd:b1:90:1e:01:77:a6:aa:39:99:
                    7d:e9:be:ff:6b:1d:7e:9d:20:95:c5:7f:6a:74:6c:
                    df:2a:ec:0a:b3:7f:48:9c:68:d2:6f:89:a1:d3:8f:
                    41:82:bc:85:1b:af:17:25:aa:41:6b:35:32:bb:16:
                    a6:2e:43:4c:ab:4e:54:fd:c7:24:b9:70:ac:20:92:
                    3a:e9:93:8e:d5:bd:04:04:6f:f7:6e:a6:7d:49:9a:
                    93:d2:38:69:7f:c4:a4:1b:33:2e:e4:5c:f6:ee:b0:
                    5b:56:33:71:96:05:42:0e:c5:8c:08:8b:93:db:94:
                    62:86:56:53:3f:e8:3f:54:68:d7:91:6b:79:af:39:
                    2c:ee:2c:1d:3c:38:ab:a5:fd:55:14:68:26:b4:66:
                    02:07:86:8a:46:85:fc:22:b8:0b:b3:f0:f0:9f:ca:
                    1d:ce:77:3f:cc:8c:01:42:61:b7:61:20:c4:bb:61:
                    cd:c6:cd:7c:14:81:c3:4e:d6:43:f7:32:d1:7c:7b:
                    ed:6b:5b:ce:7f:c8:30:bf:e1:db:8d:2a:17:c8:33:
                    1a:f3:8e:b6:a4:81:c3:c5:9a:64:02:a4:ba:37:9f:
                    70:38:7a:6e:cc:df:fb:03:b3:b8:3f:bb:3d:62:4d:
                    a6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FB:89:83:26:03:ED:5B:42:E6:A3:D1:3E:22:35:87:A3:B2:3E:99
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:af:86:7b:bf:45:fd:c7:c9:33:d1:54:a5:4e:af:55:7c:c2:
         64:7e:b1:5f:cd:a3:de:12:bc:69:cd:c0:7c:fe:29:b4:42:cb:
         c2:f6:22:34:6b:ae:13:d7:1d:b7:80:75:94:af:62:8f:42:0d:
         9a:18:5e:bf:a9:27:3f:34:77:37:97:ff:89:73:1a:73:c7:50:
         bc:53:e4:f4:44:58:42:35:43:3c:f6:a7:1e:6e:bd:f7:aa:ca:
         d1:dd:2f:2d:7b:e2:cd:b0:7e:d4:25:ac:86:7d:c7:67:e6:51:
         d5:e4:0c:ad:2f:d5:a6:f7:fe:4e:bf:c9:7e:4d:ab:1f:29:24:
         d3:24:2d:d7:14:fe:46:ee:a3:07:45:99:e1:32:27:de:97:76:
         70:f5:72:6c:e2:10:6f:7d:34:25:af:68:50:f9:da:e3:a1:59:
         bf:9e:48:c7:ad:f4:a9:4e:a1:e3:c9:da:75:f3:56:81:81:42:
         b9:b3:b8:74:8e:40:f7:cc:24:68:a8:a2:16:a9:0b:ca:bb:04:
         49:d9:c8:73:df:66:aa:61:bf:33:3f:25:ba:44:67:61:bf:0e:
         b3:9c:89:78:cf:94:b7:f8:a7:70:3d:94:51:a6:12:ea:a5:42:
         65:32:ba:a8:fd:8b:1d:ff:78:9a:69:50:f9:cd:f2:9b:60:19:
         3d:10:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:17:56 2025 by rpki-client