Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/34352e3136362e39362e302f32332d3233203d3e20323637393539.roa
File:                     34352e3136362e39362e302f32332d3233203d3e20323637393539.roa (raw, json)
Hash identifier:          La+TX1TAObfqXhE8mniTk8cPgtse0Axbi9jEDUmDFsg=
Subject key identifier:   A6:6B:43:A3:10:5B:D8:54:1E:15:58:FC:CE:2E:1B:2D:45:58:BC:42
Certificate issuer:       /CN=5A1A01ED7E13E03145F46A33DC2488023EF6CA8F
Certificate serial:       72C701C5243E35448D2AAF13C1ACD3FCDBCA8D52
Authority key identifier: 5A:1A:01:ED:7E:13:E0:31:45:F4:6A:33:DC:24:88:02:3E:F6:CA:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/34352e3136362e39362e302f32332d3233203d3e20323637393539.roa
Signing time:             Wed 19 Feb 2025 16:09:19 +0000
ROA not before:           Wed 19 Feb 2025 16:04:19 +0000
ROA not after:            Wed 18 Feb 2026 16:09:19 +0000
asID:                     267959
IP address blocks:        45.166.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c7:01:c5:24:3e:35:44:8d:2a:af:13:c1:ac:d3:fc:db:ca:8d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A1A01ED7E13E03145F46A33DC2488023EF6CA8F
        Validity
            Not Before: Feb 19 16:04:19 2025 GMT
            Not After : Feb 18 16:09:19 2026 GMT
        Subject: CN=A66B43A3105BD8541E1558FCCE2E1B2D4558BC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:94:07:58:17:28:09:75:be:cd:fc:b3:cc:
                    7f:ae:c4:cd:1b:44:8e:47:1a:f7:f4:4d:34:04:06:
                    f6:0d:c5:26:00:5c:78:a0:de:c0:ee:eb:d1:7a:06:
                    96:87:e5:a7:31:83:65:e8:ad:2a:44:b5:4b:18:e2:
                    78:30:20:35:1b:8d:ce:8f:de:d7:cf:30:a3:0a:46:
                    66:93:4c:e6:74:28:a1:60:1b:2b:e5:e4:5e:df:c2:
                    a6:29:a5:64:f9:33:8d:b0:1a:1e:ab:d7:f8:68:96:
                    5a:2d:6a:88:2c:67:cb:db:46:b9:88:7b:2d:5e:ea:
                    2b:e7:23:d6:70:ef:f0:e1:c2:64:59:ce:58:3d:92:
                    49:91:d9:50:21:83:ff:4b:56:1d:80:04:50:a3:c8:
                    30:b7:eb:94:cc:4b:5e:42:db:ab:3d:8a:80:f6:70:
                    8b:a7:c9:3d:5f:33:14:a2:6e:0a:f0:b1:65:8a:1e:
                    3a:37:d8:df:0e:d7:bd:d1:21:b5:e6:d9:e0:0e:ae:
                    c5:98:c1:2b:01:8c:01:97:4a:53:4c:60:64:df:a3:
                    67:22:37:04:d8:9a:5b:51:df:f1:4b:ff:72:f0:6c:
                    df:56:f9:de:95:5c:c4:78:14:f8:9b:40:93:d0:3d:
                    5e:c9:b7:92:27:d1:18:61:9c:e0:08:39:dd:56:28:
                    60:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6B:43:A3:10:5B:D8:54:1E:15:58:FC:CE:2E:1B:2D:45:58:BC:42
            X509v3 Authority Key Identifier:
                keyid:5A:1A:01:ED:7E:13:E0:31:45:F4:6A:33:DC:24:88:02:3E:F6:CA:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/34352e3136362e39362e302f32332d3233203d3e20323637393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:11:1e:f5:07:47:1c:ff:fe:ca:d1:6a:94:cc:c1:64:80:3c:
         2f:e8:00:4a:c5:78:c1:53:9e:fa:ef:98:74:14:78:40:33:39:
         1e:df:28:09:89:eb:8b:7b:c4:66:17:ad:c9:53:04:55:eb:c2:
         c4:b2:e3:fe:97:9f:91:b3:20:9f:77:b2:b3:5e:d4:f0:a3:04:
         52:b6:ce:8f:ac:b3:3a:8a:a8:21:ba:40:d2:f7:2d:84:22:14:
         49:cd:d9:86:1e:19:67:73:1e:be:25:89:ea:a1:b7:ad:a4:85:
         34:9b:f6:ac:a3:e0:21:78:63:44:cf:57:fc:fb:57:4d:69:73:
         16:58:bf:03:14:4a:07:e3:4e:58:21:f4:cc:e3:b0:65:30:4b:
         f7:5c:c4:1a:32:2c:c7:55:82:0c:3f:6c:22:1e:29:ff:e6:e7:
         cf:d1:39:8a:37:66:d6:be:5c:16:54:6b:2d:17:03:34:49:84:
         3e:c3:68:53:73:20:ba:e6:41:07:ab:75:b9:db:de:42:31:36:
         81:4d:6b:15:be:eb:cb:b9:aa:f5:63:0b:e7:9d:56:6f:e6:75:
         14:af:21:ac:05:46:d7:55:3c:da:c2:62:a6:27:84:98:04:b4:
         34:f5:5f:ad:49:30:ce:6d:31:5d:e0:45:50:79:d0:4a:83:42:
         aa:8c:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:23:03 2025 by rpki-client