Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32322d3232203d3e20323639353038.roa
File:                     34352e3138382e33362e302f32322d3232203d3e20323639353038.roa (raw, json)
Hash identifier:          FvxGMqMkjxcDqPIQrrpPhMkznlxANXiP5oWUJ7//PLI=
Subject key identifier:   6A:3F:DA:F2:AE:DA:F8:69:1C:BF:92:96:96:FF:7B:E7:C8:5D:0C:EF
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       4BDB4AF771FB7D88290DDB2E66769C7F314CC2A4
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32322d3232203d3e20323639353038.roa
Signing time:             Fri 14 Mar 2025 21:43:21 +0000
ROA not before:           Fri 14 Mar 2025 21:38:21 +0000
ROA not after:            Fri 13 Mar 2026 21:43:21 +0000
asID:                     269508
IP address blocks:        45.188.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:db:4a:f7:71:fb:7d:88:29:0d:db:2e:66:76:9c:7f:31:4c:c2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Mar 14 21:38:21 2025 GMT
            Not After : Mar 13 21:43:21 2026 GMT
        Subject: CN=6A3FDAF2AEDAF8691CBF929696FF7BE7C85D0CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:49:4b:47:62:02:2c:09:62:90:90:91:e0:
                    a7:5e:e1:15:3d:21:9d:0e:af:ae:73:df:91:84:97:
                    9a:ae:49:e9:1e:2e:8e:e1:81:9d:33:c4:5e:76:98:
                    36:a3:c8:a6:ac:d0:ef:fc:65:66:9d:d6:4d:c0:d3:
                    80:6d:ae:87:b4:6d:d0:4d:94:6b:be:8f:23:8b:60:
                    e1:99:d7:f9:e1:28:f8:1b:2d:1c:a8:ab:6f:13:e1:
                    ef:ee:63:b2:6c:15:27:2c:41:63:89:a1:f1:3c:48:
                    89:da:23:e0:76:06:b9:f3:27:b9:88:d0:ad:37:44:
                    f2:eb:e9:35:a3:dc:c4:24:2a:c9:53:f5:5c:2d:ba:
                    71:ac:cd:7a:47:b0:d6:60:8f:81:0e:be:fd:97:41:
                    26:92:7a:55:38:3d:7e:7c:8c:c6:97:bd:1d:6c:36:
                    1b:79:15:ed:78:53:f0:3c:c8:f6:84:d3:e1:46:6a:
                    f0:09:d6:16:94:b3:a7:c9:7d:cf:4e:81:d7:75:d8:
                    7d:9f:64:8c:ee:b2:71:81:d3:00:d2:d6:b6:e8:1a:
                    34:ad:ab:49:81:c3:f8:31:db:e1:d1:8e:df:19:a5:
                    db:55:8c:e1:0b:dc:73:4a:c8:99:3f:3c:9d:bf:16:
                    6b:0f:34:25:ad:e2:97:63:a9:84:91:4d:32:66:6d:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3F:DA:F2:AE:DA:F8:69:1C:BF:92:96:96:FF:7B:E7:C8:5D:0C:EF
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32322d3232203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:2a:25:08:2a:ff:89:97:3b:42:49:14:05:32:99:2a:48:4e:
         09:e2:a7:eb:69:56:4f:83:a8:4a:28:62:eb:1e:52:63:ca:42:
         b4:16:bd:d4:d7:03:e2:b7:6a:21:97:e9:ca:a7:17:4c:7a:27:
         d1:60:55:56:4c:99:7a:75:76:ee:1f:f5:45:fd:fe:6a:3f:03:
         b9:85:5a:70:41:e8:a3:ee:a9:a5:97:47:40:5d:f1:e2:b7:38:
         8a:d8:fc:ca:82:ea:25:92:60:ea:66:3c:ef:9c:88:de:54:3f:
         0e:5b:d6:90:bd:1d:74:66:f2:4b:6e:5d:00:44:71:fe:9d:6b:
         17:6f:f1:ef:83:b9:16:53:06:d9:4e:c4:4c:48:31:53:fc:e1:
         1e:5a:3e:77:f1:15:78:61:10:94:ea:70:6f:b4:bd:a5:5d:63:
         45:31:95:85:ad:fb:58:03:71:54:59:12:6b:7e:d2:b8:40:3e:
         29:73:c6:00:71:30:a1:17:48:3a:eb:78:b1:b9:e5:f2:ed:cd:
         65:51:5b:6b:68:f6:f7:18:e7:fa:00:8e:39:46:b7:0e:01:60:
         b2:89:f5:80:16:38:bd:7c:e9:6c:bb:7d:33:7f:e5:1f:15:0c:
         07:d7:18:b7:ea:1d:16:07:d5:5c:96:e2:d8:70:88:2d:e4:a2:
         12:a6:6c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:53:35 2025 by rpki-client