Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa
File:                     34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (raw, json)
Hash identifier:          +47aSCoXRc3WCT32JxTWVorLGc+bztpSS0TeMO+//fU=
Subject key identifier:   E5:03:44:E6:0E:5A:49:B3:41:17:CE:15:C3:3A:87:65:52:61:60:EF
Certificate issuer:       /CN=9A72AC165710D3D2240950F90FF41932E5992CFB
Certificate serial:       32830A70E0A1E2AFCB45CB1C6AA88D2CE3CF442D
Authority key identifier: 9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa
Signing time:             Thu 06 Mar 2025 00:33:25 +0000
ROA not before:           Thu 06 Mar 2025 00:28:25 +0000
ROA not after:            Thu 05 Mar 2026 00:33:25 +0000
asID:                     269079
IP address blocks:        45.179.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:83:0a:70:e0:a1:e2:af:cb:45:cb:1c:6a:a8:8d:2c:e3:cf:44:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A72AC165710D3D2240950F90FF41932E5992CFB
        Validity
            Not Before: Mar  6 00:28:25 2025 GMT
            Not After : Mar  5 00:33:25 2026 GMT
        Subject: CN=E50344E60E5A49B34117CE15C33A8765526160EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:b0:74:85:7d:15:95:db:19:e4:12:6c:30:
                    80:79:b5:30:ee:7f:04:1a:eb:2e:e6:b4:30:9d:61:
                    01:f0:25:12:49:79:fc:14:3b:78:05:93:b9:32:a0:
                    cd:d0:af:e1:90:d5:a7:73:f8:c3:73:f1:eb:44:3f:
                    80:1c:5a:03:a9:78:56:e4:d7:91:d0:35:34:16:6f:
                    23:f3:d0:a6:37:15:25:73:0e:1e:71:79:fa:1c:9b:
                    f2:80:7f:e4:15:8d:bb:8a:45:21:2d:b7:21:b0:7e:
                    a2:2c:4f:38:63:8c:48:57:fe:bb:6b:9d:df:6b:30:
                    68:c7:90:58:53:e9:aa:ec:65:0a:97:63:58:4e:df:
                    8f:f8:ab:e8:ba:ea:d7:19:bb:d1:e7:bb:ee:05:19:
                    65:c8:0b:a0:18:32:21:e7:83:40:f9:9c:74:bb:8c:
                    30:55:7d:b1:f8:73:a1:d1:1f:0f:b5:22:80:22:eb:
                    79:58:c4:70:d1:51:14:2c:e7:a4:e2:41:fd:9b:62:
                    ce:b2:86:c7:0f:02:54:b4:4c:0c:12:97:5b:71:4c:
                    2b:f0:68:2d:8a:d8:1f:8d:c3:a0:ac:7f:32:61:91:
                    6b:0c:c1:0d:3a:97:e4:d8:a6:e3:e5:4e:e8:e7:9f:
                    c3:66:ba:6e:9a:23:5e:4f:4d:15:0b:07:76:c0:8f:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:03:44:E6:0E:5A:49:B3:41:17:CE:15:C3:3A:87:65:52:61:60:EF
            X509v3 Authority Key Identifier:
                keyid:9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:62:41:77:20:89:56:ff:9e:13:96:b7:43:1a:79:46:07:62:
         09:da:84:83:6d:de:bd:d3:8c:56:8f:02:47:ff:cf:d4:cb:e7:
         b3:c0:91:66:90:a9:d8:ea:3c:97:aa:96:98:b3:37:43:97:9c:
         ee:84:1d:f2:c6:30:60:10:8f:6d:04:0a:f7:9c:96:c9:ee:76:
         50:4a:3a:40:56:43:53:f1:57:73:ae:a9:61:12:54:57:d9:d0:
         6e:6b:32:2e:14:0f:4d:60:7f:e9:1b:de:72:16:f2:cf:13:2a:
         fc:07:19:2e:2a:11:8f:33:b9:f7:9c:a9:ea:a0:4e:ad:41:36:
         9f:b3:06:ea:6c:e3:0c:10:b7:5d:67:08:21:48:b1:e8:3a:ec:
         82:2a:32:83:aa:19:9f:ab:c6:6e:14:f1:84:1f:c8:b9:99:be:
         64:b2:f5:b3:45:77:c4:18:03:84:33:28:ec:77:f4:c4:e7:5d:
         44:0d:79:1c:af:aa:34:45:86:a9:78:ff:5b:c6:46:16:20:c1:
         ea:5f:17:5b:b1:31:80:c4:53:07:a3:c2:14:59:a7:b4:a8:94:
         97:10:18:b2:20:48:37:ff:f8:1f:f3:e8:47:17:99:5c:a5:e6:
         f0:b1:10:f2:7d:43:07:f5:1d:97:1d:b2:00:8a:69:bd:d4:9c:
         05:b6:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:31:26 2025 by rpki-client