Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/34352e3139302e37322e302f32322d3234203d3e20323639373032.roa
File:                     34352e3139302e37322e302f32322d3234203d3e20323639373032.roa (raw, json)
Hash identifier:          kSEliUHkTwyzOlM/eEOC7drfeCuSMzdW8pPiZ1wVE+0=
Subject key identifier:   4F:3A:A7:A3:5C:E9:5C:BC:6E:F0:CC:EE:F5:98:63:A2:54:C3:30:30
Certificate issuer:       /CN=F62F4F249754DDD7706E8918C1AF5039A9405FB7
Certificate serial:       16BE9B451B5467D360A2F12EF85EBD4BE18BAC83
Authority key identifier: F6:2F:4F:24:97:54:DD:D7:70:6E:89:18:C1:AF:50:39:A9:40:5F:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62F4F249754DDD7706E8918C1AF5039A9405FB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/34352e3139302e37322e302f32322d3234203d3e20323639373032.roa
Signing time:             Tue 31 Dec 2024 16:52:37 +0000
ROA not before:           Tue 31 Dec 2024 16:47:37 +0000
ROA not after:            Tue 30 Dec 2025 16:52:37 +0000
asID:                     269702
IP address blocks:        45.190.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:be:9b:45:1b:54:67:d3:60:a2:f1:2e:f8:5e:bd:4b:e1:8b:ac:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62F4F249754DDD7706E8918C1AF5039A9405FB7
        Validity
            Not Before: Dec 31 16:47:37 2024 GMT
            Not After : Dec 30 16:52:37 2025 GMT
        Subject: CN=4F3AA7A35CE95CBC6EF0CCEEF59863A254C33030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:32:45:5a:61:df:93:56:52:8b:9a:76:d5:
                    52:4c:31:35:4f:66:42:20:e1:4c:ed:62:35:e7:da:
                    bb:6c:18:2b:01:f9:99:c7:4c:a0:05:a7:b5:ab:51:
                    dc:00:c8:86:36:07:29:cb:8c:0b:74:fb:dc:75:07:
                    28:61:82:e8:59:11:64:68:9b:c4:99:d4:1e:2c:2c:
                    76:2e:dd:05:a5:cf:2c:42:5a:e6:ce:32:dc:68:e4:
                    7b:72:9a:b2:2d:7d:8c:83:85:44:a6:58:a4:63:e9:
                    dd:3d:9a:8f:9f:2d:63:51:49:32:e6:91:96:71:fc:
                    18:f7:4a:78:4a:b8:17:be:34:9e:87:3b:1a:3c:51:
                    92:83:de:4c:37:18:0e:86:3d:ac:e0:9c:60:a6:66:
                    52:e3:40:a5:7f:8f:c8:90:ae:ee:b8:69:b4:8d:56:
                    a7:9b:d6:36:c2:8b:1b:e0:39:00:2f:83:a0:3d:d7:
                    16:09:09:6e:9d:9e:a3:31:ae:78:a4:c8:7b:37:bd:
                    f3:34:92:69:12:65:4b:3a:c7:85:3f:6c:ac:33:76:
                    a1:db:56:12:84:78:ef:ef:b7:27:b0:de:16:a6:2c:
                    25:de:03:67:f9:96:a2:04:4b:89:7c:64:01:53:24:
                    4d:84:26:0b:fc:0c:76:97:23:fa:86:21:99:6e:37:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3A:A7:A3:5C:E9:5C:BC:6E:F0:CC:EE:F5:98:63:A2:54:C3:30:30
            X509v3 Authority Key Identifier:
                keyid:F6:2F:4F:24:97:54:DD:D7:70:6E:89:18:C1:AF:50:39:A9:40:5F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/F62F4F249754DDD7706E8918C1AF5039A9405FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62F4F249754DDD7706E8918C1AF5039A9405FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/34352e3139302e37322e302f32322d3234203d3e20323639373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:4d:ea:b8:16:ef:e1:0c:50:d8:1b:b9:1b:ca:0e:89:bd:a8:
         50:67:42:1a:03:4d:29:f6:12:a4:85:cb:93:ae:6e:ff:96:e1:
         f5:36:8c:3d:1e:3d:90:b7:45:4a:5c:c5:b2:69:99:c2:56:d6:
         ac:e6:83:b7:ea:83:05:6b:fa:ef:28:5e:03:6c:37:0b:ae:d1:
         dc:f0:7f:af:dd:b3:e2:58:5c:db:b7:c8:65:5b:fc:6b:9a:95:
         99:f9:a8:54:81:31:50:b6:e5:78:54:19:6d:9e:d8:c5:82:a4:
         0f:72:e5:e5:23:61:50:78:ce:5f:bd:e2:cf:c1:16:20:cb:65:
         d3:84:ac:9d:34:22:89:e4:63:c6:62:82:01:99:37:c7:ed:cf:
         3e:cd:79:a2:a7:f5:7f:53:67:f0:74:24:3f:f5:aa:4c:3e:f5:
         82:0a:56:dc:a8:42:9f:d7:9a:2b:c1:6b:c1:e6:30:fd:d5:3a:
         24:94:b4:76:96:6d:41:e5:fe:74:83:2c:05:ae:49:02:e3:70:
         95:c5:2c:06:c9:13:23:53:ff:29:c2:36:1e:d1:ad:45:e4:47:
         7c:b5:b8:8a:3d:dc:74:59:85:71:b1:32:76:8b:85:96:03:5f:
         6c:09:7e:0d:14:12:ca:13:26:a5:a3:55:24:94:e4:41:00:46:
         81:2d:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:33 2025 by rpki-client