Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135312e302f32342d3234203d3e20323638333732.roa
File:                     34352e3233392e3135312e302f32342d3234203d3e20323638333732.roa (raw, json)
Hash identifier:          d8oM2a79Jfdff+b+DlgiZ7Lst1sn31/RMsdGKkRKlu4=
Subject key identifier:   82:B3:14:3A:A3:80:D1:77:E0:85:8A:DB:E7:19:6A:F0:F7:CC:8F:17
Certificate issuer:       /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial:       019317C3FCE8036C113C7246CE0B08758DF3AD21
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135312e302f32342d3234203d3e20323638333732.roa
Signing time:             Tue 10 Dec 2024 12:53:40 +0000
ROA not before:           Tue 10 Dec 2024 12:48:40 +0000
ROA not after:            Tue 09 Dec 2025 12:53:40 +0000
asID:                     268372
IP address blocks:        45.239.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:17:c3:fc:e8:03:6c:11:3c:72:46:ce:0b:08:75:8d:f3:ad:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
        Validity
            Not Before: Dec 10 12:48:40 2024 GMT
            Not After : Dec  9 12:53:40 2025 GMT
        Subject: CN=82B3143AA380D177E0858ADBE7196AF0F7CC8F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:57:14:ee:4e:51:06:8e:fc:a8:be:2c:95:
                    39:c8:ca:b1:49:3f:38:bc:f3:81:24:db:79:df:36:
                    6d:b5:6e:be:5a:22:eb:8e:20:9e:c6:5b:5a:2a:01:
                    55:b8:e6:b1:7d:f8:5f:49:a1:c0:5d:0f:0f:35:32:
                    04:f2:a9:3b:1a:39:46:f4:21:23:76:1e:47:38:59:
                    24:54:5f:fd:ea:e6:8b:0f:16:a8:94:5a:96:e7:3b:
                    ff:04:ed:a2:01:03:1d:45:5e:de:07:1d:47:4b:a9:
                    d9:99:bd:18:ab:23:27:c0:c4:3f:5a:b3:47:a2:30:
                    6f:8d:e5:87:27:c0:f6:93:d6:62:fa:70:73:13:5d:
                    41:cd:f5:4d:07:f5:e7:ec:4c:c0:ae:2c:de:6f:a0:
                    bc:4a:7b:eb:52:c0:97:84:d7:bd:84:72:8c:93:60:
                    4d:54:0a:16:b6:22:f8:28:be:19:7e:4c:5c:bb:78:
                    96:b1:b3:06:2c:f3:fd:72:fe:59:db:d7:4b:9f:b9:
                    5d:ae:63:39:7c:1e:4f:fb:f3:db:60:df:e7:29:62:
                    2b:44:6a:68:e1:f0:a5:4b:41:e3:ba:e2:76:fd:c8:
                    29:e3:c8:60:e0:e0:c6:cf:11:ee:44:2e:9e:ca:48:
                    50:e0:3d:cb:21:ef:e1:a9:93:a2:f8:98:06:ac:9a:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B3:14:3A:A3:80:D1:77:E0:85:8A:DB:E7:19:6A:F0:F7:CC:8F:17
            X509v3 Authority Key Identifier:
                keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135312e302f32342d3234203d3e20323638333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:ff:66:aa:14:62:53:5a:28:07:fc:cc:88:d2:e8:4d:3b:8d:
         1f:c8:2b:0e:cf:ce:14:80:9f:f9:43:19:49:ca:d5:a6:b0:fb:
         1a:40:3c:97:55:33:86:b5:c6:df:7a:eb:ad:aa:cd:86:47:36:
         ab:62:a6:d5:26:2b:26:68:ec:58:71:ae:84:11:29:88:05:4f:
         1f:0e:f8:07:d2:0e:6a:14:bb:bd:81:a6:79:ed:f0:1a:bf:e2:
         e6:55:a4:b6:dc:b0:86:88:f3:9c:08:4a:f0:02:b2:db:3b:b6:
         f8:68:33:87:1c:d4:3a:e2:43:48:53:f2:8e:ec:3d:ce:73:97:
         c9:41:4d:14:ab:73:f0:e4:93:eb:1f:83:f7:67:05:53:9b:64:
         6e:78:04:8a:0b:7b:41:de:dc:6a:d4:75:0b:b2:69:c8:0f:ec:
         18:12:b6:2d:e1:12:6e:e9:45:da:b2:ce:e7:b9:0b:49:a7:96:
         79:c7:2b:c6:d6:17:67:ef:ae:b9:c7:5a:6a:ec:4d:8b:10:05:
         6c:4f:71:29:1e:8f:d7:3e:33:a1:1f:24:6b:62:30:d4:15:0e:
         ba:0f:2c:5b:1b:e8:48:b8:80:fd:bc:82:05:e7:bf:9a:dd:fe:
         c6:5e:91:de:0c:a4:3b:54:3b:3f:52:62:5b:93:4d:75:d1:d7:
         92:d6:a3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:17 2025 by rpki-client