Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39362e302f32332d3233203d3e20323638343037.roa
File:                     34352e3136302e39362e302f32332d3233203d3e20323638343037.roa (raw, json)
Hash identifier:          xJ/J0hKZ50apFqUvYPa+Sw/SjQuuwy4S/8DsxvMn8Fc=
Subject key identifier:   1B:45:89:93:C2:E9:0E:25:C7:1C:B8:FA:DA:27:5B:03:50:74:96:42
Certificate issuer:       /CN=18380AF093DF48152B3963AA733B302A175459DB
Certificate serial:       5A5F181A1CEA15B95D8B25AF26FE9C910EA24B33
Authority key identifier: 18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39362e302f32332d3233203d3e20323638343037.roa
Signing time:             Fri 14 Feb 2025 12:59:03 +0000
ROA not before:           Fri 14 Feb 2025 12:54:03 +0000
ROA not after:            Fri 13 Feb 2026 12:59:03 +0000
asID:                     268407
IP address blocks:        45.160.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5f:18:1a:1c:ea:15:b9:5d:8b:25:af:26:fe:9c:91:0e:a2:4b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18380AF093DF48152B3963AA733B302A175459DB
        Validity
            Not Before: Feb 14 12:54:03 2025 GMT
            Not After : Feb 13 12:59:03 2026 GMT
        Subject: CN=1B458993C2E90E25C71CB8FADA275B0350749642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:d4:b5:ac:49:b4:d0:31:f5:ef:f6:7f:b1:
                    7a:33:bc:0a:f8:a4:02:00:e4:b7:bb:f7:6b:9f:54:
                    f6:45:28:29:e5:22:5d:64:18:f4:b4:31:d1:7a:41:
                    a6:08:1a:1b:68:0c:66:d6:13:46:fb:2d:44:2a:6e:
                    d1:44:6c:18:17:0b:c1:ad:1c:fb:9e:a8:5e:5b:81:
                    63:8b:23:4c:ea:b7:7c:36:16:4d:9e:aa:0a:ad:6b:
                    8f:5d:a4:01:66:17:1e:45:d5:9f:7e:12:cd:5e:0d:
                    30:3b:91:8a:27:f6:af:3b:8a:7a:0e:57:53:bb:4b:
                    04:65:47:2b:91:29:a2:ce:de:18:62:16:58:df:fd:
                    ca:71:3b:c4:f2:8d:c9:78:1b:62:86:25:f3:9b:f5:
                    3f:bd:69:a9:b8:22:ba:07:87:0e:b0:92:76:51:e8:
                    20:52:29:29:1c:93:a3:2a:2b:a8:9b:96:3f:ed:16:
                    4a:67:31:49:ca:5e:94:a4:e6:a5:e5:37:7c:46:fa:
                    3b:09:ce:73:88:60:a5:9f:9d:d5:0f:b1:15:ab:ec:
                    57:b6:1b:69:59:27:c2:e4:3c:29:75:da:37:2b:60:
                    5e:95:56:07:ae:15:87:1a:80:4a:6c:05:27:87:bd:
                    a4:ab:fb:b7:c7:05:df:71:82:ce:27:f6:18:d6:97:
                    ef:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:45:89:93:C2:E9:0E:25:C7:1C:B8:FA:DA:27:5B:03:50:74:96:42
            X509v3 Authority Key Identifier:
                keyid:18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/18380AF093DF48152B3963AA733B302A175459DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39362e302f32332d3233203d3e20323638343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:94:73:63:f7:c3:6a:24:2c:54:ce:77:a0:63:5f:ac:dd:b9:
         4d:e5:f2:9b:d4:1e:9c:28:3b:e0:93:0f:9d:b1:20:c4:0c:ce:
         e2:84:8b:61:d8:e1:82:73:08:be:e3:b5:53:dd:d7:01:2d:7f:
         36:a5:10:61:29:a8:a9:ce:f8:ac:e3:cf:16:ee:51:dc:0d:30:
         71:26:9e:d0:d7:be:00:49:ed:cd:9f:fc:48:90:ea:e5:39:ba:
         1e:6f:5d:af:b9:d9:79:81:a3:ec:21:f0:1a:a0:05:65:25:33:
         58:86:2b:01:ee:fa:d6:09:99:b0:dd:23:f3:d4:fa:3e:72:84:
         64:c5:33:e8:80:b6:13:dc:95:0e:85:48:95:a8:43:19:20:ce:
         8e:b4:9e:11:32:e2:6f:8e:40:58:64:2f:33:3a:79:e1:64:2c:
         7e:96:af:8f:d9:d7:58:1d:7d:a8:ec:0d:e2:97:9b:b1:c1:c5:
         b6:75:ae:7e:d1:7a:a1:9a:ab:8b:78:da:89:9f:11:db:1b:3e:
         a1:20:32:ad:b6:6a:93:7b:b9:6b:cb:0d:94:b2:34:85:15:98:
         a4:4f:ee:c8:e7:f9:91:4c:6a:c2:8e:26:36:a7:e3:c5:0e:e4:
         1d:18:c4:40:2a:a1:5d:83:2b:d2:9f:c4:66:f4:0e:92:c0:dc:
         76:39:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:14:58 2025 by rpki-client