Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39362e302f32342d3234203d3e20323638343037.roa
File:                     34352e3136302e39362e302f32342d3234203d3e20323638343037.roa (raw, json)
Hash identifier:          wMrLxCeWVaZMWkJ56I0VJp8WhsPzmDypwKqIMZsLYMQ=
Subject key identifier:   FC:78:8E:68:C0:F7:26:62:7C:89:94:94:10:E6:C9:31:42:8A:07:33
Certificate issuer:       /CN=18380AF093DF48152B3963AA733B302A175459DB
Certificate serial:       7482D150DB7BFF24CC955EE273D540876A229646
Authority key identifier: 18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39362e302f32342d3234203d3e20323638343037.roa
Signing time:             Fri 14 Feb 2025 12:59:05 +0000
ROA not before:           Fri 14 Feb 2025 12:54:05 +0000
ROA not after:            Fri 13 Feb 2026 12:59:05 +0000
asID:                     268407
IP address blocks:        45.160.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:82:d1:50:db:7b:ff:24:cc:95:5e:e2:73:d5:40:87:6a:22:96:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18380AF093DF48152B3963AA733B302A175459DB
        Validity
            Not Before: Feb 14 12:54:05 2025 GMT
            Not After : Feb 13 12:59:05 2026 GMT
        Subject: CN=FC788E68C0F726627C89949410E6C931428A0733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:c6:53:86:05:24:8d:65:1b:4f:4e:88:64:
                    8d:1f:09:65:c3:b3:92:d5:c5:29:4a:8e:a5:47:16:
                    7f:6e:12:94:c2:fd:a8:ff:2b:5d:3a:d1:0a:cb:04:
                    6f:d9:ec:2a:e2:1e:7e:f4:24:c6:31:9e:ea:25:ba:
                    7f:d0:d1:39:9c:21:65:c4:5e:03:1e:7b:c0:c6:6e:
                    55:5a:1a:d7:0f:a8:d0:8e:49:7a:84:36:64:94:c9:
                    c5:03:8f:04:f7:63:a2:09:79:14:3b:c4:20:c9:dd:
                    72:c6:64:68:64:45:4d:ab:9a:2d:0a:92:ca:8d:79:
                    ab:b1:fe:1f:8d:bc:18:41:75:05:9e:7c:fe:84:c4:
                    cc:e9:9e:4d:cc:27:1e:60:ff:94:bd:5e:68:24:bd:
                    63:e8:79:c9:72:78:6c:46:0d:22:32:fa:0e:04:68:
                    ba:6a:30:3f:1a:9e:84:76:a0:d0:28:09:f2:7c:62:
                    7d:e0:71:df:74:77:61:75:78:7c:f6:e0:00:48:5f:
                    7e:92:af:fb:c3:28:62:d5:fc:9b:95:ba:13:cf:b7:
                    79:61:03:db:10:5e:c9:b8:59:7a:16:da:64:e8:43:
                    52:68:99:8c:ac:62:97:74:a8:3e:b1:17:40:45:4f:
                    8d:ae:2b:f9:8b:a6:2a:72:01:54:9b:6b:f4:f0:0a:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:78:8E:68:C0:F7:26:62:7C:89:94:94:10:E6:C9:31:42:8A:07:33
            X509v3 Authority Key Identifier:
                keyid:18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/18380AF093DF48152B3963AA733B302A175459DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39362e302f32342d3234203d3e20323638343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:76:7b:35:f6:47:6f:67:ce:9e:b7:fb:f6:5c:64:1d:c3:04:
         8a:45:57:a2:f7:a0:05:56:a0:fe:5b:26:a2:e8:44:31:d5:9d:
         a1:7d:80:08:4f:9d:ff:f5:ff:f7:7b:59:8b:d7:3f:9e:49:61:
         7d:bc:36:f4:14:ec:98:b3:17:1f:da:6d:e4:87:e9:36:de:06:
         bc:f9:97:89:70:2d:0f:dc:c4:ba:12:65:1f:20:22:fb:a8:58:
         b6:41:7e:a6:9f:66:54:ee:b8:39:43:06:03:68:4e:e0:5f:4b:
         ad:43:60:14:0c:59:02:09:84:25:36:04:ee:dd:55:4a:87:14:
         96:a4:b0:ee:73:9f:29:15:cf:55:0a:8a:3c:f0:80:32:82:8a:
         f0:6b:6d:1b:b5:9f:d8:26:a2:b7:2e:79:b2:cb:62:6a:26:bd:
         18:38:b9:53:7f:cc:93:b2:59:d2:49:86:14:7b:08:a3:22:dc:
         60:81:69:74:e5:0b:12:20:3d:5b:d4:ed:d2:e7:3c:41:ef:b3:
         6b:a8:97:85:b9:f1:ad:9e:27:dd:7d:b1:69:8d:3d:c3:8f:af:
         c4:63:dd:0e:bc:4e:60:45:fc:ac:de:ea:cd:f6:9e:51:83:ba:
         46:71:a7:2b:8c:14:97:a6:11:b6:1a:25:05:f9:93:54:f7:5a:
         cd:6a:49:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:57:24 2025 by rpki-client