Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/34352e3136392e3138322e302f32332d3234203d3e203134363138.roa
File:                     34352e3136392e3138322e302f32332d3234203d3e203134363138.roa (raw, json)
Hash identifier:          K0JqsuaNJMBhXYlDHcPTWNFAH+41dKoGZlReLITRKyQ=
Subject key identifier:   B2:81:77:7B:1C:03:A8:12:FD:59:2F:0D:83:30:7A:94:30:9C:16:9B
Certificate issuer:       /CN=FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13
Certificate serial:       562A1EEC17CAD9684718EEB5B3EB6BC825472D5D
Authority key identifier: FE:EE:EC:E2:FC:07:BB:F4:B5:B0:C7:98:6D:0F:95:4D:70:4B:FA:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/34352e3136392e3138322e302f32332d3234203d3e203134363138.roa
Signing time:             Wed 24 Jul 2024 20:30:26 +0000
ROA not before:           Wed 24 Jul 2024 20:25:26 +0000
ROA not after:            Wed 23 Jul 2025 20:30:26 +0000
asID:                     14618
IP address blocks:        45.169.182.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2a:1e:ec:17:ca:d9:68:47:18:ee:b5:b3:eb:6b:c8:25:47:2d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13
        Validity
            Not Before: Jul 24 20:25:26 2024 GMT
            Not After : Jul 23 20:30:26 2025 GMT
        Subject: CN=B281777B1C03A812FD592F0D83307A94309C169B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:dc:1e:42:b8:61:1e:7e:f1:24:bb:99:8a:
                    5e:3d:87:a6:29:6e:8b:94:47:41:31:02:bf:3f:d6:
                    08:dd:e0:f0:f5:c8:3a:5c:8d:9b:02:95:84:be:37:
                    65:bc:c1:c1:08:bb:43:8c:8a:ee:97:5d:d0:62:db:
                    6f:53:2a:b6:0b:a2:01:36:fc:f2:ef:09:5e:1d:5a:
                    19:ac:d3:9b:6d:e4:bb:c1:fb:d9:44:52:4d:31:25:
                    13:c7:d0:e0:88:32:09:37:2a:e6:c7:51:ec:46:e4:
                    ec:d0:d8:4b:b1:26:29:27:0a:e4:72:13:12:7f:30:
                    f5:10:b8:62:72:7d:2e:3d:41:13:a3:c7:6a:04:13:
                    8a:b0:6c:bc:91:91:49:8b:b7:7c:30:76:bd:d1:cd:
                    fb:ee:00:26:99:97:06:36:c0:a0:03:1d:f5:a9:39:
                    07:d1:f1:74:a0:33:12:5c:42:d9:8f:65:26:b3:ed:
                    69:89:75:4f:15:28:28:26:02:e9:0a:81:22:28:58:
                    8f:85:ee:66:aa:f1:42:9b:df:48:fd:6c:85:b4:04:
                    9a:54:37:fc:2c:5c:21:26:32:2e:a0:21:2c:80:03:
                    b0:54:77:98:4a:b4:c2:9b:71:07:b0:de:e6:49:2c:
                    3b:38:c8:52:86:c6:c8:d9:e4:0c:2e:c8:bc:9c:99:
                    42:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:81:77:7B:1C:03:A8:12:FD:59:2F:0D:83:30:7A:94:30:9C:16:9B
            X509v3 Authority Key Identifier:
                keyid:FE:EE:EC:E2:FC:07:BB:F4:B5:B0:C7:98:6D:0F:95:4D:70:4B:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/34352e3136392e3138322e302f32332d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:99:54:6e:56:da:27:39:33:5e:cd:cb:9a:03:50:cd:9d:dd:
         d5:ff:57:98:f3:6c:fe:f7:8b:00:75:c0:71:73:1a:8e:4d:ce:
         ee:c3:16:ef:a4:9e:a0:02:5f:4b:d0:c0:8a:8b:57:95:73:8e:
         7a:36:2d:53:98:62:1c:96:9f:92:c5:14:b5:dc:79:6e:39:07:
         10:8d:e3:f9:0f:61:16:32:d5:86:eb:79:05:11:08:fe:31:00:
         bf:c9:ea:17:3b:28:eb:70:31:5d:13:56:db:a9:a9:55:b9:47:
         d8:95:9a:fb:9f:41:df:45:7a:b6:3d:b8:c1:ed:ed:fe:84:bc:
         89:84:e8:f2:82:8e:67:dd:7c:54:db:2f:c6:6e:96:e2:2f:8e:
         4f:93:96:2e:1a:f3:b1:7c:4f:7e:76:20:dd:dd:13:61:84:3e:
         57:6e:b9:b3:d6:5f:4b:f2:72:5a:12:d6:f5:db:f0:7c:4b:bc:
         c0:d5:b1:69:9c:22:11:b1:2d:dc:15:6f:d6:e2:ec:2c:fa:50:
         91:68:a1:0e:38:dd:8e:04:aa:73:8c:fd:ca:69:d3:60:ed:b3:
         1b:86:32:19:10:9d:df:d7:ae:94:bd:d3:c1:d7:67:1c:ce:14:
         e5:75:20:9d:d7:53:44:7d:c6:db:81:49:dd:09:69:78:92:e2:
         a0:df:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:17:42 2025 by rpki-client