Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa
File:                     34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa (raw, json)
Hash identifier:          qOyDuBLZPViaSVFtZaZuQnAi6KvZGC+3k8vUFG2KNuw=
Subject key identifier:   D1:CD:CB:38:1D:19:E4:1D:5D:68:EA:47:3A:20:45:4D:57:25:CD:44
Certificate issuer:       /CN=5180CE95C6FF8C21A0A7A135DCFA9801E2E72959
Certificate serial:       48612782F85C57B675CB20257E42E51C9DA1DA6A
Authority key identifier: 51:80:CE:95:C6:FF:8C:21:A0:A7:A1:35:DC:FA:98:01:E2:E7:29:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa
Signing time:             Thu 06 Mar 2025 04:42:35 +0000
ROA not before:           Thu 06 Mar 2025 04:37:35 +0000
ROA not after:            Thu 05 Mar 2026 04:42:35 +0000
asID:                     268870
IP address blocks:        45.174.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:61:27:82:f8:5c:57:b6:75:cb:20:25:7e:42:e5:1c:9d:a1:da:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5180CE95C6FF8C21A0A7A135DCFA9801E2E72959
        Validity
            Not Before: Mar  6 04:37:35 2025 GMT
            Not After : Mar  5 04:42:35 2026 GMT
        Subject: CN=D1CDCB381D19E41D5D68EA473A20454D5725CD44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:cb:a6:88:67:fb:2f:b6:5a:ac:42:3c:fb:
                    b3:cc:07:16:05:31:e2:bf:26:b3:37:64:ce:f1:88:
                    9f:c3:ba:03:a2:25:17:6f:36:e6:50:30:6e:46:5b:
                    be:52:58:af:c1:c0:0e:3c:39:45:d3:ed:ea:b1:3a:
                    33:53:c9:cd:9e:a5:14:27:6c:b8:4c:ec:39:28:6b:
                    99:f0:98:6f:eb:f2:07:fc:ed:24:e7:71:2b:0f:86:
                    52:9d:0f:56:95:09:6c:85:f0:0d:65:d4:20:a0:52:
                    0e:27:7a:b5:be:7e:37:e8:7a:fd:ec:98:f1:59:93:
                    7c:3c:c7:30:8c:f3:76:66:3d:ea:6e:5e:28:9d:5a:
                    8a:fb:7a:77:49:16:fa:e7:43:7d:52:63:42:6a:31:
                    2b:f5:59:2a:ad:c5:a7:96:80:d1:71:00:f0:dc:0b:
                    d6:39:23:20:5e:3b:22:b5:02:85:7d:df:65:61:a0:
                    97:e4:b6:9a:3c:1c:59:97:4b:b4:05:cd:d5:01:18:
                    7f:1d:93:c1:a5:98:c2:3b:85:c5:77:fc:15:43:bc:
                    54:45:35:1c:22:fd:04:c6:fd:ea:1f:1b:36:6a:db:
                    6e:3b:1d:1c:83:a6:82:f5:f5:65:5a:05:80:6d:ac:
                    3a:e7:0f:3c:f8:c1:41:39:f3:42:c9:ce:53:4e:d6:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CD:CB:38:1D:19:E4:1D:5D:68:EA:47:3A:20:45:4D:57:25:CD:44
            X509v3 Authority Key Identifier:
                keyid:51:80:CE:95:C6:FF:8C:21:A0:A7:A1:35:DC:FA:98:01:E2:E7:29:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:1c:66:de:e5:53:0d:95:be:a3:48:18:2e:99:a9:42:62:8e:
         1c:e8:6f:f0:9b:55:c1:a2:3c:49:3b:04:15:28:47:3e:a1:16:
         2d:fc:77:d2:32:6c:7e:2b:33:e3:12:27:e3:ea:08:14:4a:87:
         26:70:4c:1d:7a:1b:71:f7:47:91:08:4a:2d:66:04:1e:c3:34:
         52:81:53:76:35:9a:94:28:62:05:ea:55:04:c1:da:c4:ff:e7:
         4a:34:b3:58:d5:34:83:7e:f7:3b:87:8c:a3:e5:71:da:f9:81:
         ae:40:2f:30:36:ba:49:ea:4c:0f:e1:f2:a3:c5:2e:d7:c9:ec:
         0b:36:cc:0a:3c:fd:8b:21:f3:e0:15:22:b2:da:f4:03:b6:99:
         f8:78:bf:13:aa:81:6b:36:b7:da:ae:0f:58:9a:a8:05:79:e0:
         8a:ae:7e:a9:96:06:bc:a8:da:b0:2d:1f:76:8f:f4:b0:20:ef:
         91:9a:12:39:81:ed:ed:52:b5:ae:58:01:64:23:49:55:81:43:
         62:75:a8:61:5c:35:45:f1:07:39:8d:1e:00:50:6e:91:21:be:
         f3:1a:d9:ed:e0:83:62:33:01:d0:6f:10:34:8b:48:e6:c3:d1:
         74:0a:89:09:61:12:d3:72:e0:e4:2a:59:2e:08:10:28:29:2b:
         da:3f:68:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:39:01 2025 by rpki-client