Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33342e302f32332d3233203d3e20323638313133.roa
File:                     34352e3136392e33342e302f32332d3233203d3e20323638313133.roa (raw, json)
Hash identifier:          7Qwqdww0OSP1Lj8M86q9+Wzg5I7FtytC6OK5zipzJKs=
Subject key identifier:   3F:66:42:46:89:1C:71:C5:EB:2B:FF:A4:5A:FB:84:82:E1:ED:72:79
Certificate issuer:       /CN=A39AA144A61634B60A33E417B9A20C7C061D86A3
Certificate serial:       7618FE8B14F0A9D354A520337A9BE90EC73FF7AB
Authority key identifier: A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AA144A61634B60A33E417B9A20C7C061D86A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33342e302f32332d3233203d3e20323638313133.roa
Signing time:             Wed 26 Mar 2025 17:01:31 +0000
ROA not before:           Wed 26 Mar 2025 16:56:31 +0000
ROA not after:            Wed 25 Mar 2026 17:01:31 +0000
asID:                     268113
IP address blocks:        45.169.34.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:18:fe:8b:14:f0:a9:d3:54:a5:20:33:7a:9b:e9:0e:c7:3f:f7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A39AA144A61634B60A33E417B9A20C7C061D86A3
        Validity
            Not Before: Mar 26 16:56:31 2025 GMT
            Not After : Mar 25 17:01:31 2026 GMT
        Subject: CN=3F664246891C71C5EB2BFFA45AFB8482E1ED7279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6d:d5:89:d5:1d:d4:ab:4d:72:f5:a9:66:d4:
                    d7:aa:98:1f:e6:7d:fe:e2:a6:7f:40:3b:a5:af:0c:
                    48:26:a2:5c:5d:d9:1b:89:49:c7:47:8d:2b:1f:e2:
                    7e:f6:83:98:3e:a1:1f:25:a3:f1:6c:a6:a9:e6:0e:
                    cb:0c:f1:8d:50:ac:6e:09:cf:fb:07:e7:ad:b8:19:
                    5f:04:ee:21:36:61:d1:f4:fa:7d:65:3e:d6:81:76:
                    b7:b8:6e:b7:00:f8:34:03:d0:91:ae:30:99:03:46:
                    84:b8:ed:10:09:69:e7:68:e5:d6:d6:5d:84:62:fe:
                    bf:72:1a:1b:5c:a8:98:a7:26:b1:ae:01:a1:fc:33:
                    c1:54:80:f1:8b:91:20:7e:99:54:3f:ff:e2:d2:6c:
                    28:49:8b:42:11:55:12:31:77:7c:94:49:fe:fd:41:
                    26:d6:c8:9b:01:d4:1f:c4:6f:82:2f:c1:df:74:c9:
                    b9:c2:27:1e:d6:f0:33:be:3e:dc:86:29:16:5d:c4:
                    5b:fc:06:f1:ea:21:ea:f1:81:1c:b2:29:f1:e0:2e:
                    22:f1:74:80:2f:67:cd:0a:96:82:45:ca:3b:e7:39:
                    3f:24:02:64:41:7e:8d:47:57:74:6f:6c:8a:37:06:
                    ea:00:c3:26:19:21:b0:fa:4f:43:9a:2e:32:e0:6a:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:66:42:46:89:1C:71:C5:EB:2B:FF:A4:5A:FB:84:82:E1:ED:72:79
            X509v3 Authority Key Identifier:
                keyid:A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/A39AA144A61634B60A33E417B9A20C7C061D86A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AA144A61634B60A33E417B9A20C7C061D86A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33342e302f32332d3233203d3e20323638313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:74:ca:37:0b:3d:04:37:89:66:fc:c5:26:4c:2b:78:93:56:
         27:f2:69:6e:17:83:0e:f9:cd:f3:ea:f5:90:38:ca:04:f2:c9:
         27:b9:69:71:66:0c:4b:83:15:5b:1d:de:85:29:5f:47:fe:a8:
         81:d1:0c:3c:2e:14:e1:d0:5c:fa:cf:38:1d:d9:a5:89:b4:88:
         f9:fa:c5:36:ed:96:4e:40:3a:b1:09:4b:34:e0:69:c9:80:69:
         be:9a:62:b6:7a:4b:ea:b7:e8:cd:3e:3d:d6:c0:37:88:0d:34:
         22:e5:22:90:7a:a9:5d:c2:bb:9b:d3:12:5e:c4:9f:1b:a8:5e:
         ab:eb:e4:89:fc:6c:1e:53:45:1d:46:4c:1b:3c:51:8c:4e:1a:
         05:7c:c0:44:83:8d:31:d0:30:45:a4:ff:83:f5:b4:b2:e8:8f:
         78:53:fe:03:d6:ae:7d:0b:ea:57:fc:19:e5:b3:e1:ba:b0:82:
         81:6a:07:9b:00:56:05:8e:17:e4:2e:9e:4c:c2:9a:46:8a:c0:
         39:e9:2f:90:34:4a:28:23:c0:c7:eb:20:ee:85:49:1d:04:e9:
         17:1d:fa:d2:39:c1:46:8a:58:75:c3:9a:0b:5d:97:24:05:42:
         6b:47:2b:17:4d:c1:5e:92:3b:15:6f:1d:db:ab:21:35:b5:87:
         08:7d:84:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:34:20 2025 by rpki-client