Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3136332e3135322e302f32322d3234203d3e20323633353639.roa
File:                     34352e3136332e3135322e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          IILZxZIdz7JaohxR5prf21rd1ujzfm6mkoJK5l3u8yQ=
Subject key identifier:   4D:46:23:22:51:55:84:32:5B:E4:0D:B7:98:89:A9:99:3B:EF:5B:20
Certificate issuer:       /CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
Certificate serial:       52399AA2A9D09DCD25CA979D9A236BA8BCAA507D
Authority key identifier: 82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3136332e3135322e302f32322d3234203d3e20323633353639.roa
Signing time:             Fri 24 Jan 2025 18:45:46 +0000
ROA not before:           Fri 24 Jan 2025 18:40:46 +0000
ROA not after:            Fri 23 Jan 2026 18:45:46 +0000
asID:                     263569
IP address blocks:        45.163.152.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:39:9a:a2:a9:d0:9d:cd:25:ca:97:9d:9a:23:6b:a8:bc:aa:50:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
        Validity
            Not Before: Jan 24 18:40:46 2025 GMT
            Not After : Jan 23 18:45:46 2026 GMT
        Subject: CN=4D462322515584325BE40DB79889A9993BEF5B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:3e:e4:f1:2a:1b:74:a6:5d:e9:22:6f:a5:
                    ee:26:c4:7c:57:71:11:b0:0a:b3:e1:74:92:16:18:
                    dc:18:60:03:0a:7e:8f:75:b1:c6:c1:2e:f0:ec:78:
                    e1:c1:da:fe:46:66:c2:76:78:61:81:6f:23:65:6c:
                    ed:fc:9d:d1:5d:f8:16:e5:ca:89:c1:ad:c7:d1:5e:
                    25:6a:e0:59:e6:26:91:12:b5:b7:b4:e7:e9:76:3e:
                    13:2e:c2:57:81:64:4d:ed:d1:28:7c:b1:52:58:f9:
                    02:b4:28:c8:4b:5e:8b:45:b7:51:5e:14:69:26:f5:
                    24:57:69:4a:7e:7f:fa:3d:57:00:3f:72:ea:0a:c2:
                    d5:7a:80:6e:1d:85:4c:71:cc:0d:3b:07:50:69:a1:
                    97:a4:d1:ba:2a:9b:a1:3a:72:8c:95:d5:e0:3f:74:
                    9c:e2:27:ce:7d:67:5d:cb:bc:43:0b:41:22:f1:52:
                    8d:59:79:ac:a1:92:e3:45:6b:08:0d:2b:01:ab:48:
                    0b:2d:06:40:53:b5:03:6d:e2:45:de:ce:9b:35:51:
                    c7:5c:41:d5:8b:9c:33:7f:98:58:6a:7f:be:b1:4e:
                    c2:66:78:d8:5d:4b:0a:c9:38:5f:1e:01:fc:94:8f:
                    9f:0c:d2:45:df:37:08:b9:a1:85:71:fe:b5:0b:6d:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:46:23:22:51:55:84:32:5B:E4:0D:B7:98:89:A9:99:3B:EF:5B:20
            X509v3 Authority Key Identifier:
                keyid:82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/82BD943EADDE8D043442C08B37EFCE567D8A3660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3136332e3135322e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:45:28:7e:39:2a:0d:a1:68:84:88:0d:54:3b:55:1d:73:
         b2:99:59:4d:cb:6e:34:46:b6:72:69:ab:ff:7d:00:20:6c:ef:
         2b:9d:22:d1:53:0a:a4:15:83:35:65:f7:ab:93:6b:12:8f:05:
         43:86:18:49:8d:35:fe:4d:13:fa:55:03:9b:e2:11:99:c4:5a:
         95:6e:48:e0:c9:24:e4:08:bd:ea:11:99:12:da:14:c2:d5:94:
         57:3f:a7:7d:15:3b:05:6f:7a:97:a7:de:e9:34:dc:02:a7:a5:
         db:43:fd:53:0e:d5:9d:8d:89:d4:25:6e:f4:11:86:c5:04:9f:
         63:6d:fb:5b:41:d7:78:62:f4:3f:3c:d0:10:33:a9:a7:8b:bf:
         48:57:54:e7:2f:5e:05:a5:73:4d:0b:5c:b8:9b:db:39:90:4e:
         60:a6:d7:c9:5b:e1:74:11:9b:34:3a:56:9e:8c:2a:78:76:58:
         f7:3f:20:32:e2:47:cc:1b:8f:4e:9e:90:8e:53:12:e4:ec:dd:
         64:f2:bd:1c:e4:42:8a:a2:64:7a:15:c7:21:d2:d3:e4:c3:a2:
         21:83:3e:0b:c1:b7:21:67:f6:40:87:b3:fa:27:2b:d6:05:8e:
         e0:4b:ea:24:2b:50:39:1e:23:f6:74:fc:40:25:ee:48:52:bc:
         a1:cc:60:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:14 2025 by rpki-client