Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3138362e37322e302f32322d3234203d3e20323633353639.roa
File:                     34352e3138362e37322e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          mNLo9Me1htBeaChDLiAdfTOb8EMdhtvAmEfTP5W7fcM=
Subject key identifier:   89:0B:64:17:D6:44:C4:E3:C7:68:BF:F2:8C:16:64:03:39:21:AA:EC
Certificate issuer:       /CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
Certificate serial:       4CDF8CFE055DB0CA2239AA5F2CC8CE9F253AE9EA
Authority key identifier: 82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3138362e37322e302f32322d3234203d3e20323633353639.roa
Signing time:             Fri 24 Jan 2025 18:45:54 +0000
ROA not before:           Fri 24 Jan 2025 18:40:54 +0000
ROA not after:            Fri 23 Jan 2026 18:45:54 +0000
asID:                     263569
IP address blocks:        45.186.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:df:8c:fe:05:5d:b0:ca:22:39:aa:5f:2c:c8:ce:9f:25:3a:e9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
        Validity
            Not Before: Jan 24 18:40:54 2025 GMT
            Not After : Jan 23 18:45:54 2026 GMT
        Subject: CN=890B6417D644C4E3C768BFF28C1664033921AAEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:9a:1e:4c:8c:7e:50:78:8a:4f:0b:f3:ca:
                    98:ed:3e:75:1f:c4:ee:b3:ac:f9:5b:01:39:5e:fd:
                    a5:48:93:ce:a4:41:82:e6:03:91:3b:54:6d:ec:f1:
                    97:a7:7f:31:d2:10:8c:1b:2c:ac:07:62:06:91:0f:
                    3d:76:11:df:9d:50:45:8e:4e:89:e7:2c:25:00:1c:
                    aa:7a:2f:48:29:80:92:82:b7:f6:4f:2b:5c:52:7e:
                    a1:c4:3e:a6:8a:6f:0b:24:48:8f:fd:c9:dd:ea:db:
                    63:43:09:d7:14:73:08:34:af:1e:b2:f8:a0:1c:c0:
                    da:b2:d4:01:2d:f8:db:7e:45:49:a7:e2:cf:7e:ce:
                    6c:05:95:c5:8b:89:f4:2d:e7:a9:5b:10:e9:9d:ea:
                    a3:b1:c7:bd:23:c9:55:43:a1:29:6f:59:25:53:ec:
                    03:bd:4f:26:ad:63:1a:4e:6d:20:43:22:ed:7e:3c:
                    79:cf:61:99:32:8d:11:91:59:33:70:25:bb:6a:3a:
                    c7:69:5c:78:27:ae:5e:2b:5b:13:0e:f2:d8:c0:ab:
                    70:5f:35:90:4b:fd:4a:7a:b3:29:7d:c1:b6:99:88:
                    94:7a:1b:4e:27:41:b6:01:48:70:cb:bd:e1:a6:2f:
                    65:a4:12:44:e8:70:72:18:e4:9b:54:27:8f:18:a4:
                    b1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0B:64:17:D6:44:C4:E3:C7:68:BF:F2:8C:16:64:03:39:21:AA:EC
            X509v3 Authority Key Identifier:
                keyid:82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/82BD943EADDE8D043442C08B37EFCE567D8A3660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3138362e37322e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:62:d2:e5:36:ac:3c:12:da:91:0f:1e:53:4b:52:58:d4:af:
         c0:aa:8f:dd:e1:69:44:0f:ba:c0:91:4a:0b:b4:16:7c:d0:17:
         bd:b4:63:2e:1c:67:1a:7d:68:3e:1c:2e:c6:82:f3:27:1b:3b:
         41:de:7f:02:2b:f7:72:dc:cc:00:13:cc:07:f6:9b:71:a2:58:
         2e:23:21:35:2c:56:5b:ed:5a:23:22:b0:1a:cb:7b:3a:71:66:
         5a:f1:01:0c:40:ea:53:f3:d8:16:57:c6:69:03:d0:4f:e2:60:
         df:1a:8e:08:6a:d6:e0:9a:68:b3:f9:3b:6c:86:73:42:8c:57:
         da:64:11:cf:cf:03:71:8b:bc:69:f9:46:69:7a:5c:a7:82:98:
         28:c9:53:2f:a4:17:4f:c5:5e:61:43:1e:57:92:cb:2b:d1:f7:
         35:97:b0:ed:95:3f:fe:26:40:75:41:71:a3:ed:ac:f2:b2:af:
         04:c2:4b:d3:21:f0:f0:90:a0:6e:0b:78:1e:35:82:cf:b5:a5:
         0f:af:a4:45:03:fb:dc:88:0b:2c:c9:63:0c:08:09:38:3c:05:
         ec:a6:4c:73:7a:45:db:e8:7e:b5:99:6a:df:e9:d9:91:17:1d:
         be:2b:c1:8d:6f:a5:1d:1c:54:67:86:64:94:c0:b8:36:ae:92:
         82:52:1c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:19:37 2025 by rpki-client