Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e352e3232302e302f32322d3234203d3e20323633353639.roa
File:                     34352e352e3232302e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          g5idFSVG7ct9VoYVvhbeK7/UbNX1LFZdSIVjXj6I0LI=
Subject key identifier:   F3:86:EB:3B:C6:59:39:71:3A:78:9B:22:2A:7C:72:E7:FB:67:66:F2
Certificate issuer:       /CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
Certificate serial:       515C4AB2656D94AC4D469A63E8BEE65EC22A81D9
Authority key identifier: 82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e352e3232302e302f32322d3234203d3e20323633353639.roa
Signing time:             Fri 24 Jan 2025 18:45:43 +0000
ROA not before:           Fri 24 Jan 2025 18:40:43 +0000
ROA not after:            Fri 23 Jan 2026 18:45:43 +0000
asID:                     263569
IP address blocks:        45.5.220.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5c:4a:b2:65:6d:94:ac:4d:46:9a:63:e8:be:e6:5e:c2:2a:81:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
        Validity
            Not Before: Jan 24 18:40:43 2025 GMT
            Not After : Jan 23 18:45:43 2026 GMT
        Subject: CN=F386EB3BC65939713A789B222A7C72E7FB6766F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:7f:42:1c:08:33:8f:dc:9e:4f:9f:21:a6:
                    9d:e8:fe:cd:57:91:58:17:de:64:1e:2a:6e:e2:0f:
                    8f:32:7e:3a:79:8f:47:cf:71:fe:0e:5a:a8:0a:0f:
                    db:3c:66:c0:fd:50:af:cd:83:99:f2:5c:e3:53:9d:
                    c2:44:77:02:46:b1:9f:6c:fd:ce:fd:b0:1b:9b:68:
                    6b:01:be:b8:8a:99:86:37:ae:23:26:08:8d:74:11:
                    26:98:a7:9c:8e:92:60:7d:e0:2b:c1:c3:a9:20:d3:
                    4e:12:bb:0e:8b:e6:4a:a2:9d:92:8b:c5:54:7e:a0:
                    96:5c:b4:ce:e3:2a:15:c6:12:ad:c7:43:69:9a:49:
                    8b:30:d3:9e:f6:a8:8a:22:7d:28:40:3a:23:e3:03:
                    b1:f3:45:56:5b:e9:07:57:29:4d:19:34:51:8e:e4:
                    96:2f:ad:c5:f4:7f:a3:68:94:6f:50:c7:b9:6f:ec:
                    09:5d:4b:e2:3f:63:fd:34:81:2b:9a:82:51:76:52:
                    88:82:0b:49:82:1c:6e:30:0d:b4:6d:32:c9:d2:de:
                    11:7a:a6:2e:bb:4a:f3:b0:85:80:8e:31:ba:36:25:
                    d5:e2:3b:15:d9:6e:c2:41:0b:e1:1d:66:f4:1f:8d:
                    91:02:55:fa:d5:08:5f:37:0c:a6:6c:60:d5:b5:ce:
                    c9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:EB:3B:C6:59:39:71:3A:78:9B:22:2A:7C:72:E7:FB:67:66:F2
            X509v3 Authority Key Identifier:
                keyid:82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/82BD943EADDE8D043442C08B37EFCE567D8A3660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e352e3232302e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:f8:38:4e:ca:70:1c:68:53:71:fc:20:01:be:ed:8b:70:95:
         bb:e7:1a:9a:2b:ff:67:5e:c6:22:29:e3:9a:13:c2:66:90:29:
         ef:c2:cd:05:d5:eb:11:35:2b:24:61:26:3e:0c:74:15:32:bd:
         21:61:6c:c7:41:6a:fd:2e:f5:9a:9f:07:4e:d7:2d:f0:c4:2b:
         d6:d3:d9:ab:ac:58:b6:f2:da:0a:ba:8b:ac:5e:41:79:2b:d0:
         17:9a:bb:10:0e:1c:bd:0f:56:55:9a:ac:53:b2:c3:f2:e5:d8:
         d1:7a:8a:61:e9:4f:85:3e:b6:34:5b:1a:a0:fd:8e:d5:a2:ac:
         c2:b2:ce:63:40:70:ee:c4:dd:63:f9:dd:cd:d3:ec:d6:e4:d0:
         89:3a:6f:07:84:3a:74:dc:f6:4b:f0:4d:ad:0b:15:dc:8e:43:
         29:67:fc:a2:12:1e:43:3b:62:4a:ad:e0:57:da:67:45:48:ca:
         62:dc:b2:01:05:48:17:9f:5e:36:f0:f8:8f:78:41:61:8b:4e:
         6c:9e:d0:de:01:a8:3e:de:e7:cb:32:d4:44:6d:ed:e3:2b:a3:
         5c:15:4b:47:73:6e:39:b7:9a:3f:dd:32:04:e2:3f:46:48:37:
         f3:01:b9:72:c5:14:e3:39:b5:87:bb:09:a4:dd:35:fb:18:5a:
         88:72:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:32 2025 by rpki-client