Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31372e302f32342d3234203d3e20323638343436.roa
File:                     34352e3136312e31372e302f32342d3234203d3e20323638343436.roa (raw, json)
Hash identifier:          Pwgd6MsJww5Fx4SaCeg0SDZdp82fszo7iicJv3ejyDc=
Subject key identifier:   BE:0A:4B:A1:3E:D2:F6:67:CB:63:81:6A:94:13:DC:50:98:C1:56:16
Certificate issuer:       /CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
Certificate serial:       56E2A65416878A79F275232D9681FEF96F8C9E5F
Authority key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31372e302f32342d3234203d3e20323638343436.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     268446
IP address blocks:        45.161.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e2:a6:54:16:87:8a:79:f2:75:23:2d:96:81:fe:f9:6f:8c:9e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=BE0A4BA13ED2F667CB63816A9413DC5098C15616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d8:f2:db:51:80:98:ec:32:e0:cb:ee:f9:a3:
                    59:f8:5a:54:ca:7a:ed:88:f5:77:69:cc:46:b0:d9:
                    fb:5e:82:b0:69:20:13:c6:b0:bc:23:bf:f5:53:03:
                    6b:02:52:ab:0e:6f:f4:6d:0b:9a:50:52:96:e2:29:
                    28:a9:82:ac:03:70:73:3c:3b:6f:a7:73:96:05:0d:
                    d6:86:0d:10:d0:11:c1:83:20:54:ed:5d:0d:cb:a3:
                    df:cd:a0:55:29:90:c3:fa:18:38:85:01:50:80:e5:
                    41:d0:32:1e:ea:0f:2f:4f:f1:f1:93:46:24:de:d8:
                    6c:76:cf:47:55:5d:f7:1b:d4:cd:47:72:61:fe:f6:
                    4a:0f:0e:65:9e:3b:fe:27:00:f5:8e:66:20:ed:2c:
                    bb:5c:98:91:b6:fc:3a:42:0c:77:80:db:01:98:28:
                    92:7b:78:e2:70:c0:73:11:57:5a:a8:3a:ba:38:eb:
                    d5:a7:00:05:53:63:b0:6f:01:48:fa:6a:73:8d:56:
                    cb:7f:dd:3e:42:73:df:4e:ec:b6:dd:64:3c:0e:b0:
                    0e:54:2f:ef:e5:7a:46:c5:19:9e:0a:12:9b:7e:a1:
                    33:d5:3f:17:6b:b0:d9:d4:ab:32:61:29:5e:4d:e8:
                    e0:00:b9:f1:ff:52:61:af:3c:e9:e8:17:01:fe:25:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0A:4B:A1:3E:D2:F6:67:CB:63:81:6A:94:13:DC:50:98:C1:56:16
            X509v3 Authority Key Identifier:
                keyid:D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31372e302f32342d3234203d3e20323638343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:fb:92:93:87:10:89:2b:23:33:4a:e3:80:ef:58:5e:fc:39:
         32:6d:5c:8f:45:4f:cd:84:9c:7f:45:e9:63:99:10:35:e3:59:
         67:d4:63:46:86:27:de:94:bc:86:3c:b1:ad:89:fe:8b:e5:f3:
         eb:ee:60:3f:30:8a:29:38:05:9d:cd:c1:55:36:27:12:d2:80:
         c2:d1:3e:48:44:6b:c7:7d:b0:4f:26:3a:93:b9:40:95:05:57:
         e8:5b:38:16:e6:0c:c3:05:fc:f0:16:1b:f5:65:65:8e:df:3c:
         14:52:d7:89:72:4c:6e:5f:c2:a9:d6:d1:48:3f:6e:28:ce:19:
         f3:af:51:4f:8c:86:91:4e:5c:35:5c:50:74:2f:2e:45:27:29:
         10:be:e1:f8:24:56:4e:4d:21:b4:7d:65:4a:1f:07:36:22:88:
         5f:2b:3f:05:91:04:bd:15:5b:24:80:89:d7:0d:6d:50:a1:77:
         fb:0b:d2:fb:bb:51:92:1e:29:ea:c2:12:e4:06:18:13:d1:4c:
         b0:95:48:49:b4:b7:04:97:d1:bd:d5:b5:71:ef:71:23:c6:cb:
         9a:d1:42:40:3e:50:a9:f4:1c:58:f8:14:5d:52:6a:01:64:d5:
         a2:fb:1c:dc:79:2e:7a:be:35:39:54:ed:9c:6b:28:f2:62:41:
         a7:4c:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:51 2025 by rpki-client