Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa
File:                     34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa (raw, json)
Hash identifier:          PXu69AW8ogshnfJ9lVdjONGi+NM820wd5Z219l9oFig=
Subject key identifier:   B8:23:84:89:9C:9E:C5:FE:10:29:B9:CF:1C:83:9D:89:47:E2:17:B5
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       31B17AEFB845506D9B058D3231B4A8005ECC5C5C
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa
Signing time:             Thu 06 Mar 2025 04:00:07 +0000
ROA not before:           Thu 06 Mar 2025 03:55:07 +0000
ROA not after:            Thu 05 Mar 2026 04:00:07 +0000
asID:                     269373
IP address blocks:        45.185.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b1:7a:ef:b8:45:50:6d:9b:05:8d:32:31:b4:a8:00:5e:cc:5c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: Mar  6 03:55:07 2025 GMT
            Not After : Mar  5 04:00:07 2026 GMT
        Subject: CN=B82384899C9EC5FE1029B9CF1C839D8947E217B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:98:8f:c2:22:f3:71:3e:a3:c9:39:c8:26:
                    62:6b:8c:8c:ba:22:b6:25:79:09:0c:34:a3:32:c6:
                    b4:fd:f7:dc:8c:55:2d:e3:99:8b:d8:f2:ca:27:bb:
                    ce:6e:60:32:df:5e:32:dd:18:2b:a6:97:7d:03:d6:
                    6c:60:56:24:6c:59:7b:9f:31:31:d3:d5:62:39:0e:
                    09:71:af:68:d5:1d:55:7e:c9:30:d4:46:5c:cf:c8:
                    8f:d7:eb:01:ef:ec:74:35:fe:79:76:e5:65:c3:f5:
                    bb:dd:2d:8d:1f:36:e9:31:32:06:ec:c2:e5:ab:0b:
                    fe:5d:bc:4a:19:0d:d6:f4:83:8f:74:2e:48:5a:40:
                    eb:f2:6f:c7:19:bb:71:85:f1:a3:f9:2b:16:9c:e8:
                    d2:51:ce:ac:f0:41:f0:3f:f7:0f:70:9c:08:d6:82:
                    dc:06:4c:b7:13:9d:e0:16:30:9d:b8:61:d8:76:bc:
                    0b:7e:5a:25:75:e6:d1:63:94:a0:01:95:df:7d:b7:
                    e5:a7:5f:1b:c4:18:ca:6e:41:3c:15:a9:5e:44:e3:
                    ba:be:50:ee:9a:85:57:12:d3:de:e1:0a:eb:f9:71:
                    13:6d:d9:2e:cc:51:60:21:f6:d4:66:0e:88:27:1e:
                    f8:67:5d:94:45:ff:ff:e7:ec:e6:3a:3c:9d:4f:69:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:23:84:89:9C:9E:C5:FE:10:29:B9:CF:1C:83:9D:89:47:E2:17:B5
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:16:37:94:94:67:26:7e:09:10:42:bb:92:41:e1:e7:65:7b:
         ca:3e:31:dc:2b:ca:3d:ca:f8:94:3a:30:37:8f:2f:e8:5d:b6:
         7c:da:2b:da:8d:a3:17:4b:40:13:ce:5d:3d:d3:c2:ac:67:b7:
         3a:41:17:b7:a9:b8:b3:47:3c:ee:99:f5:64:5e:11:f4:d5:42:
         8c:4c:bf:8b:10:2c:34:f7:28:5a:ea:88:6a:ef:fb:ad:fa:01:
         37:9d:95:6d:bd:3f:09:ab:27:e3:e0:24:f0:36:18:db:66:6c:
         65:ce:0e:4a:85:37:a2:bc:3a:b3:f8:27:a4:73:e4:cf:f9:b5:
         25:43:e9:8d:b7:60:3d:81:82:b4:82:6d:de:8d:b8:f2:2a:d9:
         5b:f0:84:ed:0e:69:55:79:3b:8f:f6:9f:c5:3c:b0:18:63:82:
         f7:e7:67:58:34:a5:6b:f2:60:86:15:54:bc:88:64:f8:ac:9a:
         df:dc:b2:a0:1d:cc:57:84:72:d9:3c:34:dd:d1:bb:3a:19:9c:
         7f:b4:96:37:77:03:2e:10:22:a8:fc:3b:cc:e4:ab:98:84:7b:
         9d:18:0c:bd:df:50:42:26:49:82:a7:91:7b:df:4e:ec:48:08:
         0f:c2:1f:20:9e:f9:5f:ae:44:70:b2:3e:0e:78:4f:f7:f6:9b:
         0e:08:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:23:20 2025 by rpki-client