Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/34352e3233352e31382e302f32342d3234203d3e203533303632.roa
File:                     34352e3233352e31382e302f32342d3234203d3e203533303632.roa (raw, json)
Hash identifier:          m3C0KU9caPr5iWwG9htqAX4eU8Lw0IUM5zKQ8n7vOvo=
Subject key identifier:   61:54:76:13:22:2B:40:1B:C4:88:B4:FC:F2:A8:59:CF:4A:90:15:2E
Certificate issuer:       /CN=FD7279E1669A4C13E1BF1D2511A91E03406FA0E2
Certificate serial:       1B15B1966C016601D644849E7A596A12D01537C6
Authority key identifier: FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/34352e3233352e31382e302f32342d3234203d3e203533303632.roa
Signing time:             Mon 10 Feb 2025 19:17:46 +0000
ROA not before:           Mon 10 Feb 2025 19:12:46 +0000
ROA not after:            Mon 09 Feb 2026 19:17:46 +0000
asID:                     53062
IP address blocks:        45.235.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:15:b1:96:6c:01:66:01:d6:44:84:9e:7a:59:6a:12:d0:15:37:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD7279E1669A4C13E1BF1D2511A91E03406FA0E2
        Validity
            Not Before: Feb 10 19:12:46 2025 GMT
            Not After : Feb  9 19:17:46 2026 GMT
        Subject: CN=61547613222B401BC488B4FCF2A859CF4A90152E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:13:09:c4:2f:1c:07:66:b9:57:f5:68:fd:
                    89:ea:09:ab:b3:82:29:62:45:10:3f:e6:24:48:b0:
                    79:a1:0a:80:e5:4d:8a:d7:c0:57:e7:f4:5d:59:63:
                    3b:0c:fb:fb:e6:5d:57:94:3e:df:2e:05:a1:70:d3:
                    1e:f1:bc:4d:ca:f3:a9:e6:be:20:13:1a:e0:d8:09:
                    73:f1:7d:0e:63:b4:14:45:54:97:b4:8b:a4:a1:be:
                    6f:a6:71:f6:61:58:22:55:30:2b:85:2b:c9:0f:02:
                    32:cf:b1:71:68:5e:6a:e7:9e:c1:4e:78:7f:96:e2:
                    d6:b0:71:79:01:df:2b:e6:41:4c:e3:e1:4f:f7:5a:
                    04:4a:92:8a:a1:7a:c8:b6:b7:0f:6d:74:24:69:7d:
                    58:1d:33:31:43:59:0c:db:e3:3e:ed:f3:d6:95:a0:
                    bd:52:d7:d9:66:a1:e1:26:46:28:64:72:81:06:1a:
                    da:fe:b4:00:5e:a4:2c:1f:ef:ec:a6:e3:2d:c6:f0:
                    7b:48:b3:2a:96:ac:01:cb:2c:8b:fc:7f:3f:de:ef:
                    fe:44:88:b7:9d:28:60:ec:f8:91:e3:f9:45:9f:bf:
                    7b:e7:47:cb:c1:51:37:55:3f:95:e8:62:06:71:9a:
                    2d:71:90:df:3b:bb:9f:ff:79:c5:bd:99:c0:2d:66:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:54:76:13:22:2B:40:1B:C4:88:B4:FC:F2:A8:59:CF:4A:90:15:2E
            X509v3 Authority Key Identifier:
                keyid:FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/34352e3233352e31382e302f32342d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:6e:58:2e:af:12:6e:a7:f2:2c:61:72:81:a8:f0:f6:42:36:
         f8:09:81:23:91:87:b3:eb:6c:b4:1d:9f:c7:a8:8b:e6:ea:62:
         f5:53:4f:bd:df:92:7f:66:78:9a:a3:29:e0:c5:04:45:86:ca:
         e7:5e:c9:80:64:98:e8:2f:c8:dd:34:21:9e:b6:f6:2f:2a:0d:
         41:5d:c0:dc:e6:17:e7:84:c7:9a:a7:56:21:7e:a7:2e:87:2f:
         06:84:fd:be:49:7b:4a:74:04:cd:b6:01:98:ce:a6:3f:e9:81:
         ef:63:c8:24:ec:20:d0:6e:8c:66:9e:44:2d:87:47:1c:14:ec:
         24:62:17:97:14:e8:e7:c9:76:56:0a:8f:0a:f3:24:ef:db:b6:
         f5:81:c7:b7:8d:f5:17:27:93:81:bd:71:77:5c:7c:cc:ce:2b:
         f5:ab:c4:5d:65:07:f2:3c:e6:8a:24:97:81:54:78:1c:b4:6e:
         d4:02:e3:48:d8:8b:ea:6a:bd:87:69:58:54:db:fb:2b:b4:0b:
         6a:d8:99:b8:b0:2a:f3:1b:5b:11:15:a9:3a:d6:26:5b:f4:bd:
         a0:99:b0:da:d0:0d:7e:ff:a2:0d:73:4a:b2:58:88:dc:1e:f9:
         fb:5d:18:d4:c4:82:f7:5c:e4:c8:10:28:50:0d:a0:19:d7:52:
         fd:c2:0c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:22:21 2025 by rpki-client