Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235302e302f32332d3233203d3e20323639323435.roa
File:                     34352e3138322e3235302e302f32332d3233203d3e20323639323435.roa (raw, json)
Hash identifier:          ofsnLpZ+l+2FnqiBIrtQFcKUi64Bp2NC/Ub9yAvAVmk=
Subject key identifier:   A5:07:51:DF:D0:8D:90:34:B9:7C:F1:50:3D:82:C9:EC:4A:1B:FA:F3
Certificate issuer:       /CN=A12962D917F7F6F2BE3A3E746A8863360ABEB089
Certificate serial:       5DA20DBE7682E2BC168E2D75B9DFE0962C7C6B85
Authority key identifier: A1:29:62:D9:17:F7:F6:F2:BE:3A:3E:74:6A:88:63:36:0A:BE:B0:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A12962D917F7F6F2BE3A3E746A8863360ABEB089.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235302e302f32332d3233203d3e20323639323435.roa
Signing time:             Wed 05 Feb 2025 11:55:36 +0000
ROA not before:           Wed 05 Feb 2025 11:50:36 +0000
ROA not after:            Wed 04 Feb 2026 11:55:36 +0000
asID:                     269245
IP address blocks:        45.182.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a2:0d:be:76:82:e2:bc:16:8e:2d:75:b9:df:e0:96:2c:7c:6b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12962D917F7F6F2BE3A3E746A8863360ABEB089
        Validity
            Not Before: Feb  5 11:50:36 2025 GMT
            Not After : Feb  4 11:55:36 2026 GMT
        Subject: CN=A50751DFD08D9034B97CF1503D82C9EC4A1BFAF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:4f:f9:8e:10:07:a4:31:51:b5:14:90:59:
                    3e:8c:b0:f1:ad:ce:bc:8f:90:9e:52:9d:45:aa:ff:
                    02:b1:d3:fa:cf:0c:58:e8:ae:75:24:38:af:3f:1a:
                    f3:3a:06:e0:33:4b:a2:e4:b1:41:1f:28:9a:0d:77:
                    12:f5:a2:10:1d:2d:9f:a2:93:b4:a4:88:8a:28:c0:
                    b4:83:00:67:5c:32:75:34:42:fd:e8:26:d2:d9:bd:
                    51:9d:b1:6c:26:e6:25:7d:93:02:d3:d5:a5:64:c9:
                    07:34:3d:fe:8e:0c:9b:60:c5:19:89:ff:8f:e6:c1:
                    b1:95:e0:d8:b4:44:34:b1:f4:0f:43:10:29:4d:5a:
                    b0:9d:7f:bf:41:38:61:2d:92:f0:83:a7:88:b6:da:
                    60:2e:6b:ed:87:e3:73:66:99:13:1f:ed:64:f1:52:
                    69:1e:c8:94:2e:67:14:45:58:79:a6:9c:ba:f5:b4:
                    f1:b6:36:77:d0:53:b3:f3:66:66:31:db:2d:43:51:
                    93:93:7d:82:d3:b1:d6:49:1e:79:3f:81:8b:d6:85:
                    46:68:56:b3:86:57:4c:d9:84:45:74:b6:6e:5b:0c:
                    33:c2:d7:97:cd:a0:a0:59:4b:16:b0:be:e6:0b:b0:
                    a5:73:08:d6:eb:17:8b:00:19:bd:02:83:04:9b:a4:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:07:51:DF:D0:8D:90:34:B9:7C:F1:50:3D:82:C9:EC:4A:1B:FA:F3
            X509v3 Authority Key Identifier:
                keyid:A1:29:62:D9:17:F7:F6:F2:BE:3A:3E:74:6A:88:63:36:0A:BE:B0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/A12962D917F7F6F2BE3A3E746A8863360ABEB089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A12962D917F7F6F2BE3A3E746A8863360ABEB089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235302e302f32332d3233203d3e20323639323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:89:bb:e6:44:37:3e:1d:dd:b9:b5:d3:13:d4:11:99:02:19:
         72:b1:c6:56:ae:cf:af:f9:7d:4d:05:74:c8:1c:c8:33:7d:4e:
         0e:37:26:8b:b8:bb:c9:e6:0b:6e:20:13:bd:99:f9:da:5c:40:
         fa:3f:52:df:99:74:6e:09:85:9a:38:69:65:03:b2:9d:41:73:
         ca:ee:9b:1e:3a:19:cb:e4:3c:51:06:cb:d8:85:1c:07:7a:39:
         eb:5a:33:54:70:78:ac:bf:ad:b2:1c:d7:24:18:41:06:5b:63:
         61:82:71:a0:cf:20:55:3a:e7:33:05:d0:77:00:bf:ac:7c:6a:
         95:a4:bf:d0:e3:9b:a0:42:5a:f8:99:fd:17:6d:ba:b9:34:cc:
         ef:f9:53:83:9e:f4:85:85:50:36:63:37:da:08:89:b2:55:fc:
         54:bc:5e:9f:88:2e:69:51:74:96:0d:53:79:fd:30:e0:a4:09:
         ce:16:b2:f9:ee:81:96:fc:d5:92:30:35:f8:43:0d:80:d1:f4:
         96:25:bf:f9:62:16:0d:2a:7d:54:9f:c4:80:d7:de:4d:d8:5e:
         0a:29:85:47:57:1f:ea:6b:7e:25:00:34:8c:dc:a9:bd:8e:8a:
         ec:94:a6:54:fc:8e:f9:a2:c0:ae:ef:b4:73:f9:b4:aa:de:53:
         af:9e:a6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:58:49 2025 by rpki-client