Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/34352e3138352e31322e302f32322d3234203d3e20323639333532.roa
File:                     34352e3138352e31322e302f32322d3234203d3e20323639333532.roa (raw, json)
Hash identifier:          eh2m8BHtyiYaxPK2ARmCpyLQswp/vUgfbhRifQX+mQc=
Subject key identifier:   E4:96:69:1F:69:B1:F0:AE:7B:D9:EA:D7:1C:39:C9:2E:C8:D3:B8:35
Certificate issuer:       /CN=C1F6BACFF86151787C3CD823745C89593258A25A
Certificate serial:       238020422F26714DE42A5741068699E314ECEF46
Authority key identifier: C1:F6:BA:CF:F8:61:51:78:7C:3C:D8:23:74:5C:89:59:32:58:A2:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1F6BACFF86151787C3CD823745C89593258A25A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/34352e3138352e31322e302f32322d3234203d3e20323639333532.roa
Signing time:             Mon 31 Mar 2025 19:35:35 +0000
ROA not before:           Mon 31 Mar 2025 19:30:35 +0000
ROA not after:            Mon 30 Mar 2026 19:35:35 +0000
asID:                     269352
IP address blocks:        45.185.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:80:20:42:2f:26:71:4d:e4:2a:57:41:06:86:99:e3:14:ec:ef:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1F6BACFF86151787C3CD823745C89593258A25A
        Validity
            Not Before: Mar 31 19:30:35 2025 GMT
            Not After : Mar 30 19:35:35 2026 GMT
        Subject: CN=E496691F69B1F0AE7BD9EAD71C39C92EC8D3B835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:3f:80:34:53:fb:a4:d8:82:48:85:ad:70:
                    f7:26:ec:90:b9:e6:ec:bc:55:c9:3c:28:9c:ce:2b:
                    29:4b:94:12:dc:35:78:2c:95:00:98:07:eb:c3:87:
                    a1:89:81:a8:ec:11:f8:71:9f:8a:13:6d:fb:01:be:
                    ac:06:d3:d7:ee:7a:1d:aa:5e:c8:ae:12:f7:06:42:
                    16:3c:e1:0a:aa:9f:56:20:bd:b6:57:dc:e8:76:53:
                    38:4e:eb:87:8f:89:7f:6a:e5:58:0f:a6:7b:67:4e:
                    3c:ce:b4:66:75:23:67:b1:2e:0c:d0:5b:10:67:70:
                    84:72:d6:cc:70:74:c8:0a:f0:d1:80:62:08:16:b1:
                    a2:bd:dd:8a:4c:3d:bf:26:34:b6:6d:fc:87:cb:e5:
                    7f:73:46:f7:b9:3d:50:e8:8a:45:e5:69:00:59:9c:
                    4f:90:d1:89:c9:cc:3c:c0:07:8c:6c:80:75:9b:ed:
                    de:b9:82:b7:7d:cc:9c:11:95:95:85:12:59:a5:f4:
                    45:eb:c1:ec:4d:db:56:30:9e:0e:e3:f0:d2:3f:c6:
                    70:98:c3:09:55:3f:4f:67:bf:76:f1:ac:ac:10:64:
                    24:cc:ed:55:c9:e0:b9:e8:4e:b7:58:5b:c4:85:bb:
                    38:4a:57:aa:bc:cf:f0:98:0c:e9:34:03:93:b7:36:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:96:69:1F:69:B1:F0:AE:7B:D9:EA:D7:1C:39:C9:2E:C8:D3:B8:35
            X509v3 Authority Key Identifier:
                keyid:C1:F6:BA:CF:F8:61:51:78:7C:3C:D8:23:74:5C:89:59:32:58:A2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/C1F6BACFF86151787C3CD823745C89593258A25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1F6BACFF86151787C3CD823745C89593258A25A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/34352e3138352e31322e302f32322d3234203d3e20323639333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:4f:af:99:0e:18:d9:41:f3:0f:ea:2d:b4:1c:e1:6d:df:
         8e:ed:e6:18:76:44:00:14:1b:f0:59:ff:83:64:de:86:1b:eb:
         98:33:a6:f8:2b:d2:19:dc:e2:c2:e8:80:8a:70:01:7d:8e:4d:
         06:50:e0:cd:aa:bb:4d:ed:66:53:6e:b2:ec:f7:4f:5e:98:b6:
         ae:4b:6d:fe:5c:49:ba:64:29:45:c5:3b:75:fc:19:42:0c:0d:
         5a:81:b9:8f:f9:de:90:73:56:ae:e8:c6:48:f7:98:d9:99:b8:
         0a:1a:b1:fd:bd:22:f7:c7:c0:2a:73:f2:fc:24:8e:87:c1:b8:
         c2:0c:08:34:c9:b4:8f:85:b6:e0:59:f7:b7:aa:b3:da:c5:ce:
         5d:68:b0:f4:ee:63:d5:b5:71:cb:bd:8d:4c:3d:96:4d:9a:5c:
         d6:52:46:05:24:bb:24:53:06:0d:1c:b3:5b:01:1a:54:31:fe:
         fa:c3:dd:0f:9a:b6:fb:5b:2b:8b:55:81:2f:1a:c5:18:b6:3b:
         e1:3e:d9:13:70:71:47:2d:f1:a1:da:c2:1f:61:03:49:a6:5e:
         b9:78:71:f1:b0:12:6c:31:95:cb:4d:22:de:73:e9:9b:2d:d9:
         64:12:fb:87:52:c2:67:d3:dd:a7:85:a3:58:0e:8e:f6:48:dc:
         0c:e7:96:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:59:29 2025 by rpki-client