Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/34352e3138352e31322e302f32322d3332203d3e20323639333532.roa
File:                     34352e3138352e31322e302f32322d3332203d3e20323639333532.roa (raw, json)
Hash identifier:          g2yEpGlNjoFI3JsTurkpdOthMPOaJlYwhxrea+xH5ZA=
Subject key identifier:   69:08:22:4D:54:3C:53:11:76:8A:FA:6C:6C:B6:F0:CC:85:F0:5B:D8
Certificate issuer:       /CN=C262C51AA4FA96E5486AC82A3D77C9C25E538063
Certificate serial:       658D5AE123FF3B4CB3A76DABC5BDEC7594ADAA37
Authority key identifier: C2:62:C5:1A:A4:FA:96:E5:48:6A:C8:2A:3D:77:C9:C2:5E:53:80:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C262C51AA4FA96E5486AC82A3D77C9C25E538063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/34352e3138352e31322e302f32322d3332203d3e20323639333532.roa
Signing time:             Mon 17 Mar 2025 17:03:42 +0000
ROA not before:           Mon 17 Mar 2025 16:58:42 +0000
ROA not after:            Mon 16 Mar 2026 17:03:42 +0000
asID:                     269352
IP address blocks:        45.185.12.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8d:5a:e1:23:ff:3b:4c:b3:a7:6d:ab:c5:bd:ec:75:94:ad:aa:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C262C51AA4FA96E5486AC82A3D77C9C25E538063
        Validity
            Not Before: Mar 17 16:58:42 2025 GMT
            Not After : Mar 16 17:03:42 2026 GMT
        Subject: CN=6908224D543C5311768AFA6C6CB6F0CC85F05BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:df:08:a3:55:71:82:06:69:af:7d:80:bb:
                    29:a9:37:6b:73:c0:51:38:ef:13:af:ec:25:bf:07:
                    a9:42:7e:e2:fb:d4:0a:64:f4:8a:ae:2c:47:d7:ed:
                    a8:43:8a:04:9b:ae:58:98:a4:5b:e2:cd:a5:25:c3:
                    09:3d:8a:52:87:21:bd:bf:25:18:42:77:51:a4:03:
                    7d:75:4f:6f:9a:7d:89:18:98:ca:75:7d:96:d1:c7:
                    8a:7f:b2:b6:17:de:08:7f:c7:c5:a2:c6:1e:0c:ef:
                    28:3d:a0:69:3a:a6:2d:1b:6b:f3:c8:b5:48:a4:5a:
                    b3:6b:94:50:9a:8b:32:b1:9f:4d:95:bb:4d:2a:b3:
                    4b:5f:c3:12:8f:1e:95:30:56:5e:af:c9:af:b9:17:
                    64:83:38:0f:13:84:38:32:0e:f3:59:32:9b:82:d7:
                    ed:d4:33:ed:6b:73:70:42:bd:31:67:5d:f0:e8:2a:
                    15:ec:6d:f0:79:76:1f:9f:94:fd:ad:c7:16:39:ea:
                    2c:38:94:ea:aa:f2:da:a7:2c:58:25:28:c7:99:83:
                    0d:2b:ff:8e:3b:72:03:9e:b3:07:45:23:9a:30:55:
                    0c:d2:91:cb:55:c9:b4:a1:6b:87:0e:b4:8d:e5:b8:
                    95:8e:ff:46:ee:de:10:03:2d:38:32:a0:ab:cd:ce:
                    30:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:08:22:4D:54:3C:53:11:76:8A:FA:6C:6C:B6:F0:CC:85:F0:5B:D8
            X509v3 Authority Key Identifier:
                keyid:C2:62:C5:1A:A4:FA:96:E5:48:6A:C8:2A:3D:77:C9:C2:5E:53:80:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/C262C51AA4FA96E5486AC82A3D77C9C25E538063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C262C51AA4FA96E5486AC82A3D77C9C25E538063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/34352e3138352e31322e302f32322d3332203d3e20323639333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:68:33:7a:3e:70:25:85:57:5e:55:45:c5:61:5e:7f:6f:6f:
         9f:e4:65:c6:80:4c:0c:6d:26:27:ef:81:de:9f:00:37:fb:40:
         76:55:50:31:88:a1:8f:0e:c2:57:f8:4b:3c:33:ef:cb:b3:8d:
         ef:ed:f5:38:74:ce:e4:60:ff:99:fc:ba:d0:b1:25:ec:7e:bf:
         1f:02:de:9e:5f:80:a4:5e:03:a7:f9:b4:03:a5:4b:31:4a:05:
         70:ad:b6:75:40:b2:42:41:c1:52:00:14:33:23:b6:86:a6:c1:
         97:47:0d:b7:d1:e6:ca:05:ca:06:5f:cf:7a:b9:91:38:31:7f:
         a1:00:d0:6c:1d:1a:15:0c:56:8c:a9:33:b7:e0:64:77:6f:97:
         cc:8c:bf:77:e6:97:fd:4b:cc:1e:a3:69:63:a5:3b:65:76:cf:
         a5:67:7d:1a:35:7b:b0:70:4a:1f:16:c2:24:86:71:6f:3c:8f:
         4a:56:57:c0:7a:41:81:34:d9:f6:bc:5e:92:cc:75:1b:24:57:
         b2:58:17:ed:f3:2d:2e:2f:81:3c:fc:4a:fa:c6:e7:03:38:5a:
         6a:7d:db:5e:d4:e8:02:66:ae:e3:f7:df:5f:13:b1:52:ee:67:
         11:ee:f6:89:b2:38:2f:2a:d4:b7:c1:ba:ec:19:a8:22:9c:ad:
         b0:a3:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:34:48 2025 by rpki-client