Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31332e302f32342d3234203d3e20323639353637.roa
File:                     34352e3138382e31332e302f32342d3234203d3e20323639353637.roa (raw, json)
Hash identifier:          +cIoLpRG99hVzT+qQAf0lWOmf4A/9/rRqQ+erXK8GWs=
Subject key identifier:   58:60:2D:FA:E7:23:03:44:87:C9:DD:B1:49:AB:95:F2:95:64:08:AE
Certificate issuer:       /CN=9D5B3059BB98435A876805A73F362F594F73CE08
Certificate serial:       24EC2B34FB884FE5CB4B7FFC6EDDFA8B7CDA9460
Authority key identifier: 9D:5B:30:59:BB:98:43:5A:87:68:05:A7:3F:36:2F:59:4F:73:CE:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5B3059BB98435A876805A73F362F594F73CE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31332e302f32342d3234203d3e20323639353637.roa
Signing time:             Wed 18 Jun 2025 20:20:51 +0000
ROA not before:           Wed 18 Jun 2025 20:15:51 +0000
ROA not after:            Wed 17 Jun 2026 20:20:51 +0000
asID:                     269567
IP address blocks:        45.188.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ec:2b:34:fb:88:4f:e5:cb:4b:7f:fc:6e:dd:fa:8b:7c:da:94:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D5B3059BB98435A876805A73F362F594F73CE08
        Validity
            Not Before: Jun 18 20:15:51 2025 GMT
            Not After : Jun 17 20:20:51 2026 GMT
        Subject: CN=58602DFAE723034487C9DDB149AB95F2956408AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:db:fe:c0:c7:7d:00:da:7f:f5:78:c7:85:
                    18:79:7a:37:5b:d4:cf:cc:ac:df:dc:c7:ac:76:be:
                    ca:5d:30:d7:f2:58:98:54:69:ad:df:42:ee:f5:17:
                    5b:76:e6:a4:d3:e7:6e:88:33:47:3f:88:3e:46:7e:
                    3c:48:1a:17:63:70:b5:3c:6b:b4:57:31:2f:f0:5c:
                    8b:48:53:a5:b6:1b:0f:81:36:c1:f8:40:99:ad:af:
                    00:88:1f:58:d1:77:83:96:d0:88:bd:e8:17:b7:df:
                    21:eb:45:90:5e:8f:1b:81:33:43:b3:3c:4f:82:38:
                    cd:61:1a:95:4a:75:99:34:da:5d:6d:58:cb:cf:d1:
                    ae:49:2a:37:77:27:18:d7:f7:d8:ce:89:d3:2a:47:
                    9f:8e:ca:02:2b:db:66:17:16:ca:8c:af:d4:06:35:
                    da:da:5e:54:31:ca:a7:1a:2b:c7:e1:90:eb:de:40:
                    66:32:b2:71:e0:a9:96:2d:ad:ca:f2:ae:0e:d0:4d:
                    a0:06:73:27:dd:e4:1e:a8:ee:fa:92:2a:f0:13:c4:
                    fa:2f:50:1c:2b:95:f2:e5:31:61:aa:7a:97:4c:4d:
                    bc:a6:2e:37:16:bc:83:58:e5:09:27:38:fd:16:d5:
                    74:56:db:7d:28:cb:71:95:e4:93:b8:09:e1:cd:27:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:60:2D:FA:E7:23:03:44:87:C9:DD:B1:49:AB:95:F2:95:64:08:AE
            X509v3 Authority Key Identifier:
                keyid:9D:5B:30:59:BB:98:43:5A:87:68:05:A7:3F:36:2F:59:4F:73:CE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/9D5B3059BB98435A876805A73F362F594F73CE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5B3059BB98435A876805A73F362F594F73CE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31332e302f32342d3234203d3e20323639353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:24:e7:27:ed:74:2c:be:bd:ee:65:40:79:a6:e1:d0:24:cb:
         ea:f2:b6:fa:74:04:6f:35:e2:8b:2f:18:31:55:5d:e4:09:9a:
         67:d9:9a:99:a5:8c:d3:ee:7c:ab:cf:cd:c9:b6:21:55:d5:56:
         b8:ad:cc:98:93:c5:41:e4:94:2c:fa:54:f0:59:2b:94:21:a2:
         c3:2f:44:a9:c6:5f:1c:ba:27:d9:05:e3:81:bf:40:a4:44:d8:
         79:89:5e:e8:b7:54:42:4f:f3:4c:66:b9:37:1c:09:4b:6a:99:
         4f:5c:21:be:25:27:da:2b:41:f5:79:55:90:87:23:fa:e0:80:
         1f:2a:76:2c:d3:1e:3c:3a:4d:c1:06:c9:84:7b:d6:5f:19:c4:
         88:74:f9:71:9c:27:33:da:c8:88:c1:be:36:73:76:3f:63:3a:
         36:61:c3:5c:36:51:91:87:a4:37:f4:b8:4c:c4:58:db:ab:26:
         16:f6:50:7c:e0:b6:04:55:9b:fe:09:84:a7:b7:76:94:fd:dc:
         de:e2:10:8c:16:5b:62:c5:f3:21:e9:95:5a:ef:75:1a:46:a7:
         9f:d5:92:b7:cd:1c:05:6f:51:36:a8:8f:db:3e:f8:3f:61:95:
         fe:1f:c9:ae:5e:ea:7f:d3:c9:8d:55:dd:e9:60:25:b1:81:32:
         8c:1a:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:56:09 2025 by rpki-client