Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31352e302f32342d3234203d3e20323639353637.roa
File:                     34352e3138382e31352e302f32342d3234203d3e20323639353637.roa (raw, json)
Hash identifier:          BB+yO2saUUDuGQZxw99JAvSCBTbkTebW77A/53Wl97I=
Subject key identifier:   6C:D4:32:CD:8F:0C:18:A1:57:68:6A:3E:04:2D:98:A5:00:59:9A:99
Certificate issuer:       /CN=9D5B3059BB98435A876805A73F362F594F73CE08
Certificate serial:       3D44C274AAB2DA606D6072F94490D579EADE2B52
Authority key identifier: 9D:5B:30:59:BB:98:43:5A:87:68:05:A7:3F:36:2F:59:4F:73:CE:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5B3059BB98435A876805A73F362F594F73CE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31352e302f32342d3234203d3e20323639353637.roa
Signing time:             Wed 18 Jun 2025 20:20:54 +0000
ROA not before:           Wed 18 Jun 2025 20:15:54 +0000
ROA not after:            Wed 17 Jun 2026 20:20:54 +0000
asID:                     269567
IP address blocks:        45.188.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:44:c2:74:aa:b2:da:60:6d:60:72:f9:44:90:d5:79:ea:de:2b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D5B3059BB98435A876805A73F362F594F73CE08
        Validity
            Not Before: Jun 18 20:15:54 2025 GMT
            Not After : Jun 17 20:20:54 2026 GMT
        Subject: CN=6CD432CD8F0C18A157686A3E042D98A500599A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:07:a0:e0:66:d0:e8:b5:6c:81:2c:69:e6:
                    ee:b7:58:64:d2:eb:8e:79:ef:54:97:38:e4:65:23:
                    29:9a:a6:7e:fe:ee:6f:00:ff:f8:e0:1d:f7:57:1a:
                    2a:af:1d:ae:49:3e:ee:05:eb:d5:1b:58:2d:66:35:
                    15:89:ce:f7:1b:d2:4b:ec:d7:b7:eb:6c:4f:e7:f3:
                    b1:61:3e:1a:06:6d:61:b5:7d:94:97:19:ea:29:07:
                    44:0b:80:fb:d2:6c:55:5a:8a:bc:4b:cd:d1:ec:42:
                    45:50:fd:c8:11:7e:be:28:2a:15:2b:5c:24:5f:2e:
                    45:92:18:07:30:18:7a:8d:3c:be:3c:45:66:26:30:
                    b0:c3:28:96:73:c1:b8:b9:fe:49:64:54:95:61:df:
                    73:33:00:d8:c2:36:99:63:51:d7:aa:ff:93:18:29:
                    3b:e5:82:d3:5b:9d:61:59:40:0c:10:b4:7a:df:71:
                    55:e8:fe:82:b3:cb:21:48:56:c0:5c:48:d8:8b:a8:
                    34:62:c3:89:02:e1:68:e0:81:85:95:62:f2:09:00:
                    20:b0:94:bb:85:be:ec:41:3b:17:96:09:cf:4d:b4:
                    6a:f1:e6:e7:54:38:a4:af:0f:2a:e3:0b:1e:29:f7:
                    32:20:e1:f2:6c:9d:dc:e9:e3:ac:aa:8f:f7:9b:2c:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D4:32:CD:8F:0C:18:A1:57:68:6A:3E:04:2D:98:A5:00:59:9A:99
            X509v3 Authority Key Identifier:
                keyid:9D:5B:30:59:BB:98:43:5A:87:68:05:A7:3F:36:2F:59:4F:73:CE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/9D5B3059BB98435A876805A73F362F594F73CE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5B3059BB98435A876805A73F362F594F73CE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31352e302f32342d3234203d3e20323639353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:24:c1:f3:f2:db:e2:1e:68:2c:d4:e7:8a:ec:28:22:54:
         20:90:9f:39:01:23:fe:88:4f:f1:14:38:04:be:0b:fc:3f:50:
         a5:aa:ea:6d:29:29:4e:33:d6:76:74:f5:8a:a4:28:26:88:38:
         8e:7a:8a:52:78:64:53:84:20:95:63:dd:4f:8f:1b:9c:97:b7:
         1a:a5:e7:df:70:3c:1d:bc:e1:9d:eb:88:e1:59:16:96:aa:4d:
         c8:e9:dc:32:6f:0e:d4:30:cb:5e:81:7b:e9:b2:0e:f0:e5:27:
         c2:b1:3c:70:b5:c0:7d:e7:21:ed:b6:cf:b2:78:70:cc:ed:3a:
         06:56:93:1e:10:08:2f:29:3c:f9:1f:f3:a3:bd:b4:c3:ac:32:
         d8:f7:ab:bd:6d:33:e0:28:fb:3c:cf:85:fe:5d:03:0a:df:2f:
         af:e7:ec:97:84:ab:9f:5f:9e:7b:bf:b2:00:db:b8:17:e8:b8:
         67:94:5a:81:79:58:8a:3a:19:83:b7:88:2b:09:32:95:1f:26:
         6d:e3:b8:96:85:a4:9b:2e:0e:ff:96:56:d8:30:6f:9a:f4:3f:
         f7:9f:d5:a8:72:f4:54:54:85:4b:7e:26:0d:d1:58:00:7b:4f:
         cf:42:9d:5c:16:33:6f:86:eb:63:23:52:86:b1:c2:98:bc:19:
         12:f1:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 12:07:29 2025 by rpki-client