Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/34352e3138372e3137322e302f32342d3332203d3e20323639343734.roa
File:                     34352e3138372e3137322e302f32342d3332203d3e20323639343734.roa (raw, json)
Hash identifier:          FOjSHZhVkChaTU8uYEScZ3YsaYpKQuWLPpETFBSBDAs=
Subject key identifier:   AD:D1:41:22:38:46:6B:8A:1C:D2:73:3E:BF:23:11:5C:22:6E:3F:3C
Certificate issuer:       /CN=E072164F96709DE0BAF95CDD98A5A379CC96B3DA
Certificate serial:       6A57A8191C1DA5904351C5E1F1CCE5ECDE6E8E8F
Authority key identifier: E0:72:16:4F:96:70:9D:E0:BA:F9:5C:DD:98:A5:A3:79:CC:96:B3:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E072164F96709DE0BAF95CDD98A5A379CC96B3DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/34352e3138372e3137322e302f32342d3332203d3e20323639343734.roa
Signing time:             Fri 05 Apr 2024 21:52:15 +0000
ROA not before:           Fri 05 Apr 2024 21:47:15 +0000
ROA not after:            Fri 04 Apr 2025 21:52:15 +0000
asID:                     269474
IP address blocks:        45.187.172.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:57:a8:19:1c:1d:a5:90:43:51:c5:e1:f1:cc:e5:ec:de:6e:8e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E072164F96709DE0BAF95CDD98A5A379CC96B3DA
        Validity
            Not Before: Apr  5 21:47:15 2024 GMT
            Not After : Apr  4 21:52:15 2025 GMT
        Subject: CN=ADD1412238466B8A1CD2733EBF23115C226E3F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:97:d9:5f:1b:87:ca:dc:31:1c:20:93:88:
                    2d:bf:a6:30:57:ec:f1:c3:4b:c5:38:39:7d:af:6b:
                    ae:c0:4f:da:d6:96:31:fe:e1:e0:83:9b:83:5e:14:
                    cd:bb:6e:fc:95:0b:9e:d3:d4:a1:c8:01:f8:17:3e:
                    51:33:75:9e:10:38:08:e3:f7:6f:31:70:46:cc:77:
                    2b:64:49:3b:97:6f:13:ba:b0:dc:a6:1a:c5:b2:76:
                    66:a7:fe:c6:f8:41:65:40:ac:04:a2:3e:8b:4f:45:
                    d4:5e:02:b2:2e:7e:71:a5:77:5d:cc:cd:c9:79:54:
                    88:81:80:58:cd:d4:74:af:52:69:ab:4b:59:15:d5:
                    3a:11:b4:27:b2:db:8b:23:12:0c:23:f3:da:47:81:
                    33:50:58:38:bd:fa:cb:d3:64:c0:5f:25:4d:7c:fa:
                    9f:6a:d2:e0:c1:09:ad:80:3a:82:46:8b:38:c8:54:
                    23:cb:e0:e2:37:08:12:62:db:08:58:6a:79:ce:c7:
                    92:54:8b:9d:8e:25:28:7e:97:4d:4c:22:e1:b7:9a:
                    a0:d9:ee:0f:ba:b1:ac:bc:3b:77:2c:4c:1b:36:d4:
                    26:1b:77:b8:b5:ce:84:4d:37:58:7e:0d:7a:04:75:
                    c1:d9:aa:a3:10:86:3c:a3:5f:f3:b0:52:89:24:42:
                    67:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D1:41:22:38:46:6B:8A:1C:D2:73:3E:BF:23:11:5C:22:6E:3F:3C
            X509v3 Authority Key Identifier:
                keyid:E0:72:16:4F:96:70:9D:E0:BA:F9:5C:DD:98:A5:A3:79:CC:96:B3:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/E072164F96709DE0BAF95CDD98A5A379CC96B3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E072164F96709DE0BAF95CDD98A5A379CC96B3DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/34352e3138372e3137322e302f32342d3332203d3e20323639343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:81:92:ff:b4:47:18:50:96:72:37:8c:4f:15:de:0e:31:cc:
         e8:a7:ae:f7:66:e3:25:3f:9a:30:6e:4c:ad:77:ce:b7:4a:72:
         a8:73:28:93:c2:46:aa:db:cc:9a:b1:9b:99:94:a4:98:9e:79:
         56:65:f4:3e:a3:ad:fe:8a:be:5c:af:ec:73:a6:0d:4f:52:e4:
         6c:5f:98:32:71:f1:9b:a6:21:4e:cb:7d:d5:6b:46:6d:12:ac:
         3c:58:09:de:66:b7:3e:f1:84:23:6f:ab:5a:ff:4e:99:dc:ef:
         93:13:cf:d0:43:30:4b:90:4f:fc:51:90:19:de:b7:f5:29:01:
         0a:82:f1:c5:40:8b:d1:1b:f4:cf:dd:d1:86:da:1e:99:1b:06:
         16:61:5b:3a:f1:87:e5:b6:06:e8:8f:75:95:38:7f:83:7f:3d:
         8e:df:9e:d4:39:e7:9b:a7:80:5f:15:ab:6b:24:9c:f1:03:55:
         dd:64:9e:78:7a:2b:c2:b5:6d:38:20:af:d9:7b:44:df:04:48:
         89:83:50:e7:5e:a4:8f:b1:fe:bf:57:bc:3e:06:3e:79:30:0a:
         de:9e:d8:a2:e7:89:35:b3:3e:ac:4f:02:af:8b:f8:12:dc:c4:
         28:10:72:8e:db:c2:a9:d9:e9:42:b4:6b:8c:d1:01:89:7a:b9:
         62:56:e5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:34:34 2025 by rpki-client