Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/34352e3137382e32342e302f32322d3234203d3e20323639303136.roa
File:                     34352e3137382e32342e302f32322d3234203d3e20323639303136.roa (raw, json)
Hash identifier:          ANDOD2Y20o/bn9AtcP6xKbuWzBdF87/cZuievyIe0QM=
Subject key identifier:   6A:8D:BA:5F:A8:F2:6D:74:D3:0B:24:0B:D5:81:D7:20:D4:9A:4F:B0
Certificate issuer:       /CN=5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC
Certificate serial:       5F62DC77846088031A2A2608797EEA1C31A96F95
Authority key identifier: 5B:2F:E1:79:A6:3E:B0:64:2B:E3:37:4D:4C:06:C1:F3:54:AC:BE:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/34352e3137382e32342e302f32322d3234203d3e20323639303136.roa
Signing time:             Fri 27 Dec 2024 20:57:24 +0000
ROA not before:           Fri 27 Dec 2024 20:52:24 +0000
ROA not after:            Fri 26 Dec 2025 20:57:24 +0000
asID:                     269016
IP address blocks:        45.178.24.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:62:dc:77:84:60:88:03:1a:2a:26:08:79:7e:ea:1c:31:a9:6f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC
        Validity
            Not Before: Dec 27 20:52:24 2024 GMT
            Not After : Dec 26 20:57:24 2025 GMT
        Subject: CN=6A8DBA5FA8F26D74D30B240BD581D720D49A4FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:19:49:bd:c3:1e:bc:84:0d:1d:e7:37:4c:
                    d4:2e:4f:6a:46:62:81:28:62:dd:bc:48:f4:50:38:
                    3c:ce:99:f3:05:fa:ee:7b:28:16:bb:0e:51:58:60:
                    6a:3a:76:1c:3f:e5:10:8e:7e:ea:1d:7e:6e:0a:d1:
                    32:21:93:f4:a3:a1:8a:39:27:3e:ea:41:71:81:fc:
                    16:c8:b1:f6:33:35:f7:da:28:8e:ff:cc:4b:56:13:
                    38:4d:94:9f:73:d7:4e:51:04:05:e0:7c:a9:56:ae:
                    8e:a0:dd:22:57:cf:db:f0:a6:a6:30:0d:51:6e:31:
                    0a:66:0f:24:49:bb:a7:6e:06:71:d1:97:f9:cb:a3:
                    a5:e6:8d:4c:9e:dd:d9:98:6c:45:0a:3e:8b:85:e0:
                    d8:0e:21:77:d3:03:a2:ce:a0:53:7f:e2:16:91:5c:
                    d7:60:54:50:78:d6:3b:6e:01:2c:98:db:be:65:15:
                    ac:17:0e:13:30:52:3a:05:bf:27:43:ae:0c:87:32:
                    6b:b7:d0:cc:3c:ea:57:d0:33:45:7f:cc:7d:e8:38:
                    ca:0d:e8:10:38:54:4e:8c:4d:45:26:83:b3:e3:03:
                    12:22:27:de:46:d6:9e:27:48:79:64:39:48:4b:62:
                    09:9d:64:04:01:27:a0:70:22:21:72:ed:e0:6d:55:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8D:BA:5F:A8:F2:6D:74:D3:0B:24:0B:D5:81:D7:20:D4:9A:4F:B0
            X509v3 Authority Key Identifier:
                keyid:5B:2F:E1:79:A6:3E:B0:64:2B:E3:37:4D:4C:06:C1:F3:54:AC:BE:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/34352e3137382e32342e302f32322d3234203d3e20323639303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:84:71:a6:a4:31:fd:bf:47:45:d1:ef:c4:41:f5:b5:f4:bd:
         8f:eb:a7:a7:0a:54:73:42:af:48:e0:fc:4d:fd:75:b4:6c:a6:
         5c:43:ce:33:d2:c5:8d:6a:4d:2b:fe:9c:bc:7f:16:c5:88:de:
         31:4c:b8:a8:ca:f2:24:42:e8:03:33:ea:fb:3a:ff:ee:22:23:
         6e:96:3c:cc:e3:8e:ec:77:aa:fe:32:62:3c:d4:d4:71:2d:54:
         7b:fa:ed:2b:f0:32:bb:74:bc:6c:3c:4a:af:ce:19:33:70:75:
         13:55:af:dc:5f:e8:3d:80:1e:51:e0:2c:97:30:c3:52:a0:79:
         9f:b8:2a:ea:5a:c4:ce:7c:4c:4d:18:d9:81:16:e5:a8:5b:15:
         45:8d:4f:de:10:4a:ef:0c:b6:4f:79:16:9f:df:38:ce:56:22:
         d2:db:54:70:2b:ec:86:55:6b:f5:98:d2:6e:a7:12:82:0f:44:
         2d:e3:b0:b6:5d:e1:10:fa:d6:8c:90:1e:25:5e:33:6a:2a:38:
         d5:c2:85:f4:a0:1a:0b:ed:09:52:1e:07:83:09:0b:b4:06:68:
         c7:9f:51:8f:cf:1a:b1:6e:99:e8:64:af:7a:7c:5a:cd:ff:f3:
         27:57:df:95:bc:f8:4e:dc:a2:6d:88:4f:41:e4:a9:ec:54:20:
         4e:df:a2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:29:37 2025 by rpki-client