Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32322d3332203d3e20323731343337.roa
File:                     34352e3232352e38302e302f32322d3332203d3e20323731343337.roa (raw, json)
Hash identifier:          rklBB9JfGztGuhDi+OF8sIwXLdL8xvdu92JpQEl+kCY=
Subject key identifier:   60:AD:7B:CB:63:95:B1:C4:4B:EB:2E:4C:F5:A1:93:4E:C3:55:1A:BB
Certificate issuer:       /CN=F54A45C02B8BA402B904166FDD6AAC077CB8CAEF
Certificate serial:       38222E7E066E8D62518F4878DE13CE162E7268F7
Authority key identifier: F5:4A:45:C0:2B:8B:A4:02:B9:04:16:6F:DD:6A:AC:07:7C:B8:CA:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F54A45C02B8BA402B904166FDD6AAC077CB8CAEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32322d3332203d3e20323731343337.roa
Signing time:             Wed 29 Jan 2025 18:50:45 +0000
ROA not before:           Wed 29 Jan 2025 18:45:45 +0000
ROA not after:            Wed 28 Jan 2026 18:50:45 +0000
asID:                     271437
IP address blocks:        45.225.80.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:22:2e:7e:06:6e:8d:62:51:8f:48:78:de:13:ce:16:2e:72:68:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54A45C02B8BA402B904166FDD6AAC077CB8CAEF
        Validity
            Not Before: Jan 29 18:45:45 2025 GMT
            Not After : Jan 28 18:50:45 2026 GMT
        Subject: CN=60AD7BCB6395B1C44BEB2E4CF5A1934EC3551ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5e:85:be:13:29:30:fc:7b:c4:4f:15:9e:22:
                    a8:0e:64:d1:ed:32:3f:72:b3:90:03:00:de:b4:88:
                    9e:73:f4:d6:43:5d:95:97:e5:be:36:34:6b:d7:e3:
                    63:00:79:a2:12:9c:08:3b:fd:a4:dc:2a:3e:be:f6:
                    8d:c5:4c:82:97:dc:5a:c3:a3:99:cb:a3:5f:b7:e6:
                    5d:78:01:39:e9:63:b6:42:da:15:fa:6a:69:c9:83:
                    24:3f:d6:6a:5a:dc:85:d8:12:c8:b9:73:97:36:47:
                    b7:04:09:81:30:bb:b2:e1:94:9a:bd:f2:9f:ba:65:
                    b6:01:7b:1e:88:0f:f5:b9:eb:44:84:c3:6c:e0:fd:
                    a6:b4:39:8b:b5:e5:a4:01:e9:d6:c1:b3:da:86:16:
                    a4:49:9d:60:e7:9d:65:f1:e5:a8:ab:db:6d:09:f3:
                    42:b4:57:de:fd:39:c0:e6:dd:e2:6e:c4:63:82:a8:
                    25:e5:bb:9d:87:78:a0:6c:ab:81:3b:9b:be:c0:80:
                    6c:74:8c:e8:68:35:57:38:ed:dd:59:b0:c1:1f:de:
                    7f:64:5b:40:15:74:64:ca:b5:55:f6:a7:82:65:13:
                    28:f4:6e:76:e2:03:47:7a:8c:2f:3f:8d:66:5f:49:
                    dc:b2:35:2b:ea:01:5c:7b:71:f3:0f:39:2b:9c:06:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AD:7B:CB:63:95:B1:C4:4B:EB:2E:4C:F5:A1:93:4E:C3:55:1A:BB
            X509v3 Authority Key Identifier:
                keyid:F5:4A:45:C0:2B:8B:A4:02:B9:04:16:6F:DD:6A:AC:07:7C:B8:CA:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/F54A45C02B8BA402B904166FDD6AAC077CB8CAEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F54A45C02B8BA402B904166FDD6AAC077CB8CAEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32322d3332203d3e20323731343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:39:17:92:b3:e1:76:88:2a:9e:c5:80:ac:05:43:9a:b4:9f:
         59:10:9b:06:f0:e7:7d:2f:e8:0a:f3:7f:af:19:82:87:55:51:
         81:9a:34:90:40:b6:f9:e2:1c:0e:27:5a:38:41:ce:60:6f:5e:
         1e:d0:16:5c:17:84:f9:3f:21:48:40:9e:ca:92:7c:54:39:a6:
         ac:1e:26:57:ce:32:13:d9:34:2a:f0:09:3c:a3:dd:44:8e:1d:
         4f:e7:3f:df:ba:7c:aa:bd:d0:d6:8c:fa:2a:ed:5a:56:1d:43:
         45:d5:a3:40:d7:c0:b4:2b:81:61:56:d3:b4:e0:11:af:1c:f4:
         5b:f9:a8:77:ff:92:ba:38:91:68:c0:91:e6:ca:f9:92:f4:47:
         a6:99:27:cd:70:4f:0d:ec:c2:99:ab:45:db:17:93:e2:b0:10:
         6d:64:93:eb:dc:47:3f:24:45:d9:8d:fc:ab:56:ea:ca:d3:cc:
         a8:c7:26:bc:c3:ad:ce:44:30:d6:b2:c5:4f:0d:49:fd:90:4d:
         88:d7:af:0e:2b:c5:b9:09:da:a2:b0:3e:89:04:b4:aa:05:b4:
         34:6b:b6:42:70:cc:74:7b:d7:e2:88:95:65:ae:d6:33:a2:94:
         ce:6d:85:a2:b4:60:27:84:30:99:0b:86:73:f1:5b:47:30:51:
         00:9b:b8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:18:59 2025 by rpki-client