Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230302e302f32322d3233203d3e20323636313036.roa
File:                     34352e352e3230302e302f32322d3233203d3e20323636313036.roa (raw, json)
Hash identifier:          1WFpWLWvvFfErwVnHx6Cu7+8+HdOBRUFV1xWAQCwgw4=
Subject key identifier:   DB:A9:DF:A4:83:B9:75:53:99:31:63:51:FA:1B:C7:3A:8B:0F:03:5D
Certificate issuer:       /CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9
Certificate serial:       30FADBEEEA325A256D246D65A530FBEC20FF1427
Authority key identifier: 2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230302e302f32322d3233203d3e20323636313036.roa
Signing time:             Wed 18 Dec 2024 00:34:52 +0000
ROA not before:           Wed 18 Dec 2024 00:29:52 +0000
ROA not after:            Wed 17 Dec 2025 00:34:52 +0000
asID:                     266106
IP address blocks:        45.5.200.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fa:db:ee:ea:32:5a:25:6d:24:6d:65:a5:30:fb:ec:20:ff:14:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9
        Validity
            Not Before: Dec 18 00:29:52 2024 GMT
            Not After : Dec 17 00:34:52 2025 GMT
        Subject: CN=DBA9DFA483B9755399316351FA1BC73A8B0F035D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:c8:a5:bb:fb:69:68:ce:08:c5:78:c5:77:
                    81:32:f8:cd:0e:f2:87:f2:61:66:f6:34:d3:30:68:
                    b7:82:72:40:df:ee:b1:6a:0b:ee:b6:28:45:3d:8f:
                    e7:79:69:f9:eb:97:ea:a3:a0:e2:8d:d5:2a:d7:98:
                    82:16:a6:bf:7d:26:c7:b2:7e:e7:c1:fb:9f:b2:f2:
                    b8:30:27:7e:7c:db:f8:01:68:86:65:dd:c9:83:3c:
                    66:02:18:e2:45:f4:e3:e8:37:72:9c:db:4a:d6:ab:
                    0a:d0:e9:dd:60:d3:de:fd:86:fb:df:0b:e9:d4:49:
                    67:e6:86:04:9e:3c:0a:7c:98:d1:de:74:c4:67:e6:
                    70:e4:3a:2c:a4:6f:38:e0:76:53:b8:fa:e2:cd:60:
                    f7:f8:63:56:c0:fb:10:ba:df:04:53:ad:81:a9:35:
                    3c:ec:06:ef:97:16:ad:56:c6:08:ee:12:7a:0f:ea:
                    d8:ec:87:38:3d:5d:95:31:c9:a4:1b:8b:50:27:22:
                    ad:6d:22:8c:18:4b:0c:42:9f:45:8f:14:a5:0c:31:
                    35:08:c2:3c:53:3c:9f:47:4d:ea:ec:4a:3a:3c:8b:
                    8d:2a:b0:30:09:3b:00:56:56:c9:3e:a2:dc:11:fc:
                    1a:30:f0:d8:03:41:f0:a8:71:13:b2:4d:41:d3:eb:
                    a9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A9:DF:A4:83:B9:75:53:99:31:63:51:FA:1B:C7:3A:8B:0F:03:5D
            X509v3 Authority Key Identifier:
                keyid:2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230302e302f32322d3233203d3e20323636313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:5b:15:e2:10:3f:b5:25:59:98:35:43:f4:ec:5c:8f:a3:
         71:5f:19:ab:11:6c:3f:17:f2:88:48:a8:0e:cb:9a:3f:43:28:
         f8:71:6c:63:8c:5f:a7:73:d7:c3:ec:7b:a2:6a:09:c1:f4:c4:
         e3:4b:8a:6a:d2:d8:5e:e4:01:9d:1b:c6:8b:a8:2a:ef:3a:73:
         74:21:7c:18:c3:9f:18:d3:57:7e:20:91:69:6c:01:71:51:40:
         3b:65:33:0d:0c:3c:66:44:96:e8:51:1c:fd:59:cb:1a:f1:31:
         32:6b:6d:5d:9a:dc:1e:02:a8:d9:0c:d8:03:50:bd:11:4d:7a:
         19:90:15:f1:69:6a:7e:f2:18:b7:c0:9f:92:01:86:26:de:27:
         3a:4f:4b:c4:c2:dc:43:d7:28:89:89:ae:46:6c:70:f2:c8:c7:
         ff:f3:8f:53:1a:90:72:d0:98:44:e2:6f:ac:cc:53:34:9a:48:
         bd:3e:54:ba:51:55:51:7a:81:45:61:14:6d:a1:b8:7b:7a:5d:
         1e:03:37:25:00:eb:3e:74:d6:11:40:fd:6d:f2:73:73:72:dc:
         19:e9:ae:65:47:d0:a2:cc:c3:98:ce:14:ff:93:dc:3e:8b:f9:
         4a:eb:a6:fc:05:7b:5d:a3:4b:7b:63:fd:d8:1b:6d:9e:1c:de:
         cf:53:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:08 2025 by rpki-client