Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32342d3234203d3e20323636313036.roa
File:                     34352e352e3230322e302f32342d3234203d3e20323636313036.roa (raw, json)
Hash identifier:          hO7xTOGYzEI2ISTC+V6RekBd50dRbRSNXOILiGw6cCs=
Subject key identifier:   9C:0B:ED:26:D8:74:5D:92:8E:36:15:B4:67:90:C0:18:21:59:A2:F0
Certificate issuer:       /CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9
Certificate serial:       4129222B251D17392D7302869C6955FD43054065
Authority key identifier: 2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32342d3234203d3e20323636313036.roa
Signing time:             Thu 30 Jan 2025 21:20:45 +0000
ROA not before:           Thu 30 Jan 2025 21:15:45 +0000
ROA not after:            Thu 29 Jan 2026 21:20:45 +0000
asID:                     266106
IP address blocks:        45.5.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:29:22:2b:25:1d:17:39:2d:73:02:86:9c:69:55:fd:43:05:40:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9
        Validity
            Not Before: Jan 30 21:15:45 2025 GMT
            Not After : Jan 29 21:20:45 2026 GMT
        Subject: CN=9C0BED26D8745D928E3615B46790C0182159A2F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:3e:e0:0b:48:75:00:73:1d:2b:b6:d2:7a:
                    8d:ee:d8:e7:58:f7:6e:92:7a:42:79:95:3f:74:52:
                    4b:ad:0c:02:0c:58:2e:79:f0:22:df:91:f7:82:3f:
                    ab:fb:69:28:ac:f6:44:f7:eb:97:9b:56:f7:a5:8f:
                    96:3e:c5:b3:8e:1a:f7:f5:ae:4a:5a:0d:67:a3:13:
                    6b:8a:78:6e:b5:14:c4:6b:a6:e2:f3:10:7a:59:b2:
                    8a:a0:3d:33:56:e9:0a:56:33:f3:63:cf:8e:5e:35:
                    a1:62:ca:7f:85:97:44:c1:98:19:0b:46:9b:42:63:
                    e5:21:a2:f2:48:eb:b9:f4:c3:c1:2f:c3:d5:0e:23:
                    fa:1f:4c:26:7d:24:ec:eb:7f:3e:7a:ac:d5:8a:e2:
                    3a:c1:a4:65:93:95:63:01:78:0e:09:55:9d:f1:11:
                    85:01:df:05:21:77:72:51:7b:f2:24:d1:87:a4:87:
                    59:d4:66:0d:73:8f:34:0d:8e:86:76:cc:42:9b:0d:
                    c3:93:5f:86:d3:d6:53:6b:17:24:05:47:df:68:63:
                    de:16:ea:a5:7e:1c:45:98:bc:af:42:7b:a0:77:51:
                    01:22:06:24:39:9e:fa:f0:09:90:7e:b5:07:4d:d2:
                    6e:7e:2e:71:e4:f9:4a:32:59:51:24:88:37:32:24:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0B:ED:26:D8:74:5D:92:8E:36:15:B4:67:90:C0:18:21:59:A2:F0
            X509v3 Authority Key Identifier:
                keyid:2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32342d3234203d3e20323636313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:a8:1f:d7:30:71:c0:da:4d:9c:7c:3f:95:33:04:47:a5:02:
         46:a9:68:4f:b8:d0:d2:19:9a:70:4e:56:db:a4:db:d0:52:1f:
         08:ec:ec:98:ac:a6:ff:06:0d:1f:36:ec:37:3c:49:39:d5:97:
         a4:56:df:33:9d:2c:9b:21:b0:6c:7e:56:eb:8f:d6:ea:25:f7:
         82:77:57:3a:f8:53:a8:d7:53:d2:98:ab:08:c5:fb:ba:70:4d:
         a1:ec:b1:7e:b1:c5:71:69:fa:59:47:69:aa:af:cf:d5:20:ce:
         76:38:c2:58:38:b4:8d:25:10:16:2b:10:dd:6e:6b:e1:fb:08:
         44:d0:92:b0:04:a0:e2:ed:a3:bd:c6:69:0e:40:4a:e6:36:a3:
         4a:e6:cf:22:f9:7c:5c:4a:d0:52:4e:ee:2c:99:2f:81:70:66:
         df:0f:3f:9f:a0:86:fc:bc:1b:05:89:26:e8:c1:29:eb:54:52:
         ab:17:ea:8b:8f:88:33:11:51:47:12:b3:00:82:ed:3c:ea:11:
         81:c6:39:5b:2a:e8:c2:26:8f:05:43:35:1c:c9:e1:cc:8a:85:
         6c:49:d7:1b:11:c0:5c:4b:63:83:1d:4e:ab:98:d0:fa:16:dd:
         14:64:3b:b8:6b:fc:70:1a:2a:4c:bb:0b:00:bd:8a:6f:e6:e3:
         d1:0d:e8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:05:11 2025 by rpki-client