Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3234382e302f32342d3234203d3e20323639363536.roa
File:                     34352e3139302e3234382e302f32342d3234203d3e20323639363536.roa (raw, json)
Hash identifier:          wTaqUropW0hgxvPKduVQv2mcRM/YQP++z9k59Za8iQM=
Subject key identifier:   C7:41:11:F8:75:66:0E:9C:3A:53:33:62:53:7C:B4:0A:5D:36:1D:DC
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       04103776729DE3C3069835B52618A662DDBA51A9
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3234382e302f32342d3234203d3e20323639363536.roa
Signing time:             Thu 05 Dec 2024 18:15:20 +0000
ROA not before:           Thu 05 Dec 2024 18:10:20 +0000
ROA not after:            Thu 04 Dec 2025 18:15:20 +0000
asID:                     269656
IP address blocks:        45.190.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:10:37:76:72:9d:e3:c3:06:98:35:b5:26:18:a6:62:dd:ba:51:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Dec  5 18:10:20 2024 GMT
            Not After : Dec  4 18:15:20 2025 GMT
        Subject: CN=C74111F875660E9C3A533362537CB40A5D361DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:af:68:a1:e3:dd:03:ac:9e:66:c7:0a:d7:
                    29:24:8a:bb:32:f4:85:20:87:0d:6c:ed:70:1e:a6:
                    5f:0f:f0:ae:e4:0c:3f:11:be:53:63:7a:c4:a2:e2:
                    db:b1:18:25:3c:f1:ff:51:fd:5e:f8:67:59:bc:97:
                    cd:0f:c2:b2:f8:75:fe:b6:19:5c:6a:99:db:73:40:
                    ed:d3:d8:94:ce:4c:0c:ee:51:8a:f5:61:27:4c:fe:
                    3b:c1:66:75:d0:30:58:89:a9:62:7f:84:6c:62:17:
                    48:1e:c1:af:92:d4:eb:20:24:26:8b:1e:77:83:26:
                    e2:8e:6e:b0:f9:4e:78:eb:ff:06:9a:b5:25:e0:43:
                    dd:98:70:55:ed:85:b6:10:3d:ab:f9:6e:21:42:8a:
                    05:a2:65:7b:d1:b8:a4:5c:8e:b1:0e:1f:04:71:57:
                    eb:28:8d:5b:b4:09:6e:26:65:dd:f1:a5:af:6a:b7:
                    65:cc:88:4f:0d:75:15:db:1e:8f:33:e1:ed:23:30:
                    b0:58:f2:e7:d4:46:c2:0e:fc:c2:af:7b:f3:47:e1:
                    17:58:f0:cd:51:70:ed:a0:b8:a5:d3:ae:b1:17:03:
                    bf:e4:5e:10:af:f6:1b:7c:57:2e:e9:0f:f6:f5:03:
                    fd:f2:49:91:92:05:c4:1f:bd:a7:2f:94:31:53:7f:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:41:11:F8:75:66:0E:9C:3A:53:33:62:53:7C:B4:0A:5D:36:1D:DC
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3234382e302f32342d3234203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:32:9e:86:3f:dc:54:53:ed:bf:fc:54:64:94:95:fb:ea:a2:
         1c:b2:14:a4:c4:4a:9d:ab:9d:27:f1:44:5a:7e:36:db:f8:b0:
         c2:25:d0:af:4c:53:b2:a9:36:b6:fe:4f:3b:3b:97:e0:40:86:
         5d:6d:0f:f3:d7:73:d1:5b:eb:2f:f1:40:33:b0:3e:1f:d4:7a:
         8f:93:af:89:91:d5:1d:70:33:40:87:0c:9b:d1:fd:02:59:86:
         06:c8:30:2b:10:50:f7:31:1b:0c:df:4a:45:54:4e:98:ca:90:
         6a:de:3a:a1:85:60:39:eb:a9:c2:de:92:40:f0:c8:ff:ec:5f:
         e9:88:1d:1f:93:78:5c:b4:d8:b8:66:69:2e:32:17:79:16:62:
         fb:03:00:2e:7c:4f:19:33:9a:30:96:5f:b6:b4:62:bb:ba:13:
         02:1f:f0:30:3d:b2:24:79:d4:e3:22:6a:c2:a5:fb:da:70:16:
         36:2a:bb:0f:63:cf:86:34:ec:d5:ac:cd:69:0d:2e:34:94:62:
         04:7e:64:da:b3:d0:ff:48:f8:ee:e2:fc:04:48:4e:32:86:c2:
         ba:ff:0c:d7:c8:bf:69:85:90:79:2e:3c:1d:39:60:b4:a5:3c:
         aa:24:73:80:46:c0:a8:54:ea:de:6d:df:f8:b6:7a:d5:56:15:
         ec:ba:22:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:29 2025 by rpki-client