Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3232203d3e20323639353137.roa
File:                     34352e3138382e37322e302f32322d3232203d3e20323639353137.roa (raw, json)
Hash identifier:          A3OW73U0UJ0+D151t44i6KBo6EU3LiherVq0lGv1J7U=
Subject key identifier:   FE:6C:49:2C:32:09:1D:14:A2:63:CE:23:6B:67:28:59:AF:46:5D:83
Certificate issuer:       /CN=CB0236634B4C2CE495EE34D60558955292749C07
Certificate serial:       0C0F4103517C2757812F0B80001F5EAF4FCBF5A1
Authority key identifier: CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0236634B4C2CE495EE34D60558955292749C07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3232203d3e20323639353137.roa
Signing time:             Thu 12 Dec 2024 14:06:47 +0000
ROA not before:           Thu 12 Dec 2024 14:01:47 +0000
ROA not after:            Thu 11 Dec 2025 14:06:47 +0000
asID:                     269517
IP address blocks:        45.188.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0f:41:03:51:7c:27:57:81:2f:0b:80:00:1f:5e:af:4f:cb:f5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0236634B4C2CE495EE34D60558955292749C07
        Validity
            Not Before: Dec 12 14:01:47 2024 GMT
            Not After : Dec 11 14:06:47 2025 GMT
        Subject: CN=FE6C492C32091D14A263CE236B672859AF465D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:81:5f:5f:27:94:5b:ae:5e:53:af:c3:a7:
                    36:c6:88:cb:cd:34:49:fc:c9:cb:43:e9:f4:d2:66:
                    ad:12:78:ff:ac:65:7e:5e:09:15:51:9f:c2:0b:b9:
                    99:2e:6c:73:7e:9b:cf:d9:1d:db:0f:4a:48:c9:45:
                    7d:90:2b:7a:f9:1a:33:da:c8:30:79:89:70:6b:40:
                    56:d4:5a:01:d9:e5:54:97:e6:58:58:f3:6d:a7:15:
                    51:8b:17:cc:1c:eb:2f:36:e2:09:d3:93:43:54:e0:
                    d2:ef:f0:8f:7c:c2:02:7b:96:39:b9:0b:b0:e3:62:
                    8a:61:d5:f5:8b:92:c3:d8:67:49:ee:4c:f5:10:2d:
                    fe:6b:55:fd:e7:91:22:32:07:a7:6b:d0:a2:01:ab:
                    66:a2:e3:e8:6c:aa:e3:a2:93:bf:15:93:45:8f:50:
                    ba:07:1b:72:c9:34:1c:57:4c:76:54:6b:fa:97:5b:
                    6d:57:40:ad:60:cb:23:ae:48:56:95:f5:1d:01:f2:
                    90:e1:0c:d6:52:b5:5a:69:ba:a9:ab:2c:80:03:24:
                    dc:ac:7c:ca:75:fb:e9:6e:58:e2:1b:31:72:9a:2c:
                    45:e6:50:3b:0a:52:a3:48:9f:ae:9c:6f:e8:65:5c:
                    54:00:b9:e4:a7:81:7b:9e:4d:12:bc:40:e4:60:0d:
                    07:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6C:49:2C:32:09:1D:14:A2:63:CE:23:6B:67:28:59:AF:46:5D:83
            X509v3 Authority Key Identifier:
                keyid:CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/CB0236634B4C2CE495EE34D60558955292749C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0236634B4C2CE495EE34D60558955292749C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3232203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:09:9b:80:a0:81:74:3b:a9:4f:2d:3e:1a:5b:2e:f7:ac:cc:
         b1:b0:61:2f:01:f8:1e:c8:f4:36:97:0c:e6:90:4f:e4:27:8e:
         68:41:d4:9f:8d:87:db:dc:1e:dd:c2:08:18:a9:fe:76:b6:66:
         5d:29:18:e0:05:3a:d3:97:fa:f7:ed:33:95:90:d7:91:10:81:
         e7:fa:c8:08:0a:3d:31:20:3d:a0:b0:ba:36:76:46:14:0d:c6:
         a5:dd:97:52:49:94:cf:59:1c:88:52:f4:f5:7f:5d:98:36:0f:
         b6:7b:85:7e:9a:b1:a8:18:62:75:6c:99:50:b2:46:50:7d:77:
         74:a9:6f:af:e4:86:65:f5:43:ad:d7:13:cc:57:39:b9:6e:04:
         d8:8d:dc:e5:24:01:34:ce:a9:97:75:8b:25:0d:13:b7:8e:86:
         6d:5e:2f:0e:a2:ac:69:8d:c4:07:8a:c1:ca:5f:5a:2d:44:9b:
         3d:2c:52:15:ec:f8:4f:a8:6c:b4:8d:3c:7b:55:97:25:0d:1f:
         cf:df:16:93:a4:a6:b7:5d:1b:28:33:b5:ce:ea:f2:6f:b1:08:
         b0:9a:ca:fc:df:07:82:42:6c:a8:01:bd:d2:c8:19:ef:12:79:
         1d:a5:b8:68:20:a3:bb:5c:91:f9:38:4f:70:b1:57:c4:0d:c5:
         6b:4a:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:50:55 2025 by rpki-client