Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231362e302f32342d3332203d3e203532353830.roa
File:                     34352e3137382e3231362e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          NtXCBxMuI0EK+EO5nKtYfxjLhpsPheMNvwqvH/Z6QrE=
Subject key identifier:   EA:51:4B:D5:49:18:B1:07:1A:93:C7:13:F9:74:5A:C8:E0:54:F4:B2
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       382A36125A904B05F0B8CA08FFE950F8FD9C876B
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231362e302f32342d3332203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:49:19 +0000
ROA not before:           Mon 27 Jan 2025 21:44:19 +0000
ROA not after:            Mon 26 Jan 2026 21:49:19 +0000
asID:                     52580
IP address blocks:        45.178.216.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2a:36:12:5a:90:4b:05:f0:b8:ca:08:ff:e9:50:f8:fd:9c:87:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:44:19 2025 GMT
            Not After : Jan 26 21:49:19 2026 GMT
        Subject: CN=EA514BD54918B1071A93C713F9745AC8E054F4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:ab:62:44:24:c5:51:18:68:53:9c:9a:d2:
                    21:34:02:a7:f0:4f:a8:34:74:a0:14:ca:7a:db:d3:
                    70:c6:3b:88:fd:35:84:d3:31:6c:bb:8d:a3:19:c6:
                    25:a0:dd:5e:2a:3c:e9:f6:75:49:43:d8:9d:b7:3d:
                    bf:94:c4:aa:9b:88:88:44:a6:fa:c8:f3:98:b8:5b:
                    47:8f:bc:99:41:df:1e:88:61:c1:2c:12:52:24:21:
                    3a:45:9e:ff:f6:f2:67:79:10:31:d9:6d:8e:f8:b1:
                    ae:4b:48:2d:24:54:c5:d1:7c:de:d4:82:23:76:10:
                    de:9a:d4:04:f7:a0:cd:72:b3:5e:f8:d0:0d:56:0e:
                    bf:bf:79:c1:28:a1:c9:4c:24:1d:eb:41:7c:03:d0:
                    a0:e4:85:fb:d7:42:c1:44:40:2a:0d:6e:22:f6:e3:
                    79:eb:46:5d:ce:4a:13:f2:d3:c2:09:f0:e3:6e:af:
                    92:4e:25:be:03:47:62:2c:db:32:cf:d0:48:eb:86:
                    5f:96:a2:03:47:15:32:70:72:5a:a5:49:22:23:b9:
                    ca:b5:74:85:c0:4a:ff:3e:ec:25:4b:b9:82:61:4c:
                    5b:31:05:d5:70:76:32:76:c5:6c:d1:10:42:8f:e1:
                    1b:ad:14:06:7e:44:39:d0:2b:3b:eb:30:fa:84:83:
                    ec:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:51:4B:D5:49:18:B1:07:1A:93:C7:13:F9:74:5A:C8:E0:54:F4:B2
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231362e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:d1:6e:a4:9b:88:52:1b:2b:4b:50:1f:7e:25:c4:d2:f3:
         76:9e:99:ac:d5:cf:91:c4:d1:f4:6b:fe:74:5b:25:f2:90:0a:
         b2:4f:87:30:d5:f5:2c:f3:7d:fb:ca:58:fe:ba:58:50:72:8e:
         4d:64:e9:ff:ff:6d:8c:81:d7:85:2a:aa:e2:8f:94:52:eb:dc:
         7e:6e:68:84:72:8e:74:4f:54:9c:2d:37:de:74:eb:1a:5a:83:
         0d:21:30:4e:02:9a:46:7e:2b:ba:d4:06:e6:dc:4c:26:10:1b:
         d0:17:d0:7a:81:53:de:a8:11:90:08:1f:5a:94:d7:77:c4:b7:
         cd:55:2e:cb:87:83:44:10:45:18:99:c9:6e:29:22:6b:83:ec:
         c3:77:12:eb:3a:b5:2d:7e:cf:36:74:7e:d6:35:28:a3:e3:f9:
         91:a6:de:f8:31:6c:e1:40:5d:29:42:29:46:cb:50:e6:81:35:
         4d:50:be:ef:17:5a:b7:b1:43:f4:74:d6:05:9a:4e:e9:c6:fa:
         6a:df:f5:ef:4f:ce:3a:bc:fd:97:c3:ad:3f:b9:c7:5b:13:33:
         48:05:df:0c:37:b2:f8:19:56:96:71:a9:ca:f5:69:d8:40:51:
         ad:5d:d6:a7:2c:57:00:b0:52:96:50:a9:1f:ec:50:6e:c5:fd:
         22:68:2c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:24:52 2025 by rpki-client