Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31312e302f32342d3234203d3e20323637323831.roa
File:                     34352e3233322e31312e302f32342d3234203d3e20323637323831.roa (raw, json)
Hash identifier:          tXDM4O4GcrvWbBXRZCNwtuDVchzzhU0izIydp7KWpQE=
Subject key identifier:   EE:9A:73:62:4F:F4:A1:D4:60:E4:F5:4E:15:C6:50:53:EF:B5:3B:9C
Certificate issuer:       /CN=9C5BC63BC06A6453BAF64823FA913BF1C397832C
Certificate serial:       352BC0CA440B8CFDFD975CAFAE276FF0AA4F9EA5
Authority key identifier: 9C:5B:C6:3B:C0:6A:64:53:BA:F6:48:23:FA:91:3B:F1:C3:97:83:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5BC63BC06A6453BAF64823FA913BF1C397832C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31312e302f32342d3234203d3e20323637323831.roa
Signing time:             Wed 09 Jul 2025 16:37:52 +0000
ROA not before:           Wed 09 Jul 2025 16:32:52 +0000
ROA not after:            Wed 08 Jul 2026 16:37:52 +0000
asID:                     267281
IP address blocks:        45.232.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2b:c0:ca:44:0b:8c:fd:fd:97:5c:af:ae:27:6f:f0:aa:4f:9e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C5BC63BC06A6453BAF64823FA913BF1C397832C
        Validity
            Not Before: Jul  9 16:32:52 2025 GMT
            Not After : Jul  8 16:37:52 2026 GMT
        Subject: CN=EE9A73624FF4A1D460E4F54E15C65053EFB53B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:42:b7:5b:93:81:ae:1f:61:9e:df:f4:32:
                    f6:ad:28:88:08:9a:54:43:02:43:ce:83:c9:2a:1a:
                    48:b2:ef:2b:98:32:0c:99:fe:f0:90:f4:58:52:c0:
                    c7:8c:c3:b2:73:d4:86:91:8a:59:49:1d:8a:8c:7c:
                    cd:c0:e0:f1:f8:37:de:f5:40:05:01:26:80:54:52:
                    33:e9:e8:f9:3a:9a:f7:39:b3:dd:52:dd:5a:fc:e9:
                    67:ca:d7:72:b4:77:65:a4:f8:54:45:db:cb:90:46:
                    b3:b4:24:e5:74:03:f2:01:a6:f5:53:f6:5c:5e:8e:
                    82:4a:de:fd:f8:99:2b:b3:1d:23:dd:d7:65:f5:c1:
                    30:6d:a7:e7:d3:f6:7b:71:da:71:9c:24:7b:74:39:
                    fa:63:a5:4c:d2:d3:40:7a:a7:2a:a2:f9:d2:d7:95:
                    0b:e8:95:a4:99:cd:2c:0e:e5:2b:19:d9:4c:80:8c:
                    bf:80:c2:53:8f:ae:56:2c:c6:1a:06:bf:75:b7:5a:
                    c8:3a:7b:60:c7:e7:3f:ed:55:35:44:fa:f0:0b:a9:
                    f7:da:f4:1d:3c:d4:64:f7:f0:f8:cb:b7:11:be:c6:
                    d9:c6:ce:e5:00:c9:90:1f:a3:99:5a:3f:37:67:a4:
                    59:d0:b2:0f:66:c7:3b:43:0c:69:98:9f:d7:a5:78:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9A:73:62:4F:F4:A1:D4:60:E4:F5:4E:15:C6:50:53:EF:B5:3B:9C
            X509v3 Authority Key Identifier:
                keyid:9C:5B:C6:3B:C0:6A:64:53:BA:F6:48:23:FA:91:3B:F1:C3:97:83:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/9C5BC63BC06A6453BAF64823FA913BF1C397832C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5BC63BC06A6453BAF64823FA913BF1C397832C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31312e302f32342d3234203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:6b:cd:58:83:b0:1b:62:ac:3c:50:6f:7c:d5:1b:3c:ea:1e:
         8c:ce:f5:7d:5a:61:c0:1c:f1:d4:74:70:11:ef:81:87:fb:b2:
         20:a6:85:4d:fb:67:86:3d:bc:58:19:5d:02:f2:41:59:e6:cb:
         46:ae:db:73:6a:6d:a9:04:b7:6f:d2:0c:cd:fe:11:90:12:17:
         4c:0b:64:11:7c:87:8f:a3:29:f9:94:df:4c:13:43:2b:a0:c8:
         0c:ed:b7:00:9e:88:0e:12:56:94:9a:7a:1c:f6:b4:1b:a2:65:
         75:b3:aa:f1:57:b5:e9:87:9e:fa:a4:ea:9d:81:b0:ce:c5:3e:
         30:46:e4:dc:8c:e2:bf:fe:bc:b2:8c:85:70:cd:33:f4:36:61:
         00:c7:df:01:36:ed:01:6a:5c:c9:d6:41:eb:fe:a7:32:95:06:
         71:a0:71:7f:a4:a3:26:b8:78:79:64:72:9a:4b:f5:39:cd:3f:
         9f:2c:df:e7:08:b4:41:0a:a7:82:12:3e:2e:ac:06:04:a6:15:
         d7:31:a4:68:ac:32:a9:a0:f6:78:3e:e2:3e:44:10:fc:97:29:
         1b:b6:13:5b:d6:73:84:00:9b:50:8f:00:23:ad:05:de:60:9d:
         40:eb:3d:f4:70:5b:da:0a:ed:45:76:1b:43:0b:e4:d1:a6:34:
         e7:06:29:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNSvAykQLjP39l1yvridv8KpPnqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM1QkM2M0JDMDZBNjQ1M0JBRjY0ODIzRkE5MTNCRjFD
Mzk3ODMyQzAeFw0yNTA3MDkxNjMyNTJaFw0yNjA3MDgxNjM3NTJaMDMxMTAvBgNV
BAMTKEVFOUE3MzYyNEZGNEExRDQ2MEU0RjU0RTE1QzY1MDUzRUZCNTNCOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9kK3W5OBrh9hnt/0MvatKIgI
mlRDAkPOg8kqGkiy7yuYMgyZ/vCQ9FhSwMeMw7Jz1IaRillJHYqMfM3A4PH4N971
QAUBJoBUUjPp6Pk6mvc5s91S3Vr86WfK13K0d2Wk+FRF28uQRrO0JOV0A/IBpvVT
9lxejoJK3v34mSuzHSPd12X1wTBtp+fT9ntx2nGcJHt0OfpjpUzS00B6pyqi+dLX
lQvolaSZzSwO5SsZ2UyAjL+AwlOPrlYsxhoGv3W3Wsg6e2DH5z/tVTVE+vALqffa
9B081GT38PjLtxG+xtnGzuUAyZAfo5laPzdnpFnQsg9mxztDDGmYn9eleB0LAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7ppzYk/0odRg5PVOFcZQU++1O5wwHwYDVR0j
BBgwFoAUnFvGO8BqZFO69kgj+pE78cOXgywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3ZuZHh2NUs3TUR1R3lZS3NyRUJWa0xram9nNkx0a1VxV255NFlVTWY0
WnYvMC85QzVCQzYzQkMwNkE2NDUzQkFGNjQ4MjNGQTkxM0JGMUMzOTc4MzJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDNUJDNjNCQzA2QTY0NTNC
QUY2NDgyM0ZBOTEzQkYxQzM5NzgzMkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN2bmR4djVLN01EdUd5WUtzckVCVmtMa2pvZzZMdGtVcVdueTRZVU1mNFp2LzAv
MzQzNTJlMzIzMzMyMmUzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALegLMA0GCSqGSIb3DQEBCwUAA4IBAQA6a81Yg7Ab
Yqw8UG981Rs86h6MzvV9WmHAHPHUdHAR74GH+7IgpoVN+2eGPbxYGV0C8kFZ5stG
rttzam2pBLdv0gzN/hGQEhdMC2QRfIePoyn5lN9ME0MroMgM7bcAnogOElaUmnoc
9rQbomV1s6rxV7Xph576pOqdgbDOxT4wRuTcjOK//ryyjIVwzTP0NmEAx98BNu0B
alzJ1kHr/qcylQZxoHF/pKMmuHh5ZHKaS/U5zT+fLN/nCLRBCqeCEj4urAYEphXX
MaRorDKpoPZ4PuI+RBD8lykbthNb1nOEAJtQjwAjrQXeYJ1A6z30cFvaCu1FdhtD
C+TRpjTnBilR
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:58:48 2025 by rpki-client