Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/34352e3136332e3131372e302f32342d3234203d3e20323638353737.roa
File:                     34352e3136332e3131372e302f32342d3234203d3e20323638353737.roa (raw, json)
Hash identifier:          6KP5IrubuLb/svqYYxphtXBUErSyVn0ZTrQl/3Jqsrk=
Subject key identifier:   32:5B:87:81:0F:0B:D8:79:85:86:54:9B:4A:37:8A:E9:3E:95:FD:38
Certificate issuer:       /CN=056BDF4B197F346D99BBB8DF6A77D4C286D532F3
Certificate serial:       01E91B345AAD4B2221D50F2F19D0E6096EAD825E
Authority key identifier: 05:6B:DF:4B:19:7F:34:6D:99:BB:B8:DF:6A:77:D4:C2:86:D5:32:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/056BDF4B197F346D99BBB8DF6A77D4C286D532F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/34352e3136332e3131372e302f32342d3234203d3e20323638353737.roa
Signing time:             Wed 06 Jul 2022 21:11:13 +0000
ROA not before:           Wed 06 Jul 2022 21:06:13 +0000
ROA not after:            Wed 05 Jul 2023 21:11:13 +0000
asID:                     268577
IP address blocks:        45.163.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e9:1b:34:5a:ad:4b:22:21:d5:0f:2f:19:d0:e6:09:6e:ad:82:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056BDF4B197F346D99BBB8DF6A77D4C286D532F3
        Validity
            Not Before: Jul  6 21:06:13 2022 GMT
            Not After : Jul  5 21:11:13 2023 GMT
        Subject: CN=325B87810F0BD8798586549B4A378AE93E95FD38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:6c:4f:b8:6f:99:9a:f2:bb:3a:4a:e6:c2:
                    55:2e:f5:4a:b3:85:a1:7b:98:3b:cb:1a:b5:bd:9d:
                    5b:de:25:e2:b8:85:10:b3:15:77:3b:9e:71:18:70:
                    c9:86:03:9f:51:e7:bb:1d:29:6e:f1:e7:96:af:e0:
                    38:34:31:87:5a:cb:1d:d7:d9:b7:be:6a:b0:fb:4c:
                    43:9a:74:25:aa:03:5d:d6:64:9e:aa:e6:30:89:c8:
                    50:94:14:44:d9:e9:df:d5:ae:61:c6:d7:a6:dd:da:
                    cc:c6:12:0a:b7:a1:55:bf:1f:ed:1f:1d:b7:53:f5:
                    b1:bd:6d:ff:08:06:0c:44:1a:f1:55:27:4e:e0:91:
                    17:40:d0:0b:51:e8:be:3d:48:f1:0d:81:68:cd:0c:
                    c4:86:e7:f9:f7:4b:27:8e:c7:e0:01:8a:65:01:7b:
                    4c:9b:1c:38:46:56:92:18:b9:06:60:45:7d:cf:64:
                    4f:ca:22:66:da:bd:63:7a:80:cd:eb:4e:64:24:23:
                    9c:a4:49:ed:28:78:03:f9:bd:d4:96:dd:83:ef:66:
                    81:38:9b:b1:dd:52:0c:83:42:88:d2:fe:08:17:89:
                    df:66:22:a9:b3:72:de:c5:77:a6:b5:80:df:b1:83:
                    3c:91:3f:b1:18:f4:cf:9f:95:cf:ef:04:06:7c:80:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5B:87:81:0F:0B:D8:79:85:86:54:9B:4A:37:8A:E9:3E:95:FD:38
            X509v3 Authority Key Identifier:
                keyid:05:6B:DF:4B:19:7F:34:6D:99:BB:B8:DF:6A:77:D4:C2:86:D5:32:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/056BDF4B197F346D99BBB8DF6A77D4C286D532F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/056BDF4B197F346D99BBB8DF6A77D4C286D532F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/34352e3136332e3131372e302f32342d3234203d3e20323638353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:4e:23:33:be:72:2b:b2:6f:d7:70:46:86:1d:85:54:a7:3d:
         2d:c0:a9:91:bb:23:e9:88:2b:7d:80:a3:0a:1e:e3:34:50:4e:
         82:45:55:16:94:e0:e5:cc:01:03:e4:92:7a:44:0d:80:dc:ce:
         e4:6c:74:4e:37:18:8a:79:7d:c8:ee:6f:6a:6a:32:41:d6:77:
         6c:57:a7:53:81:e9:fa:0c:2a:e8:64:75:a8:37:70:9c:1e:f8:
         c8:89:f6:a0:78:17:ac:17:3e:b6:20:0f:f4:67:1b:2b:5d:0c:
         bc:24:a7:19:4c:8d:9a:8f:af:6e:ca:5b:01:58:79:7c:18:a1:
         57:2d:8f:04:93:d9:9e:a3:3e:af:c3:43:1f:a1:ce:a7:5e:52:
         5e:e4:c7:c7:8a:7b:9f:93:61:27:f4:1d:59:6b:33:0a:c0:e2:
         9d:c5:ed:73:c3:36:f5:45:7c:2c:99:31:2b:50:0b:92:1e:9a:
         77:f2:4c:7c:24:f7:42:58:c6:58:f9:2e:bf:76:4e:29:16:c8:
         1b:09:9a:37:45:5b:75:ff:04:68:64:0e:73:37:34:0b:22:3f:
         e1:ef:b6:f6:f8:d2:16:51:65:0d:47:38:a6:04:a4:1e:95:27:
         d6:81:e1:2a:98:c9:d6:c5:09:e9:f5:23:03:6e:36:69:05:79:
         be:39:d8:4c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAekbNFqtSyIh1Q8vGdDmCW6tgl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU2QkRGNEIxOTdGMzQ2RDk5QkJCOERGNkE3N0Q0QzI4
NkQ1MzJGMzAeFw0yMjA3MDYyMTA2MTNaFw0yMzA3MDUyMTExMTNaMDMxMTAvBgNV
BAMTKDMyNUI4NzgxMEYwQkQ4Nzk4NTg2NTQ5QjRBMzc4QUU5M0U5NUZEMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+GxPuG+ZmvK7OkrmwlUu9Uqz
haF7mDvLGrW9nVveJeK4hRCzFXc7nnEYcMmGA59R57sdKW7x55av4Dg0MYdayx3X
2be+arD7TEOadCWqA13WZJ6q5jCJyFCUFETZ6d/VrmHG16bd2szGEgq3oVW/H+0f
HbdT9bG9bf8IBgxEGvFVJ07gkRdA0AtR6L49SPENgWjNDMSG5/n3SyeOx+ABimUB
e0ybHDhGVpIYuQZgRX3PZE/KImbavWN6gM3rTmQkI5ykSe0oeAP5vdSW3YPvZoE4
m7HdUgyDQojS/ggXid9mIqmzct7Fd6a1gN+xgzyRP7EY9M+flc/vBAZ8gOcJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMluHgQ8L2HmFhlSbSjeK6T6V/TgwHwYDVR0j
BBgwFoAUBWvfSxl/NG2Zu7jfanfUwobVMvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVhDN2ZVcGpVblNEc3JHaFlmZjE4VjgzYW10N2F1cDZ0VkRaSFlLRmY4
eHovMC8wNTZCREY0QjE5N0YzNDZEOTlCQkI4REY2QTc3RDRDMjg2RDUzMkYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA1NkJERjRCMTk3RjM0NkQ5
OUJCQjhERjZBNzdENEMyODZENTMyRjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYQzdmVXBqVW5TRHNyR2hZZmYxOFY4M2FtdDdhdXA2dFZEWkhZS0ZmOHh6LzAv
MzQzNTJlMzEzNjMzMmUzMTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAto3UwDQYJKoZIhvcNAQELBQADggEBACNOIzO+
ciuyb9dwRoYdhVSnPS3AqZG7I+mIK32Aowoe4zRQToJFVRaU4OXMAQPkknpEDYDc
zuRsdE43GIp5fcjub2pqMkHWd2xXp1OB6foMKuhkdag3cJwe+MiJ9qB4F6wXPrYg
D/RnGytdDLwkpxlMjZqPr27KWwFYeXwYoVctjwST2Z6jPq/DQx+hzqdeUl7kx8eK
e5+TYSf0HVlrMwrA4p3F7XPDNvVFfCyZMStQC5IemnfyTHwk90JYxlj5Lr92TikW
yBsJmjdFW3X/BGhkDnM3NAsiP+Hvtvb40hZRZQ1HOKYEpB6VJ9aB4SqYydbFCen1
IwNuNmkFeb452Ew=
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:27:16 2025 by rpki-client