Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/34352e3137332e32312e302f32342d3234203d3e20323732353738.roa
File:                     34352e3137332e32312e302f32342d3234203d3e20323732353738.roa (raw, json)
Hash identifier:          EfzVIWyRQHQQ1iHRlW5OpXPTsJAPW6eh0UHcyhtEdR0=
Subject key identifier:   59:9D:70:2A:CE:79:30:1D:C5:CC:4E:91:3D:50:3E:81:44:61:B3:8E
Certificate issuer:       /CN=CD751FD85EB2EA218659B38ACB7AA70081FE0026
Certificate serial:       4A6FA4755E571C6650723D193B2DF14AEDB3EFD7
Authority key identifier: CD:75:1F:D8:5E:B2:EA:21:86:59:B3:8A:CB:7A:A7:00:81:FE:00:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/34352e3137332e32312e302f32342d3234203d3e20323732353738.roa
Signing time:             Mon 20 Feb 2023 21:58:05 +0000
ROA not before:           Mon 20 Feb 2023 21:53:05 +0000
ROA not after:            Mon 19 Feb 2024 21:58:05 +0000
asID:                     272578
IP address blocks:        45.173.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6f:a4:75:5e:57:1c:66:50:72:3d:19:3b:2d:f1:4a:ed:b3:ef:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD751FD85EB2EA218659B38ACB7AA70081FE0026
        Validity
            Not Before: Feb 20 21:53:05 2023 GMT
            Not After : Feb 19 21:58:05 2024 GMT
        Subject: CN=599D702ACE79301DC5CC4E913D503E814461B38E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:3e:cf:b4:02:e0:ae:30:af:c3:9c:a6:fc:
                    57:68:50:81:fc:0f:15:c2:b9:26:89:50:19:c1:06:
                    1b:d3:69:c1:3a:bd:03:cb:e0:2e:14:72:f3:73:45:
                    65:7e:60:81:54:2e:5d:c1:dd:6e:c2:e0:6f:df:90:
                    89:4c:00:6c:5d:ad:9a:21:d9:09:6b:fe:2e:19:8c:
                    6e:35:6d:4e:70:6b:df:08:38:f1:49:86:5d:6a:e6:
                    90:de:98:fe:29:85:15:64:50:77:29:7e:eb:c0:f1:
                    ed:a6:42:05:33:4b:d8:a9:67:6b:c4:71:3c:e0:c2:
                    a4:d9:8b:9f:25:ae:07:61:96:7a:12:e8:72:52:bb:
                    5a:53:52:7a:5d:5d:ed:0b:5e:7d:c7:45:eb:ac:ff:
                    0e:af:4c:22:06:34:38:af:07:59:6d:38:4f:06:3e:
                    d6:0a:91:99:3c:a4:d1:2f:2a:7c:74:6f:bc:b1:79:
                    a7:b5:0c:59:bd:3b:98:14:b0:5b:21:b7:e1:33:ec:
                    51:db:0f:b0:4b:3e:47:7f:0f:24:f0:c0:e4:8c:1f:
                    26:38:63:47:35:75:d0:dc:1f:75:a4:5f:4e:e9:18:
                    55:bc:a1:b1:ba:a0:3b:72:8c:b7:b2:78:83:25:1b:
                    c2:5b:fd:99:3c:38:b7:6e:7d:4d:69:8d:9a:fd:23:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9D:70:2A:CE:79:30:1D:C5:CC:4E:91:3D:50:3E:81:44:61:B3:8E
            X509v3 Authority Key Identifier:
                keyid:CD:75:1F:D8:5E:B2:EA:21:86:59:B3:8A:CB:7A:A7:00:81:FE:00:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/34352e3137332e32312e302f32342d3234203d3e20323732353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:cf:72:1e:64:4b:0a:b1:16:46:bc:e7:b3:89:ac:1a:78:c3:
         db:b0:3d:a5:af:63:79:4a:d6:3c:67:4f:f0:69:bb:c2:a4:47:
         58:e2:26:e7:6d:56:19:ec:d2:72:a8:d8:3d:3d:b0:a1:74:2a:
         77:15:9b:3e:6c:86:83:e0:79:d2:32:96:db:b6:73:08:0f:d1:
         6a:16:0c:bf:8b:29:13:83:f3:15:ce:59:d6:28:11:17:1a:44:
         b1:9b:ee:5e:d7:6a:b0:21:e7:85:11:00:d6:30:76:38:c2:da:
         fe:af:b1:4b:7d:61:32:75:3e:95:25:2c:f2:8d:b2:43:e9:d6:
         d2:bd:77:1b:e7:9e:05:fc:39:ef:4a:24:82:09:f4:df:31:4d:
         2f:d7:a2:c5:37:cd:0d:f5:09:cd:5d:4f:2f:a7:18:2f:bb:6e:
         d5:3a:17:13:3f:54:6d:ae:31:76:cd:64:00:0b:fb:79:4b:32:
         93:c4:66:a7:66:40:c7:3b:80:2f:e2:78:a0:22:ea:58:ed:2b:
         2d:9f:6c:c5:91:60:bd:dd:a3:43:63:cc:c6:32:68:5c:60:06:
         20:7a:fd:8a:9b:7d:d8:9b:12:58:62:2c:7b:3b:fe:b1:7d:d0:
         03:f7:9d:14:d5:29:9c:65:d4:cb:4d:25:0d:8d:58:8c:bc:57:
         78:e5:d7:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSm+kdV5XHGZQcj0ZOy3xSu2z79cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q3NTFGRDg1RUIyRUEyMTg2NTlCMzhBQ0I3QUE3MDA4
MUZFMDAyNjAeFw0yMzAyMjAyMTUzMDVaFw0yNDAyMTkyMTU4MDVaMDMxMTAvBgNV
BAMTKDU5OUQ3MDJBQ0U3OTMwMURDNUNDNEU5MTNENTAzRTgxNDQ2MUIzOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fT7PtALgrjCvw5ym/FdoUIH8
DxXCuSaJUBnBBhvTacE6vQPL4C4UcvNzRWV+YIFULl3B3W7C4G/fkIlMAGxdrZoh
2Qlr/i4ZjG41bU5wa98IOPFJhl1q5pDemP4phRVkUHcpfuvA8e2mQgUzS9ipZ2vE
cTzgwqTZi58lrgdhlnoS6HJSu1pTUnpdXe0LXn3HReus/w6vTCIGNDivB1ltOE8G
PtYKkZk8pNEvKnx0b7yxeae1DFm9O5gUsFsht+Ez7FHbD7BLPkd/DyTwwOSMHyY4
Y0c1ddDcH3WkX07pGFW8obG6oDtyjLeyeIMlG8Jb/Zk8OLdufU1pjZr9I1PjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWZ1wKs55MB3FzE6RPVA+gURhs44wHwYDVR0j
BBgwFoAUzXUf2F6y6iGGWbOKy3qnAIH+ACYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRKZ0FjOWpyV3V5QXExQjRrQlZVcVpLcDQycTlldm9BYUtvenRMM2lk
VHYvMC9DRDc1MUZEODVFQjJFQTIxODY1OUIzOEFDQjdBQTcwMDgxRkUwMDI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENzUxRkQ4NUVCMkVBMjE4
NjU5QjM4QUNCN0FBNzAwODFGRTAwMjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkSmdBYzlqcld1eUFxMUI0a0JWVXFaS3A0MnE5ZXZvQWFLb3p0TDNpZFR2LzAv
MzQzNTJlMzEzNzMzMmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy
MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALa0VMA0GCSqGSIb3DQEBCwUAA4IBAQA1z3IeZEsK
sRZGvOeziawaeMPbsD2lr2N5StY8Z0/wabvCpEdY4ibnbVYZ7NJyqNg9PbChdCp3
FZs+bIaD4HnSMpbbtnMID9FqFgy/iykTg/MVzlnWKBEXGkSxm+5e12qwIeeFEQDW
MHY4wtr+r7FLfWEydT6VJSzyjbJD6dbSvXcb554F/DnvSiSCCfTfMU0v16LFN80N
9QnNXU8vpxgvu27VOhcTP1RtrjF2zWQAC/t5SzKTxGanZkDHO4Av4nigIupY7Sst
n2zFkWC93aNDY8zGMmhcYAYgev2Km33YmxJYYix7O/6xfdAD950U1SmcZdTLTSUN
jViMvFd45ddH
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:35:35 2025 by rpki-client