Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136342e302f32322d3234203d3e20323639343434.roa
File:                     34352e3138362e3136342e302f32322d3234203d3e20323639343434.roa (raw, json)
Hash identifier:          gpnq6tFAnQWqxGVScyfyqnrtoyYxOYgecT3PJw+e47c=
Subject key identifier:   2C:A2:77:86:EC:D4:71:A6:0F:77:29:F7:85:00:EF:AF:CE:61:1A:97
Certificate issuer:       /CN=93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E
Certificate serial:       21F8BB372BD242E2C54249F7F7A73A58C09EA959
Authority key identifier: 93:E9:F7:EA:4A:E4:44:9B:26:A7:5D:2A:43:E8:83:E4:6A:A5:AA:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136342e302f32322d3234203d3e20323639343434.roa
Signing time:             Wed 20 Dec 2023 17:26:09 +0000
ROA not before:           Wed 20 Dec 2023 17:21:09 +0000
ROA not after:            Wed 18 Dec 2024 17:26:09 +0000
asID:                     269444
IP address blocks:        45.186.164.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f8:bb:37:2b:d2:42:e2:c5:42:49:f7:f7:a7:3a:58:c0:9e:a9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E
        Validity
            Not Before: Dec 20 17:21:09 2023 GMT
            Not After : Dec 18 17:26:09 2024 GMT
        Subject: CN=2CA27786ECD471A60F7729F78500EFAFCE611A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:5c:ee:de:96:a3:fa:5d:6e:3e:5c:4c:8b:
                    60:a4:24:56:1f:f9:60:07:c2:38:7a:a0:ef:e5:14:
                    c1:24:e6:d6:0e:bd:c2:06:7d:c7:47:18:3c:83:64:
                    54:4b:3a:02:84:d4:c7:ec:e5:79:6a:af:33:a5:03:
                    84:a3:53:12:b8:67:22:e6:1a:6e:a0:be:e3:da:3c:
                    fe:4d:15:9b:49:b4:c2:f9:79:a6:ab:78:c8:c1:dc:
                    e5:5e:6c:3d:0d:20:f5:88:b8:c8:59:da:3b:50:bd:
                    9c:b2:94:f4:ec:3b:88:a2:6a:4e:f6:f8:f2:de:10:
                    a2:59:3a:1c:f4:55:91:58:04:5b:ad:dc:fa:72:1f:
                    f0:73:a2:22:30:5e:43:21:69:6c:9f:46:cf:c0:8f:
                    5a:c1:a3:de:c0:0d:da:6a:bd:d6:ad:f3:c4:ab:e4:
                    7f:b4:78:c1:37:5d:67:4e:a5:eb:a0:48:65:37:bc:
                    a7:9e:48:85:7b:94:75:54:8e:04:1a:f6:c5:89:df:
                    b0:05:a0:ab:4f:e6:4d:34:57:8e:66:01:ad:15:e0:
                    b4:b5:46:46:bd:3a:74:8d:98:84:d6:1d:30:01:3a:
                    3b:37:a0:63:42:90:c2:8b:49:ef:5a:cd:8e:23:39:
                    44:7f:5d:ed:c3:1c:94:09:e9:2b:6c:b1:ec:ef:ed:
                    7a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A2:77:86:EC:D4:71:A6:0F:77:29:F7:85:00:EF:AF:CE:61:1A:97
            X509v3 Authority Key Identifier:
                keyid:93:E9:F7:EA:4A:E4:44:9B:26:A7:5D:2A:43:E8:83:E4:6A:A5:AA:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136342e302f32322d3234203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:a8:03:0c:f4:a5:9f:19:e1:a5:27:db:a8:39:cd:16:31:
         3f:db:45:33:96:af:29:9d:1c:e9:85:b7:7f:d1:3b:6e:39:b5:
         28:10:8f:4a:16:20:eb:14:7f:bf:88:95:7a:c2:db:bf:15:0d:
         3c:8b:dd:4c:e5:f1:5f:81:45:e7:c2:6a:a9:a9:51:f9:cb:a9:
         99:05:5d:90:38:c0:9e:12:09:88:d6:12:11:84:53:7d:d5:27:
         b1:26:40:22:b3:8f:9b:ad:d5:ab:b3:c5:fa:fe:c5:81:7c:af:
         c8:19:d6:7c:3f:57:65:64:f6:2a:ab:2e:09:27:15:f2:a9:90:
         10:45:a6:d2:ef:1b:4c:2d:3f:de:dd:37:74:db:a7:5b:fb:e8:
         80:2b:b5:ff:0c:a6:9f:20:d2:6e:ac:9c:5b:85:4c:6b:50:45:
         42:3d:75:3f:ab:98:cb:cb:ba:26:65:d1:a3:dc:c0:65:09:71:
         1d:51:94:3d:75:0f:41:14:e0:e4:81:66:6a:f5:f8:05:00:e4:
         cd:a9:a7:7f:9b:07:1e:87:a6:92:83:3b:73:b1:61:ac:de:97:
         df:19:fe:bf:c1:47:e0:ca:26:27:1e:d1:95:c9:c0:d7:cb:0b:
         be:33:23:d7:5d:a0:db:4b:cb:33:90:0d:bd:0a:15:02:e4:6d:
         f4:5b:c9:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIfi7NyvSQuLFQkn396c6WMCeqVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNFOUY3RUE0QUU0NDQ5QjI2QTc1RDJBNDNFODgzRTQ2
QUE1QUE4RTAeFw0yMzEyMjAxNzIxMDlaFw0yNDEyMTgxNzI2MDlaMDMxMTAvBgNV
BAMTKDJDQTI3Nzg2RUNENDcxQTYwRjc3MjlGNzg1MDBFRkFGQ0U2MTFBOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDiFzu3paj+l1uPlxMi2CkJFYf
+WAHwjh6oO/lFMEk5tYOvcIGfcdHGDyDZFRLOgKE1Mfs5XlqrzOlA4SjUxK4ZyLm
Gm6gvuPaPP5NFZtJtML5eaareMjB3OVebD0NIPWIuMhZ2jtQvZyylPTsO4iiak72
+PLeEKJZOhz0VZFYBFut3PpyH/BzoiIwXkMhaWyfRs/Aj1rBo97ADdpqvdat88Sr
5H+0eME3XWdOpeugSGU3vKeeSIV7lHVUjgQa9sWJ37AFoKtP5k00V45mAa0V4LS1
Rka9OnSNmITWHTABOjs3oGNCkMKLSe9azY4jOUR/Xe3DHJQJ6Stssezv7Xp5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULKJ3huzUcaYPdyn3hQDvr85hGpcwHwYDVR0j
BBgwFoAUk+n36krkRJsmp10qQ+iD5Gqlqo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3paM2VkTUFudzRnakpiVXBXaWVKbXhCMVJHY2lSOU03RXh4a2Jia05m
WmsvMS85M0U5RjdFQTRBRTQ0NDlCMjZBNzVEMkE0M0U4ODNFNDZBQTVBQThFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkzRTlGN0VBNEFFNDQ0OUIy
NkE3NUQyQTQzRTg4M0U0NkFBNUFBOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6WjNlZE1Bbnc0Z2pKYlVwV2llSm14QjFSR2NpUjlNN0V4eGtiYmtOZlprLzEv
MzQzNTJlMzEzODM2MmUzMTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuqQwDQYJKoZIhvcNAQELBQADggEBAHuVqAMM
9KWfGeGlJ9uoOc0WMT/bRTOWrymdHOmFt3/RO245tSgQj0oWIOsUf7+IlXrC278V
DTyL3Uzl8V+BRefCaqmpUfnLqZkFXZA4wJ4SCYjWEhGEU33VJ7EmQCKzj5ut1auz
xfr+xYF8r8gZ1nw/V2Vk9iqrLgknFfKpkBBFptLvG0wtP97dN3Tbp1v76IArtf8M
pp8g0m6snFuFTGtQRUI9dT+rmMvLuiZl0aPcwGUJcR1RlD11D0EU4OSBZmr1+AUA
5M2pp3+bBx6HppKDO3OxYazel98Z/r/BR+DKJice0ZXJwNfLC74zI9ddoNtLyzOQ
Db0KFQLkbfRbyd8=
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:13:27 2025 by rpki-client