Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32342d3234203d3e20323636393234.roa
File:                     34352e3232342e33322e302f32342d3234203d3e20323636393234.roa (raw, json)
Hash identifier:          KIRkjVuHCuHH9nvq3N97LwVBGgArNJFoHELLaSrETts=
Subject key identifier:   5E:50:A3:D4:9C:FB:6E:F6:3A:99:EB:ED:B6:4A:CC:F8:4B:67:C3:50
Certificate issuer:       /CN=BD822F759E542679706513A49206DC4783B35F84
Certificate serial:       57BDE329A52E22A97D11320CB18ACE9E94DDFD0B
Authority key identifier: BD:82:2F:75:9E:54:26:79:70:65:13:A4:92:06:DC:47:83:B3:5F:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD822F759E542679706513A49206DC4783B35F84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32342d3234203d3e20323636393234.roa
Signing time:             Sun 04 Aug 2024 00:34:52 +0000
ROA not before:           Sun 04 Aug 2024 00:29:52 +0000
ROA not after:            Sun 03 Aug 2025 00:34:52 +0000
asID:                     266924
IP address blocks:        45.224.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bd:e3:29:a5:2e:22:a9:7d:11:32:0c:b1:8a:ce:9e:94:dd:fd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD822F759E542679706513A49206DC4783B35F84
        Validity
            Not Before: Aug  4 00:29:52 2024 GMT
            Not After : Aug  3 00:34:52 2025 GMT
        Subject: CN=5E50A3D49CFB6EF63A99EBEDB64ACCF84B67C350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:55:84:0b:78:30:c6:bb:2c:a1:92:ff:cd:
                    e4:8a:99:05:ae:ff:41:f3:e7:78:58:b6:eb:b0:fd:
                    dc:fb:0f:83:44:d8:10:c0:7b:2a:42:cb:c0:00:fc:
                    a9:be:e2:1f:c2:b8:9f:74:71:51:f7:69:7e:5c:a9:
                    c0:f2:ec:3a:d9:d4:74:89:1f:47:3e:2c:64:2f:1c:
                    0e:91:9a:e5:8e:fc:16:87:69:db:b3:b4:dc:8b:2e:
                    f5:4f:b1:b9:5a:35:21:91:0f:4d:3c:aa:48:fc:5c:
                    1a:be:41:83:75:46:e8:51:34:c9:25:de:c0:cc:97:
                    f4:c1:f5:8e:05:6d:f3:41:bc:8b:a4:24:f8:15:9b:
                    1d:0b:39:61:b4:ed:21:a3:d3:69:59:35:48:ff:bf:
                    24:26:73:2d:9d:83:28:a4:54:ff:95:12:14:8a:d9:
                    92:0d:d5:ba:ea:13:07:46:9c:e0:59:5b:29:1c:03:
                    89:36:55:b8:eb:7d:cf:7f:95:fc:e1:c2:52:96:b0:
                    e9:19:d3:f4:6d:2b:13:e2:1a:86:a1:c6:37:b1:54:
                    01:b6:5c:eb:c9:76:16:8d:b8:ac:35:c2:15:13:b5:
                    5f:dc:fb:5a:16:6a:67:30:68:16:80:e0:de:99:d0:
                    53:b2:e5:43:55:1c:42:78:ba:f7:01:63:49:3b:f5:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:50:A3:D4:9C:FB:6E:F6:3A:99:EB:ED:B6:4A:CC:F8:4B:67:C3:50
            X509v3 Authority Key Identifier:
                keyid:BD:82:2F:75:9E:54:26:79:70:65:13:A4:92:06:DC:47:83:B3:5F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/BD822F759E542679706513A49206DC4783B35F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD822F759E542679706513A49206DC4783B35F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32342d3234203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:66:fc:6a:83:ea:d4:67:bc:cd:23:db:97:0f:98:3f:cc:28:
         db:af:03:58:09:48:88:05:9a:1a:f7:31:5f:17:65:b4:8a:25:
         ef:49:7b:e6:12:b0:dc:48:0f:f5:ea:68:bb:d7:82:2b:78:f8:
         40:3a:4e:bd:2a:27:51:fa:30:7d:87:22:93:7b:2e:2a:dd:ee:
         8d:a6:75:31:e8:54:b4:73:7f:1b:83:ce:54:00:85:b9:f4:10:
         f9:01:32:bb:2a:a5:2b:b1:14:3f:a5:37:ad:26:56:49:c7:4e:
         f8:44:4e:5b:92:f6:0b:37:bf:ef:db:4f:76:4a:5c:12:3e:68:
         53:63:fd:3a:eb:ca:a1:ea:9c:07:66:35:a8:ce:53:be:5d:d7:
         95:32:5a:e7:ca:45:b9:81:25:14:60:a4:e8:72:fe:c8:eb:40:
         f7:63:58:ab:e2:21:cf:db:20:97:c5:14:4f:9b:93:85:d7:aa:
         fc:96:29:a3:cc:63:06:06:45:b2:58:6b:a1:4f:4b:87:9d:79:
         a7:dc:e4:0b:7e:e2:a4:21:f1:54:26:37:d3:cd:6b:c2:ba:d1:
         00:13:00:fa:83:f2:e5:92:d2:13:15:1a:ff:43:da:7d:3d:18:
         2e:e0:f2:32:43:4b:aa:2d:3c:b9:95:47:72:50:78:d6:7f:a0:
         01:e1:1f:1f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUV73jKaUuIql9ETIMsYrOnpTd/QswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4MjJGNzU5RTU0MjY3OTcwNjUxM0E0OTIwNkRDNDc4
M0IzNUY4NDAeFw0yNDA4MDQwMDI5NTJaFw0yNTA4MDMwMDM0NTJaMDMxMTAvBgNV
BAMTKDVFNTBBM0Q0OUNGQjZFRjYzQTk5RUJFREI2NEFDQ0Y4NEI2N0MzNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2T1WEC3gwxrssoZL/zeSKmQWu
/0Hz53hYtuuw/dz7D4NE2BDAeypCy8AA/Km+4h/CuJ90cVH3aX5cqcDy7DrZ1HSJ
H0c+LGQvHA6RmuWO/BaHaduztNyLLvVPsblaNSGRD008qkj8XBq+QYN1RuhRNMkl
3sDMl/TB9Y4FbfNBvIukJPgVmx0LOWG07SGj02lZNUj/vyQmcy2dgyikVP+VEhSK
2ZIN1brqEwdGnOBZWykcA4k2Vbjrfc9/lfzhwlKWsOkZ0/RtKxPiGoahxjexVAG2
XOvJdhaNuKw1whUTtV/c+1oWamcwaBaA4N6Z0FOy5UNVHEJ4uvcBY0k79QtRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXlCj1Jz7bvY6mevttkrM+Etnw1AwHwYDVR0j
BBgwFoAUvYIvdZ5UJnlwZROkkgbcR4OzX4QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9GYks4V2dZWEJBa0c4UEttZzRBY1Z1Q3VnQzRDd3k1eExHMmkzRVdT
RWMvMC9CRDgyMkY3NTlFNTQyNjc5NzA2NTEzQTQ5MjA2REM0NzgzQjM1Rjg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEODIyRjc1OUU1NDI2Nzk3
MDY1MTNBNDkyMDZEQzQ3ODNCMzVGODQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvRmJLOFdnWVhCQWtHOFBLbWc0QWNWdUN1Z0M0Q3d5NXhMRzJpM0VXU0VjLzAv
MzQzNTJlMzIzMjM0MmUzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzkzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeAgMA0GCSqGSIb3DQEBCwUAA4IBAQA0Zvxqg+rU
Z7zNI9uXD5g/zCjbrwNYCUiIBZoa9zFfF2W0iiXvSXvmErDcSA/16mi714IrePhA
Ok69KidR+jB9hyKTey4q3e6NpnUx6FS0c38bg85UAIW59BD5ATK7KqUrsRQ/pTet
JlZJx074RE5bkvYLN7/v2092SlwSPmhTY/0668qh6pwHZjWozlO+XdeVMlrnykW5
gSUUYKTocv7I60D3Y1ir4iHP2yCXxRRPm5OF16r8limjzGMGBkWyWGuhT0uHnXmn
3OQLfuKkIfFUJjfTzWvCutEAEwD6g/LlktITFRr/Q9p9PRgu4PIyQ0uqLTy5lUdy
UHjWf6AB4R8f
-----END CERTIFICATE-----
Generated at Sun Nov 17 03:23:40 2024 by rpki-client on console-ams.rpki-client.org