Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e3234302f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e3234302f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          KdBwR7YRRe3IKsYZtsUBs6ju6l6iA/Z+L4Iyor08AVI=
Subject key identifier:   E6:AF:35:36:5C:FF:C2:1F:58:8F:70:CE:DC:4C:02:E0:0A:33:31:36
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       24D40B2FE00B5DEF3CAB72F91AD878E5936B7035
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e3234302f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:21:08 +0000
ROA not before:           Sun 11 Sep 2022 23:16:08 +0000
ROA not after:            Sun 10 Sep 2023 23:21:08 +0000
asID:                     267256
IP address blocks:        45.232.50.240/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d4:0b:2f:e0:0b:5d:ef:3c:ab:72:f9:1a:d8:78:e5:93:6b:70:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:16:08 2022 GMT
            Not After : Sep 10 23:21:08 2023 GMT
        Subject: CN=E6AF35365CFFC21F588F70CEDC4C02E00A333136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:cf:86:01:be:28:7d:82:46:ee:53:66:9b:
                    22:8a:ac:31:24:8f:32:66:d5:52:d7:a0:f4:83:02:
                    17:eb:c6:23:1a:e4:81:5d:71:b0:57:11:29:f7:02:
                    02:2a:d2:ff:06:fc:97:a4:14:c5:07:92:be:8a:55:
                    7a:d2:b7:24:78:19:26:fc:a3:4a:1c:c0:3d:c8:46:
                    91:ec:8d:86:76:37:43:d1:08:d0:dc:6f:a7:f2:fa:
                    bc:82:b3:8a:a4:54:e9:52:ce:95:4e:dc:b8:2c:6e:
                    a0:19:a9:47:a6:93:a4:86:1e:e2:b9:1f:8e:5a:ce:
                    a1:c8:b7:3d:c1:98:7b:22:77:a7:b4:b4:da:17:c8:
                    cc:55:61:12:f7:ee:c2:31:9a:d8:11:1b:dc:28:1d:
                    23:96:e4:44:20:e4:72:b3:e7:7f:b0:32:d6:c3:d6:
                    08:2f:6f:6c:3d:75:6e:48:1a:9e:c4:17:d6:8a:47:
                    e1:c0:e2:40:da:72:37:c3:d0:ab:a5:30:98:e2:ba:
                    99:8c:85:88:2d:ee:54:90:0f:e8:e7:d0:b5:76:3c:
                    83:7d:22:02:9e:76:7e:55:4e:05:94:8d:50:f9:7d:
                    53:6c:3d:13:31:21:03:95:2f:96:3c:74:e8:15:f1:
                    24:31:fb:64:59:a0:b2:0d:1a:01:fd:dd:d2:ad:45:
                    2c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AF:35:36:5C:FF:C2:1F:58:8F:70:CE:DC:4C:02:E0:0A:33:31:36
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e3234302f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.240/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:b2:78:a8:73:a5:68:0f:01:7e:1e:3e:12:a8:cf:48:f5:58:
         fc:15:5f:04:7d:6e:ea:ea:c9:ce:54:27:02:64:7c:f7:aa:4a:
         65:3f:84:ec:16:7e:83:7f:12:84:18:7f:f1:f4:64:57:52:18:
         f4:70:d3:30:74:1b:90:db:ab:c4:aa:a8:f5:f9:fc:9a:1f:b3:
         fb:bb:9f:ce:75:15:7a:b3:f7:ec:b3:e7:bf:78:2d:f3:ba:1b:
         fd:10:e0:11:eb:49:58:f7:bd:da:9f:61:0e:7e:f4:9d:6b:f2:
         fa:d5:7f:c4:2f:91:38:60:04:92:00:5d:a7:ea:cd:b8:47:4a:
         97:95:85:55:5b:1a:03:cb:ce:e5:ff:8a:76:83:44:5a:f7:7c:
         7b:0e:3c:5f:3b:56:8f:51:2e:77:67:31:4a:e1:0b:e1:20:dc:
         f8:74:54:0b:16:4e:2a:ec:f0:1a:d8:1c:2a:e9:03:45:b2:97:
         cb:70:f5:d7:dc:c0:ed:e3:9e:dc:c3:32:31:a1:16:8f:ff:81:
         f5:03:b5:22:5d:45:54:ba:ee:cf:14:d7:1a:50:2a:e8:ab:58:
         c4:51:6d:2e:9e:84:d8:b2:b1:fd:9f:6a:21:1c:51:82:7c:57:
         92:b8:05:44:f8:ba:a4:e7:c7:7f:03:62:0f:79:69:e9:07:ea:
         02:c4:7b:05
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUJNQLL+ALXe88q3L5Gth45ZNrcDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERDMzMwMUZDQkRFMkJBM0M0RDI5QUY1OERBNjE0NTA3
MkQxMDA2QjAeFw0yMjA5MTEyMzE2MDhaFw0yMzA5MTAyMzIxMDhaMDMxMTAvBgNV
BAMTKEU2QUYzNTM2NUNGRkMyMUY1ODhGNzBDRURDNEMwMkUwMEEzMzMxMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4c+GAb4ofYJG7lNmmyKKrDEk
jzJm1VLXoPSDAhfrxiMa5IFdcbBXESn3AgIq0v8G/JekFMUHkr6KVXrStyR4GSb8
o0ocwD3IRpHsjYZ2N0PRCNDcb6fy+ryCs4qkVOlSzpVO3LgsbqAZqUemk6SGHuK5
H45azqHItz3BmHsid6e0tNoXyMxVYRL37sIxmtgRG9woHSOW5EQg5HKz53+wMtbD
1ggvb2w9dW5IGp7EF9aKR+HA4kDacjfD0KulMJjiupmMhYgt7lSQD+jn0LV2PIN9
IgKedn5VTgWUjVD5fVNsPRMxIQOVL5Y8dOgV8SQx+2RZoLINGgH93dKtRSyLAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQU5q81Nlz/wh9Yj3DO3EwC4AozMTYwHwYDVR0j
BBgwFoAUDcMwH8veK6PE0pr1jaYUUHLRAGswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC8wREMzMzAxRkNCREUyQkEzQzREMjlBRjU4REE2MTQ1MDcyRDEwMDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEQzMzMDFGQ0JERTJCQTND
NEQyOUFGNThEQTYxNDUwNzJEMTAwNkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzQzNTJlMzIzMzMyMmUzNTMwMmUzMjM0MzAyZjMzMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNzMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF
BQcBBwEB/wQRMA8wDQQCAAEwBwMFAC3oMvAwDQYJKoZIhvcNAQELBQADggEBAEqy
eKhzpWgPAX4ePhKoz0j1WPwVXwR9burqyc5UJwJkfPeqSmU/hOwWfoN/EoQYf/H0
ZFdSGPRw0zB0G5Dbq8SqqPX5/Jofs/u7n851FXqz9+yz5794LfO6G/0Q4BHrSVj3
vdqfYQ5+9J1r8vrVf8QvkThgBJIAXafqzbhHSpeVhVVbGgPLzuX/inaDRFr3fHsO
PF87Vo9RLndnMUrhC+Eg3Ph0VAsWTirs8BrYHCrpA0Wyl8tw9dfcwO3jntzDMjGh
Fo//gfUDtSJdRVS67s8U1xpQKuirWMRRbS6ehNiysf2faiEcUYJ8V5K4BUT4uqTn
x38DYg95aekH6gLEewU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:46 2025 by rpki-client