Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32342d3234203d3e20323638333132.roa
File:                     34352e3233382e34342e302f32342d3234203d3e20323638333132.roa (raw, json)
Hash identifier:          m0hG+WYXiFoMmdmASCV7yHnD0RxYhyjpHwh+ZVFDzoY=
Subject key identifier:   3E:15:B0:0A:16:BE:61:1F:7D:E8:25:71:B5:F0:5C:16:A9:56:4B:47
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       4B5D81BFA3FF99059BCAF42882E2A45B7AB6214B
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32342d3234203d3e20323638333132.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     268312
IP address blocks:        45.238.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5d:81:bf:a3:ff:99:05:9b:ca:f4:28:82:e2:a4:5b:7a:b6:21:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3E15B00A16BE611F7DE82571B5F05C16A9564B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:24:35:d1:16:f7:9e:dc:82:ec:79:dd:12:
                    0b:e1:b5:61:f7:73:0a:31:29:ca:18:7e:ee:dc:32:
                    51:90:4d:b3:50:53:d7:a7:03:a3:53:a9:c9:99:a7:
                    fb:8a:2f:dc:8a:41:e9:68:0a:ea:7e:97:0a:0b:44:
                    ad:00:29:5f:d0:22:98:bb:68:26:42:a6:54:8a:6f:
                    be:3b:a1:96:ae:35:66:d0:f1:71:87:27:73:23:df:
                    ef:59:8a:fa:1f:76:7d:35:c1:8b:ae:22:6f:78:06:
                    6d:09:3d:fa:67:c2:f0:23:fe:90:c9:a8:86:b5:36:
                    d1:44:cb:5e:7a:6a:ad:24:75:45:0a:55:99:1a:82:
                    90:82:10:d4:ee:f3:d2:7c:40:60:35:e3:43:ca:b8:
                    c3:2f:5b:7c:7c:a5:04:36:cb:54:d5:1e:14:33:07:
                    3d:77:e9:97:ef:f7:27:f2:6b:28:1c:1a:ad:42:72:
                    ca:a2:c8:b2:97:8a:5f:e0:a6:05:51:fb:f5:c7:50:
                    49:52:4e:b2:b5:b5:13:d0:b7:ce:89:9d:8d:18:9a:
                    a9:b2:51:f8:01:16:f8:90:f2:76:1b:ae:1d:fb:18:
                    3b:3e:da:ac:0f:51:eb:b6:b1:47:e5:f7:46:5a:33:
                    a1:9d:19:66:03:ef:5d:08:1f:f2:9d:15:66:47:29:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:15:B0:0A:16:BE:61:1F:7D:E8:25:71:B5:F0:5C:16:A9:56:4B:47
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32342d3234203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:17:35:e8:63:0e:88:ef:65:45:d4:be:3b:90:0c:b3:32:df:
         02:f0:28:e4:80:88:a0:1d:3a:b4:40:2e:76:11:87:fe:ab:cd:
         47:22:d6:35:18:f5:fc:a2:dd:9e:49:1f:c8:9d:32:b4:1c:48:
         23:cc:84:f4:32:cd:c0:4e:9d:04:47:a1:b4:70:59:13:09:12:
         e5:f7:97:1e:bc:af:ff:ad:52:04:6e:ca:cb:f1:2d:77:dc:1d:
         3a:a6:08:a3:20:a3:d8:1c:a4:23:8b:df:79:94:cd:b2:5d:cc:
         6f:66:5f:ed:91:da:1c:f8:c4:a9:7f:ba:c6:b5:07:49:be:aa:
         70:aa:f8:8b:94:26:9d:38:a0:2b:c1:77:47:43:ee:ab:b1:c4:
         1f:7a:a0:79:03:ff:c3:65:5e:e9:50:f2:0c:a0:dd:35:f7:de:
         d8:e3:19:60:40:86:b3:5f:12:05:2d:c3:da:6b:1d:b5:36:4a:
         a3:42:fe:e1:f2:ba:47:f2:94:3e:9d:71:5e:f9:e1:7c:79:76:
         78:ab:e8:b1:c4:41:a2:4d:3c:ed:d4:ce:68:99:ff:96:3e:30:
         92:e3:5d:e2:ee:8e:37:15:08:f7:c5:06:aa:ee:5d:d6:d8:36:
         36:15:6d:37:d8:30:18:c6:b2:a3:a0:58:8e:ba:a6:e4:9a:71:
         0c:a3:b0:b9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUS12Bv6P/mQWbyvQoguKkW3q2IUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk3N0NDRjQ0MjhBNDU2ODM3OUVGRjhEQzdGOUYxQTQ1
QzkyRDQwQzAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMDMxMTAvBgNV
BAMTKDNFMTVCMDBBMTZCRTYxMUY3REU4MjU3MUI1RjA1QzE2QTk1NjRCNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnyQ10Rb3ntyC7HndEgvhtWH3
cwoxKcoYfu7cMlGQTbNQU9enA6NTqcmZp/uKL9yKQeloCup+lwoLRK0AKV/QIpi7
aCZCplSKb747oZauNWbQ8XGHJ3Mj3+9Zivofdn01wYuuIm94Bm0JPfpnwvAj/pDJ
qIa1NtFEy156aq0kdUUKVZkagpCCENTu89J8QGA140PKuMMvW3x8pQQ2y1TVHhQz
Bz136Zfv9yfyaygcGq1CcsqiyLKXil/gpgVR+/XHUElSTrK1tRPQt86JnY0Ymqmy
UfgBFviQ8nYbrh37GDs+2qwPUeu2sUfl90ZaM6GdGWYD710IH/KdFWZHKam3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPhWwCha+YR996CVxtfBcFqlWS0cwHwYDVR0j
BBgwFoAU+XfM9EKKRWg3nv+Nx/nxpFyS1AwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1
alAvMS9GOTc3Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVDOTJENDBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NzdDQ0Y0NDI4QTQ1Njgz
NzlFRkY4REM3RjlGMUE0NUM5MkQ0MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSajI0OXhlc211TDdpWDZBZENlakpjeGY2NVNtUHFzRjJDQUg4UlZUNWpQLzEv
MzQzNTJlMzIzMzM4MmUzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe4sMA0GCSqGSIb3DQEBCwUAA4IBAQBwFzXoYw6I
72VF1L47kAyzMt8C8CjkgIigHTq0QC52EYf+q81HItY1GPX8ot2eSR/InTK0HEgj
zIT0Ms3ATp0ER6G0cFkTCRLl95cevK//rVIEbsrL8S133B06pgijIKPYHKQji995
lM2yXcxvZl/tkdoc+MSpf7rGtQdJvqpwqviLlCadOKArwXdHQ+6rscQfeqB5A//D
ZV7pUPIMoN01997Y4xlgQIazXxIFLcPaax21NkqjQv7h8rpH8pQ+nXFe+eF8eXZ4
q+ixxEGiTTzt1M5omf+WPjCS413i7o43FQj3xQaq7l3W2DY2FW032DAYxrKjoFiO
uqbkmnEMo7C5
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:05:29 2025 by rpki-client