Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32322d3232203d3e20323638343437.roa
File:                     34352e3136312e34382e302f32322d3232203d3e20323638343437.roa (raw, json)
Hash identifier:          ufblUMrTYNjW5hUkOj/apkffP7dRoce2tH+iUR/zjIk=
Subject key identifier:   47:E5:19:29:A7:73:38:08:1F:E4:1D:C0:7C:8F:CE:32:0E:70:42:69
Certificate issuer:       /CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Certificate serial:       133C1887C4378A5F245B14C67DA8F256A6B3D570
Authority key identifier: 3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32322d3232203d3e20323638343437.roa
Signing time:             Tue 08 Oct 2024 22:42:24 +0000
ROA not before:           Tue 08 Oct 2024 22:37:24 +0000
ROA not after:            Tue 07 Oct 2025 22:42:24 +0000
asID:                     268447
IP address blocks:        45.161.48.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3c:18:87:c4:37:8a:5f:24:5b:14:c6:7d:a8:f2:56:a6:b3:d5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
        Validity
            Not Before: Oct  8 22:37:24 2024 GMT
            Not After : Oct  7 22:42:24 2025 GMT
        Subject: CN=47E51929A77338081FE41DC07C8FCE320E704269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:53:2b:76:db:2b:68:1c:06:81:35:1b:bb:72:
                    00:1e:e4:c9:87:47:76:c7:9b:8f:0f:a6:dc:a8:a0:
                    3e:b8:a1:d8:b6:48:80:55:4a:61:95:eb:52:f1:26:
                    ff:6a:cf:89:2b:54:8f:27:da:32:8f:21:05:0d:7c:
                    aa:d3:3e:d2:7e:c2:5c:48:c8:e6:91:60:62:99:1a:
                    ba:38:c8:b4:5e:dc:7d:64:2c:4d:c8:e2:ca:c3:87:
                    26:56:06:b9:40:1c:a7:2c:34:fc:12:85:9f:7a:30:
                    d5:4f:3e:c0:cb:55:11:b3:b6:f1:7b:68:7d:72:6f:
                    d9:fe:8d:01:4b:5b:49:8f:4b:58:15:cf:5d:3f:5d:
                    a0:01:42:ba:25:28:a5:23:73:0c:bf:98:06:8f:98:
                    c3:89:25:6f:a3:b4:92:a0:b5:85:c5:74:cb:5a:17:
                    15:24:11:c4:71:83:71:8b:50:8e:a6:7f:aa:22:78:
                    18:5b:b5:b2:0f:40:8c:cc:87:1c:2d:4b:d4:3b:08:
                    92:79:d3:5d:be:3b:b1:61:93:e4:c9:81:ec:aa:e4:
                    c3:37:68:44:10:43:ce:30:8d:bc:40:8e:bd:c0:b3:
                    6c:cb:92:ad:03:54:01:da:55:60:df:2d:d2:27:2a:
                    7c:22:67:af:85:60:c7:2c:03:e4:c3:18:f0:cf:8c:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E5:19:29:A7:73:38:08:1F:E4:1D:C0:7C:8F:CE:32:0E:70:42:69
            X509v3 Authority Key Identifier:
                keyid:3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32322d3232203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:e4:7c:c9:d1:ae:89:a0:7f:ea:7c:ae:93:7b:00:f0:6c:c8:
         9f:c6:a9:4e:6c:f5:e1:93:0b:36:f0:f2:35:8f:03:b9:2e:c6:
         1b:b5:a5:61:f8:3b:43:26:61:66:7c:e8:a0:01:46:43:86:8d:
         0f:6d:02:28:ab:a6:60:a8:da:50:ff:cd:6a:66:0c:a8:ec:e6:
         38:fe:ff:60:b7:5a:d9:d3:15:3d:81:15:30:ea:97:5b:53:d3:
         cc:d1:96:52:24:27:12:38:a6:e7:20:e4:16:8a:2d:7f:3a:92:
         37:d7:6d:35:26:f2:e2:a9:56:9f:de:48:1c:cd:41:e3:51:03:
         a5:f3:c3:1f:57:0a:7e:c8:19:00:15:4d:ff:d2:18:ba:ed:04:
         dc:48:57:b7:26:ed:b5:f0:63:3a:fe:ac:d1:43:89:6f:27:a6:
         63:67:03:ac:4f:49:0b:e8:a2:18:d2:96:f3:33:c7:cd:55:ff:
         35:64:02:c7:87:9a:62:a5:a2:df:e3:bd:7e:98:38:1d:fe:43:
         69:b6:f1:9d:15:ca:29:15:0c:3c:11:71:d4:3d:d4:ed:12:31:
         19:4a:77:25:c1:c3:20:3c:6b:41:b4:0e:97:b8:b9:51:86:d4:
         7e:2b:4d:a6:33:21:55:9c:bc:c9:6f:8d:b7:2c:f9:ee:72:b7:
         e8:b9:15:a4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEzwYh8Q3il8kWxTGfajyVqaz1XAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGMEE1REZFQ0ZERjhEMDZGNjNDMkJBNkIyNDhCRkNE
NEI5M0I0QjAeFw0yNDEwMDgyMjM3MjRaFw0yNTEwMDcyMjQyMjRaMDMxMTAvBgNV
BAMTKDQ3RTUxOTI5QTc3MzM4MDgxRkU0MURDMDdDOEZDRTMyMEU3MDQyNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Uyt22ytoHAaBNRu7cgAe5MmH
R3bHm48PptyooD64odi2SIBVSmGV61LxJv9qz4krVI8n2jKPIQUNfKrTPtJ+wlxI
yOaRYGKZGro4yLRe3H1kLE3I4srDhyZWBrlAHKcsNPwShZ96MNVPPsDLVRGztvF7
aH1yb9n+jQFLW0mPS1gVz10/XaABQrolKKUjcwy/mAaPmMOJJW+jtJKgtYXFdMta
FxUkEcRxg3GLUI6mf6oieBhbtbIPQIzMhxwtS9Q7CJJ5012+O7Fhk+TJgeyq5MM3
aEQQQ84wjbxAjr3As2zLkq0DVAHaVWDfLdInKnwiZ6+FYMcsA+TDGPDPjFPDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUR+UZKadzOAgf5B3AfI/OMg5wQmkwHwYDVR0j
BBgwFoAUP/Cl3+z9+NBvY8K6aySL/NS5O0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDhrNmlmRjJrU0pmR3lqUkpXMk1QdFhVUUpZUU5lQVZUZHhLOEVMUlg0
SmsvMC8zRkYwQTVERkVDRkRGOEQwNkY2M0MyQkE2QjI0OEJGQ0Q0QjkzQjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjBBNURGRUNGREY4RDA2
RjYzQzJCQTZCMjQ4QkZDRDRCOTNCNEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ4azZpZkYya1NKZkd5alJKVzJNUHRYVVFKWVFOZUFWVGR4SzhFTFJYNEprLzAv
MzQzNTJlMzEzNjMxMmUzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzQzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaEwMA0GCSqGSIb3DQEBCwUAA4IBAQAK5HzJ0a6J
oH/qfK6TewDwbMifxqlObPXhkws28PI1jwO5LsYbtaVh+DtDJmFmfOigAUZDho0P
bQIoq6ZgqNpQ/81qZgyo7OY4/v9gt1rZ0xU9gRUw6pdbU9PM0ZZSJCcSOKbnIOQW
ii1/OpI31201JvLiqVaf3kgczUHjUQOl88MfVwp+yBkAFU3/0hi67QTcSFe3Ju21
8GM6/qzRQ4lvJ6ZjZwOsT0kL6KIY0pbzM8fNVf81ZALHh5pipaLf471+mDgd/kNp
tvGdFcopFQw8EXHUPdTtEjEZSnclwcMgPGtBtA6XuLlRhtR+K02mMyFVnLzJb423
LPnucrfouRWk
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:34 2025 by rpki-client