Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BiBXSinunnqShdyd6zkzZfmvQCeWhv57TeCtB15fwgJ/0/34352e3232372e3135362e302f32322d3234203d3e20323637303334.roa
File:                     34352e3232372e3135362e302f32322d3234203d3e20323637303334.roa (raw, json)
Hash identifier:          dDuJZMDu7c+D17/PoQ5gawjKsmGO4EDD0BijOv/Jgb4=
Subject key identifier:   37:EC:E3:9F:08:34:39:8C:EC:68:6C:F6:CD:4A:AD:B4:05:A5:20:EC
Certificate issuer:       /CN=3E4B0EBA092ECF38A66FC86C03C8561B66D194F8
Certificate serial:       51B76BAE3B30AA39861F56184B384C77AFFF622E
Authority key identifier: 3E:4B:0E:BA:09:2E:CF:38:A6:6F:C8:6C:03:C8:56:1B:66:D1:94:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E4B0EBA092ECF38A66FC86C03C8561B66D194F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BiBXSinunnqShdyd6zkzZfmvQCeWhv57TeCtB15fwgJ/0/34352e3232372e3135362e302f32322d3234203d3e20323637303334.roa
Signing time:             Wed 07 Dec 2022 15:09:37 +0000
ROA not before:           Wed 07 Dec 2022 15:04:37 +0000
ROA not after:            Wed 06 Dec 2023 15:09:37 +0000
asID:                     267034
IP address blocks:        45.227.156.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b7:6b:ae:3b:30:aa:39:86:1f:56:18:4b:38:4c:77:af:ff:62:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E4B0EBA092ECF38A66FC86C03C8561B66D194F8
        Validity
            Not Before: Dec  7 15:04:37 2022 GMT
            Not After : Dec  6 15:09:37 2023 GMT
        Subject: CN=37ECE39F0834398CEC686CF6CD4AADB405A520EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:98:f9:5b:73:8e:9c:33:c7:ec:b5:0e:cd:6e:
                    44:9a:9e:b0:22:0d:b3:17:f5:e6:d6:b3:3b:d8:4c:
                    17:ab:7b:bb:50:ff:fb:b1:01:09:75:86:7f:fc:bc:
                    c0:7a:3f:05:75:c2:8a:ca:04:2d:8c:5c:4c:a6:a9:
                    8e:4f:35:cf:a2:a9:8c:cf:3e:06:39:3b:1a:e8:23:
                    24:25:7a:22:98:a6:70:01:78:64:ce:d2:ab:dc:6d:
                    6c:af:4c:da:1c:2e:05:9d:c9:60:4e:f6:ec:60:9d:
                    34:ec:dc:5d:e5:c9:2f:d6:76:48:86:30:7e:8d:4e:
                    f0:0a:f7:36:31:02:1d:fd:56:be:96:77:8e:7f:d8:
                    35:ed:5a:be:a6:01:21:4a:46:90:00:34:b1:0d:81:
                    75:f2:6a:2d:8a:59:c2:8f:b3:7c:d2:39:af:d2:f7:
                    3a:92:2b:24:89:ce:9f:9f:07:6a:6e:62:1e:63:3c:
                    b5:54:76:ba:cd:31:44:6f:4e:23:5a:4e:e5:e6:2c:
                    e1:9a:c8:e1:51:f5:f4:39:d6:7b:96:ec:f4:f6:9f:
                    ab:50:f6:46:85:fb:58:41:a2:0a:36:8f:9b:3b:90:
                    15:91:f8:0f:bd:bd:bd:ba:eb:c1:ca:22:cd:fa:b9:
                    b8:1f:bf:c8:98:9d:04:97:52:f2:91:f1:40:ed:33:
                    96:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EC:E3:9F:08:34:39:8C:EC:68:6C:F6:CD:4A:AD:B4:05:A5:20:EC
            X509v3 Authority Key Identifier:
                keyid:3E:4B:0E:BA:09:2E:CF:38:A6:6F:C8:6C:03:C8:56:1B:66:D1:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BiBXSinunnqShdyd6zkzZfmvQCeWhv57TeCtB15fwgJ/0/3E4B0EBA092ECF38A66FC86C03C8561B66D194F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E4B0EBA092ECF38A66FC86C03C8561B66D194F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BiBXSinunnqShdyd6zkzZfmvQCeWhv57TeCtB15fwgJ/0/34352e3232372e3135362e302f32322d3234203d3e20323637303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:39:86:fc:2a:de:48:32:07:cd:d3:ab:28:8c:30:83:86:ba:
         8b:7d:58:ba:62:20:60:77:9e:a4:46:be:c2:ed:57:e1:10:7d:
         9c:4a:a0:79:a9:32:c7:93:f0:bd:93:cc:30:52:d3:d0:02:4b:
         06:74:c1:08:2e:dc:02:5e:1c:2d:dc:34:70:1f:6e:9c:02:93:
         f5:05:d8:59:24:4b:1c:6c:df:55:eb:97:44:e2:ef:51:65:92:
         ea:dc:30:1f:96:d5:c9:74:fe:b9:93:23:b4:f3:c4:5f:18:82:
         c3:e8:60:1f:30:9a:a8:40:fa:ce:77:45:dc:df:4a:b3:e2:99:
         ad:d5:44:b3:97:c5:2e:ce:ff:14:b5:91:a2:c3:ac:07:b7:d6:
         dc:94:32:60:ab:60:60:96:4a:13:cf:32:87:aa:fc:8f:b1:da:
         36:2d:f0:61:44:d9:84:de:8e:52:b7:36:cc:ae:c9:94:f5:a7:
         f5:dc:a0:a5:ee:ba:b5:5a:55:de:5d:c8:c2:09:ef:99:c4:a6:
         aa:5f:92:ef:e9:28:2a:b5:e2:d5:0f:ad:39:6d:0b:40:c5:a5:
         79:6f:f2:c7:b8:db:cb:8e:46:01:2e:82:2f:6d:5e:42:a8:54:
         71:27:c8:bd:b3:0d:5d:f4:66:82:d7:e3:64:fd:93:ad:ba:51:
         ee:7b:30:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUbdrrjswqjmGH1YYSzhMd6//Yi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U0QjBFQkEwOTJFQ0YzOEE2NkZDODZDMDNDODU2MUI2
NkQxOTRGODAeFw0yMjEyMDcxNTA0MzdaFw0yMzEyMDYxNTA5MzdaMDMxMTAvBgNV
BAMTKDM3RUNFMzlGMDgzNDM5OENFQzY4NkNGNkNENEFBREI0MDVBNTIwRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpmPlbc46cM8fstQ7NbkSanrAi
DbMX9ebWszvYTBere7tQ//uxAQl1hn/8vMB6PwV1worKBC2MXEymqY5PNc+iqYzP
PgY5OxroIyQleiKYpnABeGTO0qvcbWyvTNocLgWdyWBO9uxgnTTs3F3lyS/WdkiG
MH6NTvAK9zYxAh39Vr6Wd45/2DXtWr6mASFKRpAANLENgXXyai2KWcKPs3zSOa/S
9zqSKySJzp+fB2puYh5jPLVUdrrNMURvTiNaTuXmLOGayOFR9fQ51nuW7PT2n6tQ
9kaF+1hBogo2j5s7kBWR+A+9vb2668HKIs36ubgfv8iYnQSXUvKR8UDtM5bLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUN+zjnwg0OYzsaGz2zUqttAWlIOwwHwYDVR0j
BBgwFoAUPksOugkuzzimb8hsA8hWG2bRlPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJpQlhTaW51bm5xU2hkeWQ2emt6WmZtdlFDZVdodjU3VGVDdEIxNWZ3
Z0ovMC8zRTRCMEVCQTA5MkVDRjM4QTY2RkM4NkMwM0M4NTYxQjY2RDE5NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNFNEIwRUJBMDkyRUNGMzhB
NjZGQzg2QzAzQzg1NjFCNjZEMTk0RjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaUJYU2ludW5ucVNoZHlkNnprelpmbXZRQ2VXaHY1N1RlQ3RCMTVmd2dKLzAv
MzQzNTJlMzIzMjM3MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt45wwDQYJKoZIhvcNAQELBQADggEBAKA5hvwq
3kgyB83TqyiMMIOGuot9WLpiIGB3nqRGvsLtV+EQfZxKoHmpMseT8L2TzDBS09AC
SwZ0wQgu3AJeHC3cNHAfbpwCk/UF2FkkSxxs31Xrl0Ti71FlkurcMB+W1cl0/rmT
I7TzxF8YgsPoYB8wmqhA+s53RdzfSrPima3VRLOXxS7O/xS1kaLDrAe31tyUMmCr
YGCWShPPMoeq/I+x2jYt8GFE2YTejlK3NsyuyZT1p/XcoKXuurVaVd5dyMIJ75nE
pqpfku/pKCq14tUPrTltC0DFpXlv8se428uORgEugi9tXkKoVHEnyL2zDV30ZoLX
42T9k626Ue57MJ8=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:23 2025 by rpki-client