Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/34352e3232342e3133392e302f32342d3234203d3e20323636393232.roa
File:                     34352e3232342e3133392e302f32342d3234203d3e20323636393232.roa (raw, json)
Hash identifier:          2X3bSJD9oxapYRbRe2LUisZmmaam+Q3cENKGmpsZs0o=
Subject key identifier:   92:05:53:EE:22:38:4D:33:A4:F7:CA:3A:87:8B:80:BC:B4:8D:D2:A2
Certificate issuer:       /CN=0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A
Certificate serial:       7FE2277EBBC6C13DA34C078F2A0B7EACAE82CC6D
Authority key identifier: 0D:1B:D2:CB:DC:3E:26:A7:3F:3D:AF:C0:13:45:66:13:BE:DB:41:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/34352e3232342e3133392e302f32342d3234203d3e20323636393232.roa
Signing time:             Wed 10 Aug 2022 14:06:25 +0000
ROA not before:           Wed 10 Aug 2022 14:01:25 +0000
ROA not after:            Wed 09 Aug 2023 14:06:25 +0000
asID:                     266922
IP address blocks:        45.224.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e2:27:7e:bb:c6:c1:3d:a3:4c:07:8f:2a:0b:7e:ac:ae:82:cc:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A
        Validity
            Not Before: Aug 10 14:01:25 2022 GMT
            Not After : Aug  9 14:06:25 2023 GMT
        Subject: CN=920553EE22384D33A4F7CA3A878B80BCB48DD2A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d8:75:a6:64:43:10:2e:64:a8:9c:08:48:4a:
                    62:fe:13:48:e2:b6:84:bb:0e:9d:c9:b6:4e:55:2e:
                    c7:01:ed:57:8c:2b:7e:5e:66:67:88:a8:04:31:f9:
                    5a:fe:e6:f5:75:8e:ae:1f:f0:a2:bd:5a:b8:b0:2a:
                    12:fb:ab:1f:a1:32:5d:36:70:c6:45:f7:cd:90:56:
                    52:27:1b:1a:9a:ee:65:ea:b1:cc:90:e7:e0:52:b3:
                    bc:65:00:d2:2e:60:db:8b:16:12:56:11:6f:93:b4:
                    0e:4e:cd:6f:82:45:3f:68:a7:9d:ce:16:85:a3:dc:
                    18:61:7e:03:7f:22:69:bc:ae:52:f3:a1:bd:d0:6f:
                    c7:d2:12:61:36:ba:17:25:75:a2:38:a2:31:3f:9b:
                    53:6d:14:f4:b7:b8:3f:3d:11:fb:78:fd:b8:70:b4:
                    27:51:a5:79:00:3b:93:98:0b:dd:53:e9:2f:20:85:
                    28:9e:d8:6c:96:37:e1:3c:96:43:43:b5:b9:70:19:
                    81:25:23:bd:3c:3f:c1:b6:5c:3a:40:f0:d9:a1:33:
                    df:1b:1c:98:56:5e:22:3d:90:52:19:73:7f:7f:e8:
                    c7:2d:d9:9a:1f:e9:af:1a:9a:36:21:fb:8b:e7:3d:
                    1e:d3:fc:13:bd:8b:26:6b:b4:52:b9:76:ac:76:26:
                    66:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:05:53:EE:22:38:4D:33:A4:F7:CA:3A:87:8B:80:BC:B4:8D:D2:A2
            X509v3 Authority Key Identifier:
                keyid:0D:1B:D2:CB:DC:3E:26:A7:3F:3D:AF:C0:13:45:66:13:BE:DB:41:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/34352e3232342e3133392e302f32342d3234203d3e20323636393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:88:c4:31:ea:8d:5c:0c:0c:d2:b6:74:b4:a5:8f:49:1f:e7:
         1a:e5:19:81:67:88:e9:5b:b3:ea:cf:f3:5e:6f:ff:0d:7b:93:
         92:74:6c:8d:bc:73:ed:98:cb:20:5c:da:8d:00:6e:0d:46:07:
         f2:af:71:08:e8:71:b6:d5:97:25:66:a8:2f:3a:45:91:2b:38:
         8a:fd:86:34:a2:f0:50:2f:d3:fc:c7:c0:61:4b:11:09:f3:6d:
         e8:9c:d8:68:33:a1:ff:9a:c7:8d:ba:a3:c2:65:05:d6:47:8f:
         e4:bd:04:97:26:fd:01:da:9a:8b:28:1d:9b:b7:f6:9a:05:d1:
         2b:21:e5:63:b4:44:79:fb:d7:04:92:c7:68:09:86:8e:3a:7a:
         d9:f7:4e:5a:ed:44:b7:fd:6a:84:6d:09:77:dd:a2:38:db:8b:
         a1:3e:75:a4:63:90:68:fc:87:c5:04:ba:f7:e1:28:dc:54:ff:
         5b:c9:b4:e8:a5:c6:99:08:f9:ac:8a:07:75:76:15:88:8b:ab:
         68:ca:9b:bc:69:22:72:0f:63:fd:94:37:dd:86:10:89:ba:03:
         5f:87:58:5b:6b:77:a8:0b:25:fe:88:02:5a:87:71:66:d8:96:
         96:ab:81:fd:81:cc:ec:70:37:79:c9:9f:87:ea:f1:41:74:4b:
         43:4b:78:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf+InfrvGwT2jTAePKgt+rK6CzG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxQkQyQ0JEQzNFMjZBNzNGM0RBRkMwMTM0NTY2MTNC
RURCNDE4QTAeFw0yMjA4MTAxNDAxMjVaFw0yMzA4MDkxNDA2MjVaMDMxMTAvBgNV
BAMTKDkyMDU1M0VFMjIzODREMzNBNEY3Q0EzQTg3OEI4MEJDQjQ4REQyQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX2HWmZEMQLmSonAhISmL+E0ji
toS7Dp3Jtk5VLscB7VeMK35eZmeIqAQx+Vr+5vV1jq4f8KK9WriwKhL7qx+hMl02
cMZF982QVlInGxqa7mXqscyQ5+BSs7xlANIuYNuLFhJWEW+TtA5OzW+CRT9op53O
FoWj3BhhfgN/Imm8rlLzob3Qb8fSEmE2uhcldaI4ojE/m1NtFPS3uD89Eft4/bhw
tCdRpXkAO5OYC91T6S8ghSie2GyWN+E8lkNDtblwGYElI708P8G2XDpA8NmhM98b
HJhWXiI9kFIZc39/6Mct2Zof6a8amjYh+4vnPR7T/BO9iyZrtFK5dqx2JmbTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkgVT7iI4TTOk98o6h4uAvLSN0qIwHwYDVR0j
BBgwFoAUDRvSy9w+Jqc/Pa/AE0VmE77bQYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFQyeUNpMzdNVHdVR0xoMWc2d2FBSnc3RThOVkh3QjVhTE1FMkJVSkNI
enovMC8wRDFCRDJDQkRDM0UyNkE3M0YzREFGQzAxMzQ1NjYxM0JFREI0MThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEMUJEMkNCREMzRTI2QTcz
RjNEQUZDMDEzNDU2NjEzQkVEQjQxOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUMnlDaTM3TVR3VUdMaDFnNndhQUp3N0U4TlZId0I1YUxNRTJCVUpDSHp6LzAv
MzQzNTJlMzIzMjM0MmUzMTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt4IswDQYJKoZIhvcNAQELBQADggEBAHGIxDHq
jVwMDNK2dLSlj0kf5xrlGYFniOlbs+rP815v/w17k5J0bI28c+2YyyBc2o0Abg1G
B/KvcQjocbbVlyVmqC86RZErOIr9hjSi8FAv0/zHwGFLEQnzbeic2Ggzof+ax426
o8JlBdZHj+S9BJcm/QHamosoHZu39poF0Ssh5WO0RHn71wSSx2gJho46etn3Tlrt
RLf9aoRtCXfdojjbi6E+daRjkGj8h8UEuvfhKNxU/1vJtOilxpkI+ayKB3V2FYiL
q2jKm7xpInIPY/2UN92GEIm6A1+HWFtrd6gLJf6IAlqHcWbYlpargf2BzOxwN3nJ
n4fq8UF0S0NLeI0=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:05 2025 by rpki-client