Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa
File:                     34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa (raw, json)
Hash identifier:          bhmtP2fYUgcXPsKK0odP6pIm60F6Ub0/DC8jkeBYu2c=
Subject key identifier:   7A:BB:0B:A5:32:78:90:7B:2B:69:A7:03:7C:B1:A9:F7:75:C9:FE:5A
Certificate issuer:       /CN=B22E94C68C47105DBC96228B65437C19A68102C7
Certificate serial:       2D4349522FD9BA9C2E6E80070D735649FBCAC3CC
Authority key identifier: B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa
Signing time:             Wed 05 Mar 2025 19:00:25 +0000
ROA not before:           Wed 05 Mar 2025 18:55:25 +0000
ROA not after:            Wed 04 Mar 2026 19:00:25 +0000
asID:                     268627
IP address blocks:        45.164.164.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:43:49:52:2f:d9:ba:9c:2e:6e:80:07:0d:73:56:49:fb:ca:c3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B22E94C68C47105DBC96228B65437C19A68102C7
        Validity
            Not Before: Mar  5 18:55:25 2025 GMT
            Not After : Mar  4 19:00:25 2026 GMT
        Subject: CN=7ABB0BA53278907B2B69A7037CB1A9F775C9FE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:74:e1:d1:34:eb:05:cd:39:d9:c0:fb:45:47:
                    52:86:c8:23:e9:35:71:0c:30:2a:be:82:1b:09:80:
                    b2:45:06:ab:2f:ca:9a:50:47:76:91:74:75:88:3e:
                    0b:ea:ad:c1:75:0a:14:e9:12:bb:2c:c3:ca:56:e5:
                    d6:a4:38:65:b2:dd:42:f0:c1:72:2c:52:1f:15:03:
                    71:de:74:bd:8f:d4:6a:32:db:34:e4:6f:38:f9:67:
                    d4:e6:0a:8a:78:0e:e3:48:8e:3d:5c:ff:72:58:cd:
                    94:98:6e:eb:13:e9:eb:c7:79:97:76:f6:39:b1:9b:
                    8c:b1:01:8f:81:19:08:19:32:64:a0:ec:ad:1b:50:
                    c6:10:a9:5e:82:fb:5c:23:32:86:a0:b9:6d:ce:d5:
                    1f:57:e3:50:fd:9d:cf:b1:aa:1c:22:e4:48:24:09:
                    5f:56:ae:19:c8:71:4a:37:2e:82:69:42:d3:69:e0:
                    d6:b7:a5:22:58:db:c9:82:2b:05:2c:d2:c5:f5:bd:
                    ed:62:82:91:a7:44:cc:f4:75:47:8d:a1:c8:ed:f4:
                    e6:27:a5:d1:20:cf:67:b9:a4:a6:78:92:3a:e2:a6:
                    90:f2:39:b7:18:b5:ca:f5:59:8d:a7:22:45:d2:9d:
                    c6:9c:5d:ca:a2:3a:d1:14:ad:31:58:ec:b1:31:70:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BB:0B:A5:32:78:90:7B:2B:69:A7:03:7C:B1:A9:F7:75:C9:FE:5A
            X509v3 Authority Key Identifier:
                keyid:B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:90:01:77:f9:b6:a1:58:da:c0:d3:97:b1:3e:70:18:a5:
         d1:8b:16:68:df:35:bb:bc:e1:17:75:0b:b2:6c:5b:b0:bb:af:
         48:a7:77:57:b8:f6:6e:0d:b3:ab:1f:95:94:70:5a:7c:44:fb:
         44:bd:83:bd:2b:a2:d5:be:1f:95:08:d3:f5:3b:b7:ed:7b:8c:
         4c:e4:b7:f1:cc:ca:90:de:02:15:3f:b4:a3:9c:20:f5:f2:c8:
         ca:48:6e:31:68:79:8d:6f:0b:f5:f8:3b:0d:2e:c0:64:ac:46:
         74:f0:94:1d:9c:1a:35:fa:6d:0c:e9:88:0e:12:db:93:a7:ac:
         35:fc:ce:45:81:ac:1c:d2:e5:c0:38:33:aa:86:fc:d1:a4:60:
         b5:02:a8:70:ad:51:bc:c6:b2:1d:75:61:72:c3:b1:99:a5:fa:
         34:61:69:6c:e4:42:f0:32:50:ed:52:ae:a1:b0:29:d3:a0:87:
         52:68:9f:db:f8:33:80:c8:dd:53:60:1f:fb:c5:22:08:e3:b9:
         5f:97:c0:75:eb:ae:97:50:b7:6d:03:68:31:5e:ba:39:b6:f8:
         56:9e:39:6e:27:5f:89:97:70:2f:b1:37:ff:00:22:be:3b:74:
         bc:48:c1:cf:b3:13:3b:f6:81:38:40:04:70:83:6e:ca:2c:e6:
         45:2a:ce:6c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULUNJUi/ZupwuboAHDXNWSfvKw8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjIyRTk0QzY4QzQ3MTA1REJDOTYyMjhCNjU0MzdDMTlB
NjgxMDJDNzAeFw0yNTAzMDUxODU1MjVaFw0yNjAzMDQxOTAwMjVaMDMxMTAvBgNV
BAMTKDdBQkIwQkE1MzI3ODkwN0IyQjY5QTcwMzdDQjFBOUY3NzVDOUZFNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOdOHRNOsFzTnZwPtFR1KGyCPp
NXEMMCq+ghsJgLJFBqsvyppQR3aRdHWIPgvqrcF1ChTpErssw8pW5dakOGWy3ULw
wXIsUh8VA3HedL2P1Goy2zTkbzj5Z9TmCop4DuNIjj1c/3JYzZSYbusT6evHeZd2
9jmxm4yxAY+BGQgZMmSg7K0bUMYQqV6C+1wjMoaguW3O1R9X41D9nc+xqhwi5Egk
CV9WrhnIcUo3LoJpQtNp4Na3pSJY28mCKwUs0sX1ve1igpGnRMz0dUeNocjt9OYn
pdEgz2e5pKZ4kjrippDyObcYtcr1WY2nIkXSncacXcqiOtEUrTFY7LExcBM9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUersLpTJ4kHsraacDfLGp93XJ/lowHwYDVR0j
BBgwFoAUsi6UxoxHEF28liKLZUN8GaaBAscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGZQcHNRZENUSHBrYUFjcTE3cTl3dGRuczlndkoyaGJlTTRvZ3k5blJ3
dUQvMS9CMjJFOTRDNjhDNDcxMDVEQkM5NjIyOEI2NTQzN0MxOUE2ODEwMkM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyMkU5NEM2OEM0NzEwNURC
Qzk2MjI4QjY1NDM3QzE5QTY4MTAyQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRmUHBzUWRDVEhwa2FBY3ExN3E5d3RkbnM5Z3ZKMmhiZU00b2d5OW5Sd3VELzEv
MzQzNTJlMzEzNjM0MmUzMTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzNjMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpKQwDQYJKoZIhvcNAQELBQADggEBAJF7kAF3
+bahWNrA05exPnAYpdGLFmjfNbu84Rd1C7JsW7C7r0ind1e49m4Ns6sflZRwWnxE
+0S9g70rotW+H5UI0/U7t+17jEzkt/HMypDeAhU/tKOcIPXyyMpIbjFoeY1vC/X4
Ow0uwGSsRnTwlB2cGjX6bQzpiA4S25OnrDX8zkWBrBzS5cA4M6qG/NGkYLUCqHCt
UbzGsh11YXLDsZml+jRhaWzkQvAyUO1SrqGwKdOgh1Jon9v4M4DI3VNgH/vFIgjj
uV+XwHXrrpdQt20DaDFeujm2+FaeOW4nX4mXcC+xN/8AIr47dLxIwc+zEzv2gThA
BHCDbsos5kUqzmw=
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:00:31 2025 by rpki-client