Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230322e302f32332d3233203d3e20323638323239.roa
File:                     34352e3233352e3230322e302f32332d3233203d3e20323638323239.roa (raw, json)
Hash identifier:          OAvpHMmLfbPnOsA73wwNbYh+YwbTsmrOJYCIv26/gXA=
Subject key identifier:   7F:6A:E1:88:2D:98:2A:24:62:8D:21:03:06:45:92:6D:5F:36:AA:0C
Certificate issuer:       /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial:       011D01D10BF4427DF74C095E3245F703D6379608
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230322e302f32332d3233203d3e20323638323239.roa
Signing time:             Wed 03 Jul 2024 21:10:27 +0000
ROA not before:           Wed 03 Jul 2024 21:05:27 +0000
ROA not after:            Wed 02 Jul 2025 21:10:27 +0000
asID:                     268229
IP address blocks:        45.235.202.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1d:01:d1:0b:f4:42:7d:f7:4c:09:5e:32:45:f7:03:d6:37:96:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
        Validity
            Not Before: Jul  3 21:05:27 2024 GMT
            Not After : Jul  2 21:10:27 2025 GMT
        Subject: CN=7F6AE1882D982A24628D21030645926D5F36AA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:2f:ee:5b:92:76:72:26:e2:67:02:1b:13:
                    f2:5e:8d:f7:57:bc:96:06:7a:b6:58:2e:18:ae:f3:
                    c3:36:ca:ba:f0:db:0f:21:41:3e:61:75:6d:c6:0f:
                    37:be:3c:d3:d3:da:a8:5e:af:82:3c:fa:b4:0d:c8:
                    f4:29:32:24:b8:43:c1:ec:18:29:b7:9c:ce:14:a5:
                    ca:19:f9:6e:7e:7f:c4:d5:96:7a:ca:98:3e:34:1e:
                    dd:b2:94:24:f0:a9:af:21:87:56:8c:ed:67:22:a1:
                    54:4d:0a:f5:4d:95:ad:16:6e:a3:c6:c4:70:1f:0a:
                    fe:52:4e:c1:bf:25:99:4b:87:52:ab:73:7b:0f:4a:
                    19:18:3b:d9:6f:0c:ca:b2:b1:f1:d7:ea:31:37:01:
                    91:75:b8:9c:67:90:81:e5:6b:b1:5f:a3:28:29:5f:
                    a5:e1:6f:52:98:bd:49:68:62:5a:b1:65:cb:8f:9b:
                    03:10:49:3a:cf:84:db:9e:d6:81:56:46:5f:24:8d:
                    06:55:bf:bb:34:33:7e:f0:51:a0:5e:c6:9f:fc:3e:
                    c0:c8:b8:a7:83:87:79:a1:eb:85:23:f0:16:f9:59:
                    d8:ae:62:00:0a:37:90:76:45:84:b1:cf:2d:a2:2e:
                    c5:48:e3:66:af:f4:6c:0e:7e:17:da:30:fd:0e:38:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6A:E1:88:2D:98:2A:24:62:8D:21:03:06:45:92:6D:5F:36:AA:0C
            X509v3 Authority Key Identifier:
                keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230322e302f32332d3233203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:c4:a4:be:90:5e:37:81:c2:9b:24:4d:7b:1b:78:a8:7e:81:
         7c:f1:4d:67:5c:cf:3c:90:51:df:92:e6:22:40:39:9a:ac:24:
         76:a2:e6:b0:1d:ea:1d:7d:eb:d2:41:01:7f:23:e5:f6:a9:34:
         f9:d9:be:74:ba:71:87:ef:ff:69:13:e2:1b:3f:ca:00:70:41:
         d7:94:f0:a9:51:9e:19:a7:07:0d:46:93:e6:4d:8b:08:2c:f1:
         7c:3a:e2:61:73:be:0e:19:34:46:ee:07:83:fe:32:b2:8d:82:
         65:28:30:bb:7a:b8:06:fa:03:ff:b1:79:6f:5a:cd:19:60:bc:
         73:bb:57:0e:ef:ec:a1:8b:ac:57:9b:64:e6:37:c4:00:23:32:
         9d:6e:ec:4b:25:51:e8:e3:71:0e:29:45:81:6d:ee:26:12:e3:
         73:85:b1:a3:47:8c:53:e5:b6:b2:9f:5a:83:a7:74:3e:37:ca:
         27:46:d7:39:af:50:60:31:99:5c:d3:99:2b:49:ad:fa:ac:2e:
         9f:3f:5c:66:ba:c1:c1:e0:db:92:cb:7b:54:a7:69:0b:a7:0a:
         22:98:01:50:eb:09:df:b4:d3:35:f4:1c:2c:d6:1d:96:7b:04:
         a6:c8:d6:2a:7c:75:ff:09:17:8a:c1:0c:04:2f:fe:0d:ca:96:
         80:87:2e:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAR0B0Qv0Qn33TAleMkX3A9Y3lggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIxNTEwRTA4MzZBQTQ4RDlFRTQyQTAwNTUxMzM4QkI0
MDNDRTY1OTAeFw0yNDA3MDMyMTA1MjdaFw0yNTA3MDIyMTEwMjdaMDMxMTAvBgNV
BAMTKDdGNkFFMTg4MkQ5ODJBMjQ2MjhEMjEwMzA2NDU5MjZENUYzNkFBMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdy/uW5J2cibiZwIbE/JejfdX
vJYGerZYLhiu88M2yrrw2w8hQT5hdW3GDze+PNPT2qher4I8+rQNyPQpMiS4Q8Hs
GCm3nM4UpcoZ+W5+f8TVlnrKmD40Ht2ylCTwqa8hh1aM7WcioVRNCvVNla0WbqPG
xHAfCv5STsG/JZlLh1Krc3sPShkYO9lvDMqysfHX6jE3AZF1uJxnkIHla7Ffoygp
X6Xhb1KYvUloYlqxZcuPmwMQSTrPhNue1oFWRl8kjQZVv7s0M37wUaBexp/8PsDI
uKeDh3mh64Uj8Bb5WdiuYgAKN5B2RYSxzy2iLsVI42av9GwOfhfaMP0OODmfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUf2rhiC2YKiRijSEDBkWSbV82qgwwHwYDVR0j
BBgwFoAUMhUQ4INqpI2e5CoAVRM4u0A85lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG9DM2Y3VHdkRllhTkRubXVRaGlFNWozdnNyb2d4bTlocUZxM2V2b25i
ZWkvMC8zMjE1MTBFMDgzNkFBNDhEOUVFNDJBMDA1NTEzMzhCQjQwM0NFNjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyMTUxMEUwODM2QUE0OEQ5
RUU0MkEwMDU1MTMzOEJCNDAzQ0U2NTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvQzNmN1R3ZEZZYU5Ebm11UWhpRTVqM3Zzcm9neG05aHFGcTNldm9uYmVpLzAv
MzQzNTJlMzIzMzM1MmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt68owDQYJKoZIhvcNAQELBQADggEBAIrEpL6Q
XjeBwpskTXsbeKh+gXzxTWdczzyQUd+S5iJAOZqsJHai5rAd6h1969JBAX8j5fap
NPnZvnS6cYfv/2kT4hs/ygBwQdeU8KlRnhmnBw1Gk+ZNiwgs8Xw64mFzvg4ZNEbu
B4P+MrKNgmUoMLt6uAb6A/+xeW9azRlgvHO7Vw7v7KGLrFebZOY3xAAjMp1u7Esl
UejjcQ4pRYFt7iYS43OFsaNHjFPltrKfWoOndD43yidG1zmvUGAxmVzTmStJrfqs
Lp8/XGa6wcHg25LLe1SnaQunCiKYAVDrCd+00zX0HCzWHZZ7BKbI1ip8df8JF4rB
DAQv/g3KloCHLuk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:25:03 2025 by rpki-client