Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa
File:                     34352e3138322e32342e302f32322d3332203d3e20323639323133.roa (raw, json)
Hash identifier:          S8f9s+AfZd2f0EZ+JVAbqnYCvT/fVbB4fy/HERSnwVY=
Subject key identifier:   AE:0B:68:8B:96:71:63:82:53:C4:03:FE:29:48:64:E5:E3:08:D8:C0
Certificate issuer:       /CN=5626987D60090D785B54CEA683D4C496170063D3
Certificate serial:       44EF3EAB0A5106853CB82EC002893BB314A3A325
Authority key identifier: 56:26:98:7D:60:09:0D:78:5B:54:CE:A6:83:D4:C4:96:17:00:63:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5626987D60090D785B54CEA683D4C496170063D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa
Signing time:             Sun 23 Mar 2025 14:07:27 +0000
ROA not before:           Sun 23 Mar 2025 14:02:27 +0000
ROA not after:            Sun 22 Mar 2026 14:07:27 +0000
asID:                     269213
IP address blocks:        45.182.24.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ef:3e:ab:0a:51:06:85:3c:b8:2e:c0:02:89:3b:b3:14:a3:a3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5626987D60090D785B54CEA683D4C496170063D3
        Validity
            Not Before: Mar 23 14:02:27 2025 GMT
            Not After : Mar 22 14:07:27 2026 GMT
        Subject: CN=AE0B688B9671638253C403FE294864E5E308D8C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:74:2f:b7:c3:62:20:d3:b2:a3:64:45:e1:
                    06:49:b9:03:52:3c:99:11:2e:de:b8:ba:10:56:14:
                    b9:b1:e6:7f:f0:42:0e:9b:8d:40:28:3c:80:81:03:
                    13:6c:c6:59:cf:d8:58:fe:ed:cf:84:ae:da:1f:fd:
                    56:98:06:91:80:b8:e4:fd:85:94:94:a0:7f:aa:09:
                    a7:17:01:21:2c:7e:ee:ae:9b:83:9d:d8:7a:d9:66:
                    38:9f:be:e1:ef:e2:4a:d1:6f:9f:80:21:a9:f2:2a:
                    85:fb:56:7d:e5:b5:d4:7e:81:eb:84:ae:54:30:de:
                    93:fb:15:28:51:24:24:f0:f8:07:db:18:dc:1f:92:
                    28:43:3e:8d:81:12:35:a4:f7:7e:1c:5b:e4:db:9b:
                    da:54:1f:04:e7:9f:3f:c8:b9:7a:2a:dd:dc:f5:58:
                    99:8b:b2:42:48:24:8d:e2:c9:19:40:5a:19:33:df:
                    a2:71:8e:bd:a8:34:59:70:2c:53:9a:05:1f:59:45:
                    a0:d8:6c:9a:b1:08:f5:bf:97:b8:d3:bb:de:7b:53:
                    cb:38:25:08:89:d8:27:0c:ed:a9:a2:19:4f:77:d2:
                    8a:44:2c:08:e4:25:ed:8a:d8:45:84:13:47:a0:a4:
                    ba:c6:b0:33:d5:a3:36:c5:f9:ae:38:e1:41:a6:e6:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0B:68:8B:96:71:63:82:53:C4:03:FE:29:48:64:E5:E3:08:D8:C0
            X509v3 Authority Key Identifier:
                keyid:56:26:98:7D:60:09:0D:78:5B:54:CE:A6:83:D4:C4:96:17:00:63:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/5626987D60090D785B54CEA683D4C496170063D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5626987D60090D785B54CEA683D4C496170063D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:eb:f1:4f:f7:a1:c7:94:6c:1f:dc:5e:b5:0a:42:be:45:06:
         f5:73:3b:eb:a2:9b:19:80:c4:17:b7:54:53:fd:63:b2:b4:71:
         b6:52:53:22:e9:7b:f0:7b:d8:08:90:4c:c9:78:0d:43:3d:47:
         c6:78:38:c8:2a:32:90:1e:bc:51:a0:d8:44:8f:d2:45:c3:8a:
         70:9e:c3:75:cd:d3:f7:22:22:03:de:6b:6d:0d:89:ef:6c:f7:
         09:aa:6f:cc:62:a6:44:9a:03:8a:b7:9f:8a:69:68:99:ad:b8:
         6a:e2:30:91:44:56:28:dd:b2:06:1c:63:13:8c:aa:25:ff:95:
         79:ff:4e:3e:af:70:84:b3:7a:89:91:11:70:b4:97:b5:a6:65:
         c5:c4:d0:6a:c0:b5:18:26:38:cb:9a:24:98:8b:2e:20:19:87:
         a9:be:03:b3:f8:f4:b5:9a:ec:45:89:b1:c5:37:c7:31:26:c7:
         5c:f8:b9:d1:18:23:80:bb:e7:98:03:cd:b0:78:1b:a6:f1:f3:
         5a:ca:58:ab:46:29:db:af:1a:0a:40:46:5a:7f:bf:bc:10:2e:
         c2:49:21:a5:85:0a:9b:b6:3b:a8:46:76:de:61:e3:92:19:9f:
         aa:f8:65:fa:8d:f5:fb:2a:29:15:66:f4:95:3c:af:a3:75:57:
         47:1d:57:c2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURO8+qwpRBoU8uC7AAok7sxSjoyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYyNjk4N0Q2MDA5MEQ3ODVCNTRDRUE2ODNENEM0OTYx
NzAwNjNEMzAeFw0yNTAzMjMxNDAyMjdaFw0yNjAzMjIxNDA3MjdaMDMxMTAvBgNV
BAMTKEFFMEI2ODhCOTY3MTYzODI1M0M0MDNGRTI5NDg2NEU1RTMwOEQ4QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CXQvt8NiINOyo2RF4QZJuQNS
PJkRLt64uhBWFLmx5n/wQg6bjUAoPICBAxNsxlnP2Fj+7c+Ertof/VaYBpGAuOT9
hZSUoH+qCacXASEsfu6um4Od2HrZZjifvuHv4krRb5+AIanyKoX7Vn3ltdR+geuE
rlQw3pP7FShRJCTw+AfbGNwfkihDPo2BEjWk934cW+Tbm9pUHwTnnz/IuXoq3dz1
WJmLskJIJI3iyRlAWhkz36Jxjr2oNFlwLFOaBR9ZRaDYbJqxCPW/l7jTu957U8s4
JQiJ2CcM7amiGU930opELAjkJe2K2EWEE0egpLrGsDPVozbF+a444UGm5t1rAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrgtoi5ZxY4JTxAP+KUhk5eMI2MAwHwYDVR0j
BBgwFoAUViaYfWAJDXhbVM6mg9TElhcAY9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXIxSjk4TWlFNDlOQ0xueXhwWXNUVnVXaFZieDFWU3Vzb2hSM2o4Q2Y0
MTgvMC81NjI2OTg3RDYwMDkwRDc4NUI1NENFQTY4M0Q0QzQ5NjE3MDA2M0QzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2MjY5ODdENjAwOTBENzg1
QjU0Q0VBNjgzRDRDNDk2MTcwMDYzRDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVyMUo5OE1pRTQ5TkNMbnl4cFlzVFZ1V2hWYngxVlN1c29oUjNqOENmNDE4LzAv
MzQzNTJlMzEzODMyMmUzMjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzIzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbYYMA0GCSqGSIb3DQEBCwUAA4IBAQA/6/FP96HH
lGwf3F61CkK+RQb1czvropsZgMQXt1RT/WOytHG2UlMi6Xvwe9gIkEzJeA1DPUfG
eDjIKjKQHrxRoNhEj9JFw4pwnsN1zdP3IiID3mttDYnvbPcJqm/MYqZEmgOKt5+K
aWiZrbhq4jCRRFYo3bIGHGMTjKol/5V5/04+r3CEs3qJkRFwtJe1pmXFxNBqwLUY
JjjLmiSYiy4gGYepvgOz+PS1muxFibHFN8cxJsdc+LnRGCOAu+eYA82weBum8fNa
ylirRinbrxoKQEZaf7+8EC7CSSGlhQqbtjuoRnbeYeOSGZ+q+GX6jfX7KikVZvSV
PK+jdVdHHVfC
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:38 2025 by rpki-client