Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31312e302f32342d3234203d3e20323638393338.roa
File:                     34352e3137342e31312e302f32342d3234203d3e20323638393338.roa (raw, json)
Hash identifier:          97bnP9nGyNE0W+UXU1nv5fSqpi90Jhjxw2z9RUXkxUQ=
Subject key identifier:   DD:E5:46:42:A2:AC:82:F7:98:61:BE:69:74:E0:D8:C8:D8:F8:AC:43
Certificate issuer:       /CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
Certificate serial:       0F8590CC02DEB2A731D199E2DE7E4ADE0325C9AE
Authority key identifier: 5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31312e302f32342d3234203d3e20323638393338.roa
Signing time:             Thu 06 Mar 2025 02:12:00 +0000
ROA not before:           Thu 06 Mar 2025 02:07:00 +0000
ROA not after:            Thu 05 Mar 2026 02:12:00 +0000
asID:                     268938
IP address blocks:        45.174.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:85:90:cc:02:de:b2:a7:31:d1:99:e2:de:7e:4a:de:03:25:c9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
        Validity
            Not Before: Mar  6 02:07:00 2025 GMT
            Not After : Mar  5 02:12:00 2026 GMT
        Subject: CN=DDE54642A2AC82F79861BE6974E0D8C8D8F8AC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:c6:03:2d:c1:c8:13:4c:7a:e4:89:7a:9a:
                    28:0e:13:3e:bb:cf:5b:9b:7e:d0:15:41:36:f0:6b:
                    4d:6d:a0:4b:29:24:f6:13:32:02:e7:da:46:10:72:
                    51:95:25:04:a6:be:82:27:ea:b5:8d:4a:66:16:89:
                    da:27:fe:b5:16:e8:27:9b:8b:29:29:fc:83:68:3c:
                    35:18:33:23:55:72:73:42:37:61:8b:46:bb:23:35:
                    7b:86:42:05:80:9f:29:b6:d1:84:51:a7:e4:1f:60:
                    65:8f:c5:8b:41:04:fe:98:4c:fd:4b:26:f9:19:23:
                    fb:51:08:10:c9:36:84:a4:58:d9:ec:1f:37:87:52:
                    dc:fb:98:c7:15:82:2d:08:f5:d1:f3:82:cf:67:77:
                    1f:86:a9:6e:58:bb:8b:6b:17:8a:bf:91:bc:91:5d:
                    81:3b:2b:51:fe:7e:74:57:7c:bc:8b:10:d5:0d:17:
                    a1:47:f7:5c:13:63:dc:9c:c6:4a:5b:b3:1d:75:c0:
                    16:4a:0f:b4:6d:dc:af:b6:21:5a:92:12:d0:90:da:
                    64:a4:e7:3b:ab:2a:3a:2a:4f:d0:e7:81:2c:6b:62:
                    a7:2c:20:23:17:33:3b:6b:6f:c6:db:bb:6e:9b:2b:
                    b0:f1:f5:95:89:44:2d:60:44:28:30:37:4d:cf:a1:
                    3a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E5:46:42:A2:AC:82:F7:98:61:BE:69:74:E0:D8:C8:D8:F8:AC:43
            X509v3 Authority Key Identifier:
                keyid:5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31312e302f32342d3234203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:42:64:30:ee:c8:e9:4c:0c:44:9b:5c:47:61:e6:70:6b:58:
         40:45:c9:43:42:16:d3:e5:7d:f7:c8:ff:a2:d5:15:05:19:00:
         31:75:20:0d:2e:76:3f:50:82:cf:2e:54:aa:9c:d5:14:8d:08:
         99:47:48:ac:ad:6b:2b:0c:aa:f3:c4:85:9a:44:a2:bb:f9:0c:
         e8:c9:d5:77:97:4f:94:f0:83:f0:32:af:33:81:36:58:de:18:
         47:b4:03:22:44:84:16:ee:6b:11:b6:60:ae:fa:34:1d:2a:d1:
         f4:6e:24:74:f1:dc:2b:85:10:14:e0:18:a7:b4:fa:22:09:df:
         77:e8:84:62:9b:66:6b:cb:d2:a9:16:3c:ae:e8:6e:38:f3:4d:
         33:2d:5a:79:fc:24:51:3f:b7:9a:68:25:0c:94:c5:4a:e5:d2:
         45:7a:d0:bc:7b:36:00:7c:dc:7f:ec:9d:0d:9b:7f:ff:53:30:
         b5:05:93:6d:c5:d1:7d:94:51:c9:c6:f3:db:55:05:d1:d6:00:
         68:7a:d2:97:60:55:92:db:49:27:ce:2b:e1:d2:1f:90:f6:fd:
         04:c2:61:7f:95:9e:6a:e0:16:26:80:cd:63:c7:a3:31:34:16:
         96:91:aa:71:17:6f:18:64:a9:d8:37:af:50:ef:50:f0:8b:41:
         bd:f9:5f:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD4WQzALesqcx0Zni3n5K3gMlya4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJBNDQwMjI0MDU4REYxNTYyMDAzRDhGRDE3NDZGMEUw
NUEyQzZGNjAeFw0yNTAzMDYwMjA3MDBaFw0yNjAzMDUwMjEyMDBaMDMxMTAvBgNV
BAMTKERERTU0NjQyQTJBQzgyRjc5ODYxQkU2OTc0RTBEOEM4RDhGOEFDNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYV8YDLcHIE0x65Il6migOEz67
z1ubftAVQTbwa01toEspJPYTMgLn2kYQclGVJQSmvoIn6rWNSmYWidon/rUW6Ceb
iykp/INoPDUYMyNVcnNCN2GLRrsjNXuGQgWAnym20YRRp+QfYGWPxYtBBP6YTP1L
JvkZI/tRCBDJNoSkWNnsHzeHUtz7mMcVgi0I9dHzgs9ndx+GqW5Yu4trF4q/kbyR
XYE7K1H+fnRXfLyLENUNF6FH91wTY9ycxkpbsx11wBZKD7Rt3K+2IVqSEtCQ2mSk
5zurKjoqT9DngSxrYqcsICMXMztrb8bbu26bK7Dx9ZWJRC1gRCgwN03PoTrZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3eVGQqKsgveYYb5pdODYyNj4rEMwHwYDVR0j
BBgwFoAUW6RAIkBY3xViAD2P0XRvDgWixvYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVRNEVWTGREaEp3WGJmSzVXRWE4TGMxUm5zcVJEVmNqVU55ZlVTN0pS
THAvMS81QkE0NDAyMjQwNThERjE1NjIwMDNEOEZEMTc0NkYwRTA1QTJDNkY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCQTQ0MDIyNDA1OERGMTU2
MjAwM0Q4RkQxNzQ2RjBFMDVBMkM2RjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1UTRFVkxkRGhKd1hiZks1V0VhOExjMVJuc3FSRFZjalVOeWZVUzdKUkxwLzEv
MzQzNTJlMzEzNzM0MmUzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzkzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALa4LMA0GCSqGSIb3DQEBCwUAA4IBAQCBQmQw7sjp
TAxEm1xHYeZwa1hARclDQhbT5X33yP+i1RUFGQAxdSANLnY/UILPLlSqnNUUjQiZ
R0isrWsrDKrzxIWaRKK7+QzoydV3l0+U8IPwMq8zgTZY3hhHtAMiRIQW7msRtmCu
+jQdKtH0biR08dwrhRAU4BintPoiCd936IRim2Zry9KpFjyu6G44800zLVp5/CRR
P7eaaCUMlMVK5dJFetC8ezYAfNx/7J0Nm3//UzC1BZNtxdF9lFHJxvPbVQXR1gBo
etKXYFWS20knzivh0h+Q9v0EwmF/lZ5q4BYmgM1jx6MxNBaWkapxF28YZKnYN69Q
71Dwi0G9+V8D
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:54 2025 by rpki-client