Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          UgCZVdfeDyGRYErxUqG36OGUqHU2wvSJPW0xmb1Soq0=
Subject key identifier:   30:3E:50:12:64:FD:62:BB:A0:FE:50:54:7A:95:A2:02:84:EE:12:1C
Certificate issuer:       /CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
Certificate serial:       05620A949EF1837192E4F37D91735DD8552430AB
Authority key identifier: 4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
Signing time:             Fri 31 Jan 2025 18:02:23 +0000
ROA not before:           Fri 31 Jan 2025 17:57:23 +0000
ROA not after:            Fri 30 Jan 2026 18:02:23 +0000
asID:                     267027
IP address blocks:        45.227.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:62:0a:94:9e:f1:83:71:92:e4:f3:7d:91:73:5d:d8:55:24:30:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
        Validity
            Not Before: Jan 31 17:57:23 2025 GMT
            Not After : Jan 30 18:02:23 2026 GMT
        Subject: CN=303E501264FD62BBA0FE50547A95A20284EE121C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:cf:ae:2d:48:52:1d:ff:b8:2e:dc:5d:16:
                    f8:a9:65:d1:43:bf:b8:ed:3c:10:0f:d6:b8:54:38:
                    4f:02:5b:25:d2:c0:a4:71:e4:0d:ec:5c:c3:fa:f2:
                    0d:ca:36:27:39:81:e2:7f:6d:02:c9:d1:ca:0e:7d:
                    0c:ee:e1:53:1c:fb:48:98:e0:87:03:59:17:d8:81:
                    6b:f9:4e:a3:c3:71:4d:00:ba:90:ad:5b:8e:d8:db:
                    32:a8:6d:1d:b7:b4:62:75:83:8d:c1:a6:38:e2:ae:
                    79:68:fb:1c:c7:6d:59:30:46:72:ae:51:ec:9a:a0:
                    82:6d:13:49:5a:90:e8:e9:a5:7d:91:25:13:a1:35:
                    36:91:5f:90:0e:7b:01:5c:7a:d0:26:16:9f:90:f9:
                    79:82:c3:71:7f:5b:b6:ea:da:c7:d2:83:c4:a9:02:
                    4c:e3:5c:ef:f9:9f:cd:1e:2a:83:79:9d:f3:5d:df:
                    af:a7:a3:42:3a:a4:a1:6c:de:09:6d:22:9f:d5:1b:
                    eb:8d:b7:21:fe:42:dc:54:1b:09:bb:78:b6:38:30:
                    17:cf:99:5c:12:31:57:6b:33:c3:21:10:04:6f:71:
                    01:dc:7f:3c:36:ad:ad:38:11:7d:8e:72:34:0c:e7:
                    12:82:5c:0c:5a:2f:cf:d3:00:e8:b5:cb:54:7e:17:
                    e7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3E:50:12:64:FD:62:BB:A0:FE:50:54:7A:95:A2:02:84:EE:12:1C
            X509v3 Authority Key Identifier:
                keyid:4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:68:4c:48:e4:92:0b:9b:fa:4e:82:dd:a9:3e:a6:e1:f4:b7:
         2d:b4:b8:c8:78:40:cb:0d:a4:8a:6c:fa:6c:3f:5e:fd:b9:06:
         b2:68:57:f3:fa:87:44:23:ac:2d:fe:f7:84:09:6b:af:45:99:
         b8:e0:3c:df:60:d6:c0:30:42:ee:3c:31:19:b8:cd:2b:cc:51:
         26:a7:93:a5:ff:9a:56:91:40:78:77:38:44:f8:63:8a:b0:cc:
         8f:c0:b0:12:6b:28:01:da:d9:d6:09:04:c4:11:15:ce:f1:aa:
         f9:a3:03:9e:f1:d4:52:a7:e9:41:4c:60:d4:d3:c1:ef:c8:f3:
         9b:75:b2:8f:82:74:d1:94:e4:10:78:68:dd:7d:a6:d0:00:c7:
         d8:a9:6a:63:21:12:21:40:29:17:f7:d9:49:61:7b:03:e2:66:
         23:8c:39:53:0f:77:b4:9a:7c:80:7f:e2:08:88:47:75:64:c1:
         aa:1d:41:30:27:20:47:0c:3e:1f:58:e5:e0:dd:6c:80:63:7b:
         25:80:2e:0c:94:ec:54:17:bc:c3:2d:07:48:68:1d:69:4f:37:
         36:bb:57:e2:9f:11:da:fd:3b:7c:cf:d4:df:4c:a7:61:d8:1c:
         e7:e6:c8:01:05:ef:ff:40:3d:e1:03:b5:9a:14:d3:e5:d7:e1:
         4d:a7:3a:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBWIKlJ7xg3GS5PN9kXNd2FUkMKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMwRTU1ODNGODVGRDkyRTVCMjFENjk3OTkwMDU0QTI0
MkNFMkUwMzAeFw0yNTAxMzExNzU3MjNaFw0yNjAxMzAxODAyMjNaMDMxMTAvBgNV
BAMTKDMwM0U1MDEyNjRGRDYyQkJBMEZFNTA1NDdBOTVBMjAyODRFRTEyMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjs+uLUhSHf+4LtxdFvipZdFD
v7jtPBAP1rhUOE8CWyXSwKRx5A3sXMP68g3KNic5geJ/bQLJ0coOfQzu4VMc+0iY
4IcDWRfYgWv5TqPDcU0AupCtW47Y2zKobR23tGJ1g43Bpjjirnlo+xzHbVkwRnKu
UeyaoIJtE0lakOjppX2RJROhNTaRX5AOewFcetAmFp+Q+XmCw3F/W7bq2sfSg8Sp
AkzjXO/5n80eKoN5nfNd36+no0I6pKFs3gltIp/VG+uNtyH+QtxUGwm7eLY4MBfP
mVwSMVdrM8MhEARvcQHcfzw2ra04EX2OcjQM5xKCXAxaL8/TAOi1y1R+F+d9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMD5QEmT9Yrug/lBUepWiAoTuEhwwHwYDVR0j
BBgwFoAUTA5Vg/hf2S5bIdaXmQBUokLOLgMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RK
WXovMC80QzBFNTU4M0Y4NUZEOTJFNUIyMUQ2OTc5OTAwNTRBMjQyQ0UyRTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMEU1NTgzRjg1RkQ5MkU1
QjIxRDY5Nzk5MDA1NEEyNDJDRTJFMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURacWdMcVlQb3RFY2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAv
MzQzNTJlMzIzMjM3MmUzMTM2MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt46kwDQYJKoZIhvcNAQELBQADggEBACFoTEjk
kgub+k6C3ak+puH0ty20uMh4QMsNpIps+mw/Xv25BrJoV/P6h0QjrC3+94QJa69F
mbjgPN9g1sAwQu48MRm4zSvMUSank6X/mlaRQHh3OET4Y4qwzI/AsBJrKAHa2dYJ
BMQRFc7xqvmjA57x1FKn6UFMYNTTwe/I85t1so+CdNGU5BB4aN19ptAAx9ipamMh
EiFAKRf32UlhewPiZiOMOVMPd7SafIB/4giIR3VkwaodQTAnIEcMPh9Y5eDdbIBj
eyWALgyU7FQXvMMtB0hoHWlPNza7V+KfEdr9O3zP1N9Mp2HYHOfmyAEF7/9APeED
tZoU0+XX4U2nOhk=
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:48:41 2025 by rpki-client