Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32322d3232203d3e20323637323136.roa
File:                     34352e3233312e3137322e302f32322d3232203d3e20323637323136.roa (raw, json)
Hash identifier:          Iq8h9LMWyerWrS88i7NA8Zv81Sy3pdVZEISGuLY1DoI=
Subject key identifier:   55:70:F3:93:16:9A:56:A6:F5:51:B2:5C:3F:95:48:19:B8:40:04:86
Certificate issuer:       /CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Certificate serial:       63AC0CEBF768736E850570C35AE8BD61CEA5F086
Authority key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32322d3232203d3e20323637323136.roa
Signing time:             Tue 04 Feb 2025 19:36:37 +0000
ROA not before:           Tue 04 Feb 2025 19:31:37 +0000
ROA not after:            Tue 03 Feb 2026 19:36:37 +0000
asID:                     267216
IP address blocks:        45.231.172.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ac:0c:eb:f7:68:73:6e:85:05:70:c3:5a:e8:bd:61:ce:a5:f0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
        Validity
            Not Before: Feb  4 19:31:37 2025 GMT
            Not After : Feb  3 19:36:37 2026 GMT
        Subject: CN=5570F393169A56A6F551B25C3F954819B8400486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:d2:f3:53:b7:36:99:82:0f:ed:fd:f1:cc:
                    15:89:73:60:34:ed:f9:85:9e:78:ae:3f:bb:69:6b:
                    5f:ad:ee:6a:07:6d:1e:08:1f:7e:36:b9:2d:42:3a:
                    20:ea:77:d1:17:fb:ea:05:5d:aa:ab:bb:38:b8:ac:
                    06:7a:3a:ce:83:cf:bb:3f:ac:f7:6d:13:70:02:19:
                    0c:05:4d:27:1d:04:ef:54:a3:96:64:4a:52:cd:c3:
                    37:14:8b:7f:c6:fc:2b:e7:57:70:b1:1d:3d:a6:67:
                    5d:1e:3c:50:39:44:89:21:6a:d8:7f:ec:78:e2:f5:
                    b3:b8:57:f0:ee:00:a5:8c:6e:6d:b9:56:c9:27:07:
                    91:48:d4:a3:a0:26:09:6b:3c:29:67:fc:c3:c2:e0:
                    f8:a5:ce:d9:24:9e:70:d4:2f:64:c0:eb:a9:df:be:
                    d0:0e:ac:dc:92:eb:d9:36:15:8c:47:6e:93:05:5d:
                    c0:0f:ee:53:e0:40:b9:bd:65:22:09:40:d0:24:87:
                    f1:8f:52:d8:f9:a5:26:d0:fa:70:8e:64:9b:43:e8:
                    81:76:2c:bb:8e:7e:69:6e:73:86:79:ad:06:31:51:
                    3d:c7:2b:0b:d3:f5:93:b3:6b:8e:13:19:41:51:eb:
                    d6:2c:f2:0d:56:a2:07:0b:70:4a:cb:1a:c5:9b:0a:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:70:F3:93:16:9A:56:A6:F5:51:B2:5C:3F:95:48:19:B8:40:04:86
            X509v3 Authority Key Identifier:
                keyid:FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32322d3232203d3e20323637323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:69:df:45:a0:f1:a2:f1:61:45:c5:66:00:33:9c:83:58:5c:
         6b:d7:67:58:da:76:99:bd:07:e3:af:ac:00:35:c4:af:69:57:
         29:23:c8:99:97:04:08:4b:d3:da:40:1d:79:46:24:f6:03:c1:
         40:08:a9:76:42:60:23:53:7f:8b:9f:25:17:d0:6e:cb:b5:38:
         d0:ee:1a:91:ef:15:b1:d9:6b:69:00:cf:35:4f:cc:c7:1d:5b:
         ff:ae:9b:f8:e1:f5:20:d9:92:98:bd:e5:f7:d9:da:30:7c:7f:
         ed:96:10:d4:6e:ac:50:89:00:5d:1a:ec:96:46:d9:32:75:c0:
         63:a1:ce:6e:4c:d6:ac:79:3d:25:44:e1:4f:d5:9a:69:ce:d8:
         18:a2:04:ff:61:25:57:61:75:52:ed:89:4e:f0:46:da:3e:a0:
         d7:81:7c:e4:6d:d5:05:42:ad:bb:b2:34:b5:1d:38:7a:91:49:
         d0:dc:37:a8:3c:8e:19:e2:a8:4d:0b:ed:30:ce:2b:64:e2:03:
         c3:75:fa:11:90:d4:11:34:f1:4b:ec:c3:f2:d9:ff:fd:e7:5b:
         20:ae:76:8a:42:b9:c4:5d:5e:a4:2c:80:59:30:3b:dd:a3:b4:
         29:3a:fd:12:c8:e7:79:b1:cf:02:ae:4e:4e:c4:f0:e8:32:f0:
         60:6c:1e:f5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY6wM6/doc26FBXDDWui9Yc6l8IYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZENkM1RkI1NkY2RDYyQTRDQUQwOTc0MDI2MENDMjYy
QTkwQjAxMzAeFw0yNTAyMDQxOTMxMzdaFw0yNjAyMDMxOTM2MzdaMDMxMTAvBgNV
BAMTKDU1NzBGMzkzMTY5QTU2QTZGNTUxQjI1QzNGOTU0ODE5Qjg0MDA0ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9NLzU7c2mYIP7f3xzBWJc2A0
7fmFnniuP7tpa1+t7moHbR4IH342uS1COiDqd9EX++oFXaqruzi4rAZ6Os6Dz7s/
rPdtE3ACGQwFTScdBO9Uo5ZkSlLNwzcUi3/G/CvnV3CxHT2mZ10ePFA5RIkhath/
7Hji9bO4V/DuAKWMbm25VsknB5FI1KOgJglrPCln/MPC4PilztkknnDUL2TA66nf
vtAOrNyS69k2FYxHbpMFXcAP7lPgQLm9ZSIJQNAkh/GPUtj5pSbQ+nCOZJtD6IF2
LLuOfmluc4Z5rQYxUT3HKwvT9ZOza44TGUFR69Ys8g1WogcLcErLGsWbCtKzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVXDzkxaaVqb1UbJcP5VIGbhABIYwHwYDVR0j
BBgwFoAU/9bF+1b21ipMrQl0AmDMJiqQsBMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjViUDFTMkZmc2I3Nk5lbnR6S0g5czVXczZzd0pWaGM3ajlvNHVMUHhV
VnUvMC9GRkQ2QzVGQjU2RjZENjJBNENBRDA5NzQwMjYwQ0MyNjJBOTBCMDEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRDZDNUZCNTZGNkQ2MkE0
Q0FEMDk3NDAyNjBDQzI2MkE5MEIwMTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY1YlAxUzJGZnNiNzZOZW50ektIOXM1V3M2c3dKVmhjN2o5bzR1TFB4VVZ1LzAv
MzQzNTJlMzIzMzMxMmUzMTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczMjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt56wwDQYJKoZIhvcNAQELBQADggEBAIVp30Wg
8aLxYUXFZgAznINYXGvXZ1jadpm9B+OvrAA1xK9pVykjyJmXBAhL09pAHXlGJPYD
wUAIqXZCYCNTf4ufJRfQbsu1ONDuGpHvFbHZa2kAzzVPzMcdW/+um/jh9SDZkpi9
5ffZ2jB8f+2WENRurFCJAF0a7JZG2TJ1wGOhzm5M1qx5PSVE4U/VmmnO2BiiBP9h
JVdhdVLtiU7wRto+oNeBfORt1QVCrbuyNLUdOHqRSdDcN6g8jhniqE0L7TDOK2Ti
A8N1+hGQ1BE08Uvsw/LZ//3nWyCudopCucRdXqQsgFkwO92jtCk6/RLI53mxzwKu
Tk7E8Ogy8GBsHvU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:17:22 2025 by rpki-client