Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32342d3234203d3e20323638303239.roa
File:                     34352e3136382e35322e302f32342d3234203d3e20323638303239.roa (raw, json)
Hash identifier:          PyYfKekM8OXSd8cUjkzikx4zNFfU05qTuH/X/t30G5c=
Subject key identifier:   F7:5B:99:DF:ED:FE:77:9A:A6:9C:88:7E:A5:D0:C7:5F:01:F9:C1:D0
Certificate issuer:       /CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
Certificate serial:       01C763DCF6DC41229F54D570656BE38986D9E47F
Authority key identifier: 5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32342d3234203d3e20323638303239.roa
Signing time:             Thu 02 Feb 2023 14:00:09 +0000
ROA not before:           Thu 02 Feb 2023 13:55:09 +0000
ROA not after:            Thu 01 Feb 2024 14:00:09 +0000
asID:                     268029
IP address blocks:        45.168.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c7:63:dc:f6:dc:41:22:9f:54:d5:70:65:6b:e3:89:86:d9:e4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
        Validity
            Not Before: Feb  2 13:55:09 2023 GMT
            Not After : Feb  1 14:00:09 2024 GMT
        Subject: CN=F75B99DFEDFE779AA69C887EA5D0C75F01F9C1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:1e:a9:46:73:a2:73:ef:ae:0a:4a:af:6e:
                    5e:c5:df:bf:d1:c3:f3:d7:29:c0:35:51:f5:bb:c5:
                    b3:30:fa:df:84:75:15:02:f9:3b:94:28:bd:86:1e:
                    20:2d:2e:f3:02:3c:c2:a9:95:4a:f3:7b:c3:d4:c7:
                    f0:67:68:f6:88:b1:82:bd:64:10:b4:dd:f3:c7:d4:
                    10:63:3f:99:eb:2d:44:7a:80:96:9e:1a:2e:ea:96:
                    94:cf:a8:a7:c4:fc:6d:7c:40:20:be:bd:7f:5d:73:
                    81:0c:b8:e4:1e:ee:8d:a0:eb:c2:b5:13:69:2f:45:
                    a5:b2:2e:c6:1a:d6:49:fa:bf:7f:06:62:6e:f2:3e:
                    77:b0:34:04:9f:f9:44:1b:22:22:6e:8c:88:67:cb:
                    75:59:cd:48:96:dd:95:5e:83:02:f5:0f:57:48:22:
                    b8:f7:65:aa:61:a8:aa:4e:1e:93:03:40:74:0a:c6:
                    b0:e8:a6:4e:fc:3b:5d:da:c3:7d:d2:33:70:02:0d:
                    10:17:93:06:d3:e6:3f:b0:d2:6b:3f:be:4f:7c:46:
                    18:80:21:4a:ad:8c:6e:e3:a8:d4:16:0b:d6:07:4c:
                    e7:40:9e:24:41:54:ab:77:99:d0:45:b8:ba:c8:5c:
                    ec:89:e6:b0:b0:67:63:d1:3c:37:11:be:05:bc:96:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5B:99:DF:ED:FE:77:9A:A6:9C:88:7E:A5:D0:C7:5F:01:F9:C1:D0
            X509v3 Authority Key Identifier:
                keyid:5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32342d3234203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:49:40:f4:03:aa:56:a2:90:e5:d4:b1:ff:51:1e:24:d8:a8:
         c4:87:2b:77:ad:64:1a:9b:fd:e1:ad:e5:33:84:ee:be:5c:05:
         d1:03:5f:bf:ca:f7:58:f1:b9:08:51:e1:45:62:3f:27:34:86:
         7f:6d:0a:60:fa:f5:01:c4:fa:72:11:00:c3:22:16:d6:b7:97:
         57:d2:1a:60:85:38:51:d0:4d:2e:11:cf:4d:5f:c5:1c:bd:70:
         ae:d9:70:fa:52:2d:cc:38:ce:9d:b6:ac:24:68:94:d3:fe:a6:
         80:bb:90:d6:ec:82:aa:ce:06:6f:37:a1:73:d9:22:4c:ca:bc:
         78:d5:6e:33:23:1e:0f:cc:4d:b5:11:cd:16:46:ed:76:12:e8:
         d9:67:a2:b9:c2:ca:b7:18:d7:d7:fa:22:e7:32:1e:be:f8:28:
         ff:a8:9a:2b:da:25:2f:a1:57:33:31:72:af:e5:ec:48:59:43:
         25:e6:05:05:3d:9c:43:03:de:aa:5d:e5:ba:00:c3:2e:00:ba:
         b9:47:ba:80:7f:3a:29:76:46:26:cd:42:57:17:d8:34:0e:e0:
         21:f8:f0:3e:70:b3:8f:92:47:c2:96:37:52:79:1f:a1:30:fc:
         20:9d:58:ac:47:64:2a:92:06:58:67:01:49:3d:3b:33:ad:69:
         c4:99:87:7f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAcdj3PbcQSKfVNVwZWvjiYbZ5H8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUMzMTE1QzZCRkJCOENDNEMzRjEwNUE1Q0Q1NzYyQzND
NkI5MDYyMTAeFw0yMzAyMDIxMzU1MDlaFw0yNDAyMDExNDAwMDlaMDMxMTAvBgNV
BAMTKEY3NUI5OURGRURGRTc3OUFBNjlDODg3RUE1RDBDNzVGMDFGOUMxRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vh6pRnOic++uCkqvbl7F37/R
w/PXKcA1UfW7xbMw+t+EdRUC+TuUKL2GHiAtLvMCPMKplUrze8PUx/BnaPaIsYK9
ZBC03fPH1BBjP5nrLUR6gJaeGi7qlpTPqKfE/G18QCC+vX9dc4EMuOQe7o2g68K1
E2kvRaWyLsYa1kn6v38GYm7yPnewNASf+UQbIiJujIhny3VZzUiW3ZVegwL1D1dI
Irj3ZaphqKpOHpMDQHQKxrDopk78O13aw33SM3ACDRAXkwbT5j+w0ms/vk98RhiA
IUqtjG7jqNQWC9YHTOdAniRBVKt3mdBFuLrIXOyJ5rCwZ2PRPDcRvgW8loH/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU91uZ3+3+d5qmnIh+pdDHXwH5wdAwHwYDVR0j
BBgwFoAUXDEVxr+7jMTD8QWlzVdiw8a5BiEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkZuRkNGNThVVWd6U3RiRExuNmtBdFQ3NGplVERXNUFyZzhCSGVvRmpl
Y1UvMC81QzMxMTVDNkJGQkI4Q0M0QzNGMTA1QTVDRDU3NjJDM0M2QjkwNjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDMzExNUM2QkZCQjhDQzRD
M0YxMDVBNUNENTc2MkMzQzZCOTA2MjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZGbkZDRjU4VVVnelN0YkRMbjZrQXRUNzRqZVREVzVBcmc4Qkhlb0ZqZWNVLzAv
MzQzNTJlMzEzNjM4MmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALag0MA0GCSqGSIb3DQEBCwUAA4IBAQCcSUD0A6pW
opDl1LH/UR4k2KjEhyt3rWQam/3hreUzhO6+XAXRA1+/yvdY8bkIUeFFYj8nNIZ/
bQpg+vUBxPpyEQDDIhbWt5dX0hpghThR0E0uEc9NX8UcvXCu2XD6Ui3MOM6dtqwk
aJTT/qaAu5DW7IKqzgZvN6Fz2SJMyrx41W4zIx4PzE21Ec0WRu12EujZZ6K5wsq3
GNfX+iLnMh6++Cj/qJor2iUvoVczMXKv5exIWUMl5gUFPZxDA96qXeW6AMMuALq5
R7qAfzopdkYmzUJXF9g0DuAh+PA+cLOPkkfCljdSeR+hMPwgnVisR2QqkgZYZwFJ
PTszrWnEmYd/
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:23:21 2025 by rpki-client