Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133322e302f32322d3332203d3e20323637363634.roa
File:                     34352e37312e3133322e302f32322d3332203d3e20323637363634.roa (raw, json)
Hash identifier:          ZvEaekKqAFnAG0I9ypVIwx1xRzbi2ehrV91SS/zBmHs=
Subject key identifier:   A2:99:53:C7:55:1F:DF:93:E5:B7:CC:98:2F:D6:BA:45:0B:FD:96:8E
Certificate issuer:       /CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
Certificate serial:       604053B1AFE2B08072D04BEDC9783407F2A6ABF5
Authority key identifier: 6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133322e302f32322d3332203d3e20323637363634.roa
Signing time:             Mon 02 Jan 2023 20:14:26 +0000
ROA not before:           Mon 02 Jan 2023 20:09:26 +0000
ROA not after:            Mon 01 Jan 2024 20:14:26 +0000
asID:                     267664
IP address blocks:        45.71.132.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:40:53:b1:af:e2:b0:80:72:d0:4b:ed:c9:78:34:07:f2:a6:ab:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
        Validity
            Not Before: Jan  2 20:09:26 2023 GMT
            Not After : Jan  1 20:14:26 2024 GMT
        Subject: CN=A29953C7551FDF93E5B7CC982FD6BA450BFD968E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:80:21:4e:c9:5e:32:64:1a:17:6c:7c:96:
                    fc:d9:86:a5:c7:f9:65:8f:81:8e:e1:ad:e6:7d:fb:
                    4f:64:e7:17:1d:bd:e3:5b:af:b4:46:63:13:19:b3:
                    66:b8:86:17:61:2d:95:93:eb:6b:bd:ad:f0:03:9e:
                    cb:20:41:14:9a:88:c6:7b:45:bf:59:09:89:82:24:
                    ad:c4:0d:f3:a2:5c:b5:02:82:9c:56:bb:d4:81:9d:
                    5a:04:c7:79:ec:f1:0b:be:79:76:16:2e:16:07:1f:
                    08:a6:10:a5:24:7e:37:1d:74:86:01:05:5a:4a:2d:
                    c6:46:ae:f8:fb:35:8f:b9:25:57:cc:66:5f:94:e2:
                    90:d3:c4:bf:1d:84:38:b1:90:f4:b6:9a:1e:65:1e:
                    d8:c3:15:a7:07:7b:9e:87:21:98:b6:ea:e1:84:3a:
                    a0:c2:51:b2:e6:9d:73:4d:20:66:7a:be:65:8c:c4:
                    8c:5e:34:ac:88:85:93:67:e3:ca:58:c9:ac:31:1e:
                    19:6e:25:34:48:cc:fe:45:e3:ff:88:9d:3d:fd:f8:
                    a2:4e:4e:fd:3f:93:37:c9:8a:ff:a7:de:84:84:c4:
                    ed:b4:50:65:50:e7:46:1f:cb:7b:4a:45:a0:fc:64:
                    12:9f:4b:c4:e1:72:d1:3f:3b:64:b3:55:0a:63:b3:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:99:53:C7:55:1F:DF:93:E5:B7:CC:98:2F:D6:BA:45:0B:FD:96:8E
            X509v3 Authority Key Identifier:
                keyid:6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133322e302f32322d3332203d3e20323637363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:fb:5b:7c:66:f3:31:4e:b4:d6:70:7e:37:12:49:93:d6:48:
         0e:8e:dc:d3:e1:74:c6:de:d9:16:ee:f1:00:0e:87:8b:b9:a3:
         1a:83:f2:a5:18:c9:1d:6c:01:cf:31:48:39:60:02:78:6f:3c:
         cb:c3:a5:c2:88:f1:2d:bd:74:58:04:ac:8e:5e:94:74:e2:61:
         95:c2:6e:37:ad:ae:fe:c1:a9:b1:96:33:9f:f8:cb:88:e6:3e:
         01:85:4f:ab:40:6d:49:c5:89:86:09:6a:97:df:e3:8f:31:97:
         28:de:c9:23:c8:16:88:c3:af:25:e4:6a:35:1e:b5:ed:70:c6:
         88:5c:f3:41:ff:71:fe:cb:ce:ea:9c:24:c3:1b:26:6b:47:b8:
         33:bb:75:ed:30:99:8a:1e:b3:a4:6d:9f:13:b2:d0:22:f1:24:
         16:f8:bb:c1:45:f8:ea:6e:d3:79:88:01:8a:d6:cf:bf:2c:10:
         03:0d:3b:a7:cf:c2:dd:23:3c:22:92:76:70:7a:bb:3f:13:7e:
         f4:47:33:34:3a:02:75:35:27:63:b5:8a:91:84:9c:0f:b8:42:
         bb:fe:87:60:50:5d:27:1a:de:f8:3f:71:9d:3c:96:3b:2b:b9:
         16:af:1e:2e:69:6d:e8:15:7b:ee:d7:02:73:04:4f:3c:38:2a:
         fb:46:cf:ae
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYEBTsa/isIBy0EvtyXg0B/Kmq/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFBRjZFQjJDMjI2RkUzNDY4Mzg5NDAwNkUxRjQ1MEI5
NDVBMjRERDAeFw0yMzAxMDIyMDA5MjZaFw0yNDAxMDEyMDE0MjZaMDMxMTAvBgNV
BAMTKEEyOTk1M0M3NTUxRkRGOTNFNUI3Q0M5ODJGRDZCQTQ1MEJGRDk2OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeYAhTsleMmQaF2x8lvzZhqXH
+WWPgY7hreZ9+09k5xcdveNbr7RGYxMZs2a4hhdhLZWT62u9rfADnssgQRSaiMZ7
Rb9ZCYmCJK3EDfOiXLUCgpxWu9SBnVoEx3ns8Qu+eXYWLhYHHwimEKUkfjcddIYB
BVpKLcZGrvj7NY+5JVfMZl+U4pDTxL8dhDixkPS2mh5lHtjDFacHe56HIZi26uGE
OqDCUbLmnXNNIGZ6vmWMxIxeNKyIhZNn48pYyawxHhluJTRIzP5F4/+InT39+KJO
Tv0/kzfJiv+n3oSExO20UGVQ50Yfy3tKRaD8ZBKfS8ThctE/O2SzVQpjs1+ZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoplTx1Uf35Plt8yYL9a6RQv9lo4wHwYDVR0j
BBgwFoAUaq9ussIm/jRoOJQAbh9FC5RaJN0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlEyQmZqejg4UDlXalp3Ukt4QnoxaHlqWnNRMXdpcUxNaTFBYVNzQUQy
akgvMC82QUFGNkVCMkMyMjZGRTM0NjgzODk0MDA2RTFGNDUwQjk0NUEyNERELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZBQUY2RUIyQzIyNkZFMzQ2
ODM4OTQwMDZFMUY0NTBCOTQ1QTI0REQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRMkJmano4OFA5V2pad1JLeEJ6MWh5alpzUTF3aXFMTWkxQWFTc0FEMmpILzAv
MzQzNTJlMzczMTJlMzEzMzMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUeEMA0GCSqGSIb3DQEBCwUAA4IBAQCZ+1t8ZvMx
TrTWcH43EkmT1kgOjtzT4XTG3tkW7vEADoeLuaMag/KlGMkdbAHPMUg5YAJ4bzzL
w6XCiPEtvXRYBKyOXpR04mGVwm43ra7+wamxljOf+MuI5j4BhU+rQG1JxYmGCWqX
3+OPMZco3skjyBaIw68l5Go1HrXtcMaIXPNB/3H+y87qnCTDGyZrR7gzu3XtMJmK
HrOkbZ8TstAi8SQW+LvBRfjqbtN5iAGK1s+/LBADDTunz8LdIzwiknZwers/E370
RzM0OgJ1NSdjtYqRhJwPuEK7/odgUF0nGt74P3GdPJY7K7kWrx4uaW3oFXvu1wJz
BE88OCr7Rs+u
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:25:12 2025 by rpki-client