Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234392e302f32342d3234203d3e20323638323136.roa
File:                     34352e3233352e3234392e302f32342d3234203d3e20323638323136.roa (raw, json)
Hash identifier:          uDnHrHBO963Z2wsEDyueMIxEWbdPaoSydYryF/+M4W0=
Subject key identifier:   7A:63:F4:55:53:C0:8C:EA:F6:31:C3:93:00:E5:32:C7:E6:D7:98:08
Certificate issuer:       /CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
Certificate serial:       612053F129B9305DA8DBC85CB18B8FA564DDB1F7
Authority key identifier: 41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234392e302f32342d3234203d3e20323638323136.roa
Signing time:             Wed 20 Mar 2024 23:49:48 +0000
ROA not before:           Wed 20 Mar 2024 23:44:48 +0000
ROA not after:            Wed 19 Mar 2025 23:49:48 +0000
asID:                     268216
IP address blocks:        45.235.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:20:53:f1:29:b9:30:5d:a8:db:c8:5c:b1:8b:8f:a5:64:dd:b1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
        Validity
            Not Before: Mar 20 23:44:48 2024 GMT
            Not After : Mar 19 23:49:48 2025 GMT
        Subject: CN=7A63F45553C08CEAF631C39300E532C7E6D79808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:94:38:05:59:81:9a:fb:7d:ea:8f:08:6d:dc:
                    4b:14:36:d1:72:f8:67:aa:b1:bc:4a:45:9e:04:72:
                    41:8b:97:11:27:94:67:ad:6a:cb:8b:ab:19:ad:9e:
                    51:2e:90:0c:b1:fe:4e:db:14:36:5a:d5:6e:ba:a4:
                    13:b3:38:88:bc:29:f5:48:95:e5:58:31:f6:01:ef:
                    b6:98:91:9e:b6:9c:0c:36:ce:a6:87:5b:d2:03:5d:
                    84:ec:cf:f2:80:20:27:e1:08:e2:21:e3:a9:71:e0:
                    51:88:6c:cc:59:98:22:b4:e5:cd:42:5e:b9:30:52:
                    fd:c9:74:b5:2a:94:aa:9a:41:6f:39:5d:bb:a9:08:
                    52:70:a8:d8:b5:5d:5f:63:b3:cd:d1:23:fc:af:3f:
                    8a:f1:05:9b:8a:34:71:bd:ae:48:33:bd:6a:2d:8a:
                    2a:0b:c7:de:95:ca:a1:64:99:31:f9:2e:7a:29:5b:
                    27:8a:85:a3:01:49:3e:bb:44:f1:36:30:f7:f2:34:
                    84:2d:19:c7:ce:e0:34:71:3b:9a:46:70:01:b1:3a:
                    c9:ef:54:08:08:d5:ee:e8:1b:06:59:c5:4b:8d:c6:
                    a8:0e:00:26:1c:7d:49:20:da:94:0e:ee:24:2d:14:
                    f1:b7:60:35:ae:24:ef:a4:44:bd:37:93:8e:b9:4c:
                    97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:63:F4:55:53:C0:8C:EA:F6:31:C3:93:00:E5:32:C7:E6:D7:98:08
            X509v3 Authority Key Identifier:
                keyid:41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234392e302f32342d3234203d3e20323638323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:52:2e:cb:40:a9:5f:82:f8:18:c1:85:01:26:25:d6:57:32:
         72:52:56:68:31:a6:bf:3a:a6:ea:2b:aa:f5:a5:11:8e:56:15:
         e5:7a:be:5d:9e:68:56:77:15:8e:7e:eb:eb:27:27:34:2a:b2:
         d0:17:fe:9b:ed:24:dc:74:08:b9:45:48:df:17:b7:e0:96:e8:
         67:36:79:7f:c2:16:64:ad:5c:13:53:bd:5a:0a:5b:01:94:18:
         6d:df:e9:35:98:f7:9f:ea:c3:15:cc:5f:a1:80:c1:55:64:a9:
         29:66:d2:f2:4c:c0:88:2d:b3:c9:da:cb:5e:89:d7:1c:0d:0d:
         33:f6:de:7e:36:56:a9:d6:fc:3a:1c:45:53:5b:1c:3b:e1:18:
         74:ef:63:18:a3:45:98:66:5f:ca:72:c1:6d:83:9b:e2:25:84:
         43:ee:02:e5:79:da:27:02:d2:be:d9:20:fe:23:e7:79:6e:12:
         92:d1:77:a2:10:44:df:09:6d:27:a2:7c:ae:24:78:8e:94:80:
         5c:2d:61:01:f6:b6:28:1f:32:0d:10:72:cc:c9:3f:e5:aa:e1:
         ed:0a:f7:5d:be:b2:be:a8:dd:88:fa:b8:1c:ce:aa:f7:4d:5e:
         35:1c:86:ff:47:ab:9a:e1:4b:83:fe:17:9c:15:20:93:ea:8d:
         0e:f8:5a:dc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYSBT8Sm5MF2o28hcsYuPpWTdsfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDExMkUzNzMxRTBBRTU2MDM3MjgzMUU3NUVENjQyMEU5
NUVGQ0ZFMTAeFw0yNDAzMjAyMzQ0NDhaFw0yNTAzMTkyMzQ5NDhaMDMxMTAvBgNV
BAMTKDdBNjNGNDU1NTNDMDhDRUFGNjMxQzM5MzAwRTUzMkM3RTZENzk4MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdlDgFWYGa+33qjwht3EsUNtFy
+GeqsbxKRZ4EckGLlxEnlGetasuLqxmtnlEukAyx/k7bFDZa1W66pBOzOIi8KfVI
leVYMfYB77aYkZ62nAw2zqaHW9IDXYTsz/KAICfhCOIh46lx4FGIbMxZmCK05c1C
XrkwUv3JdLUqlKqaQW85XbupCFJwqNi1XV9js83RI/yvP4rxBZuKNHG9rkgzvWot
iioLx96VyqFkmTH5LnopWyeKhaMBST67RPE2MPfyNIQtGcfO4DRxO5pGcAGxOsnv
VAgI1e7oGwZZxUuNxqgOACYcfUkg2pQO7iQtFPG3YDWuJO+kRL03k465TJfJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUemP0VVPAjOr2McOTAOUyx+bXmAgwHwYDVR0j
BBgwFoAUQRLjcx4K5WA3KDHnXtZCDpXvz+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFybjVSZ0NHWVgzSEExVlQ2Y3RtNjE2amg0NzZwZ2lyZ25OUzRtUnJD
aXkvMC80MTEyRTM3MzFFMEFFNTYwMzcyODMxRTc1RUQ2NDIwRTk1RUZDRkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxMTJFMzczMUUwQUU1NjAz
NzI4MzFFNzVFRDY0MjBFOTVFRkNGRTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhcm41UmdDR1lYM0hBMVZUNmN0bTYxNmpoNDc2cGdpcmduTlM0bVJyQ2l5LzAv
MzQzNTJlMzIzMzM1MmUzMjM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6/kwDQYJKoZIhvcNAQELBQADggEBAERSLstA
qV+C+BjBhQEmJdZXMnJSVmgxpr86puorqvWlEY5WFeV6vl2eaFZ3FY5+6+snJzQq
stAX/pvtJNx0CLlFSN8Xt+CW6Gc2eX/CFmStXBNTvVoKWwGUGG3f6TWY95/qwxXM
X6GAwVVkqSlm0vJMwIgts8nay16J1xwNDTP23n42VqnW/DocRVNbHDvhGHTvYxij
RZhmX8pywW2Dm+IlhEPuAuV52icC0r7ZIP4j53luEpLRd6IQRN8JbSeifK4keI6U
gFwtYQH2tigfMg0QcszJP+Wq4e0K912+sr6o3Yj6uBzOqvdNXjUchv9Hq5rhS4P+
F5wVIJPqjQ74Wtw=
-----END CERTIFICATE-----
Generated at Thu Jun 12 02:51:50 2025 by rpki-client