Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32322d3232203d3e20323637303936.roa
File:                     34352e3232392e32342e302f32322d3232203d3e20323637303936.roa (raw, json)
Hash identifier:          LVrCLVq4Iulh47oFDu0R5QeZy/Yt6HyJmcUDL64JEIU=
Subject key identifier:   C3:B5:54:83:A1:D1:1B:7D:7B:82:02:EF:B8:3E:63:9B:81:CD:6D:22
Certificate issuer:       /CN=6EA37C4D080AEB9F5587B7C537BE633D714F5748
Certificate serial:       51C1D1015CBC0FB9F4C79E25C304AEFF3C43A4A4
Authority key identifier: 6E:A3:7C:4D:08:0A:EB:9F:55:87:B7:C5:37:BE:63:3D:71:4F:57:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32322d3232203d3e20323637303936.roa
Signing time:             Wed 04 Dec 2024 16:31:14 +0000
ROA not before:           Wed 04 Dec 2024 16:26:14 +0000
ROA not after:            Wed 03 Dec 2025 16:31:14 +0000
asID:                     267096
IP address blocks:        45.229.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c1:d1:01:5c:bc:0f:b9:f4:c7:9e:25:c3:04:ae:ff:3c:43:a4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EA37C4D080AEB9F5587B7C537BE633D714F5748
        Validity
            Not Before: Dec  4 16:26:14 2024 GMT
            Not After : Dec  3 16:31:14 2025 GMT
        Subject: CN=C3B55483A1D11B7D7B8202EFB83E639B81CD6D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:44:00:29:cf:af:3f:1e:8c:18:12:a5:f1:
                    6c:98:04:8f:cd:e9:40:65:60:e0:a8:1c:01:a4:ed:
                    7e:b4:4e:e8:e8:59:11:7b:6f:ea:7e:46:52:b9:4d:
                    f6:62:14:ca:46:63:e3:70:1b:35:05:7d:b2:59:84:
                    0a:59:84:2a:39:7f:ff:51:f1:4c:93:5b:38:63:5c:
                    60:80:42:44:ec:b3:22:1d:76:70:47:0d:91:0b:26:
                    8b:27:46:49:4e:82:3d:10:2d:0d:9f:82:55:0e:10:
                    03:de:b8:80:44:86:9d:1a:53:06:e0:d3:e0:61:89:
                    b0:90:94:21:b6:b5:8e:3f:63:a9:0e:07:f9:f8:ce:
                    47:26:6a:57:8a:31:1c:f5:4c:30:67:e0:7e:67:06:
                    f1:8b:98:fd:70:d0:df:b1:14:ca:2c:d5:f8:91:ec:
                    ec:e7:fd:68:c5:89:20:9e:0e:5e:65:fa:f6:aa:95:
                    19:0c:4d:84:3b:10:12:1f:00:39:4d:c3:e4:50:3d:
                    b6:ac:29:6f:30:1b:de:d2:5f:be:c0:79:38:20:0b:
                    2c:29:b2:bf:a5:83:81:41:ce:fe:c0:2f:68:34:3b:
                    de:59:24:35:5f:71:11:55:9d:63:c4:d6:c1:71:f8:
                    5e:91:0a:b8:72:fb:1c:e7:2b:67:d0:5d:87:5e:b0:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B5:54:83:A1:D1:1B:7D:7B:82:02:EF:B8:3E:63:9B:81:CD:6D:22
            X509v3 Authority Key Identifier:
                keyid:6E:A3:7C:4D:08:0A:EB:9F:55:87:B7:C5:37:BE:63:3D:71:4F:57:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/6EA37C4D080AEB9F5587B7C537BE633D714F5748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32322d3232203d3e20323637303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:07:4a:c2:de:ed:1c:40:0b:80:72:6e:e9:f9:90:40:3c:2a:
         5f:f1:3f:9e:e8:0c:1c:75:78:e6:64:27:b6:2a:82:d9:0b:b8:
         06:d1:13:f2:e4:59:26:b0:f7:22:77:5a:db:6b:94:61:20:5e:
         74:28:70:b1:b9:b7:16:b5:64:d3:b1:90:02:c2:6f:3c:c5:bf:
         2b:9a:a8:66:a1:f7:8f:d1:76:fa:0c:48:53:73:71:f1:3a:e1:
         4f:99:68:26:1e:10:ee:96:91:5a:6f:fa:c9:0d:4e:0d:fd:01:
         b9:79:ff:bd:82:99:73:2b:fe:58:e6:9c:03:c2:6e:cf:d6:eb:
         e7:7d:69:24:29:6b:ec:01:2a:72:5f:88:6b:ea:43:04:df:e4:
         33:7e:f5:cd:61:b2:30:26:27:ca:fb:62:39:b6:b4:71:e7:76:
         7e:db:45:1a:66:52:e4:92:86:7e:9d:79:67:ca:0b:0c:03:8a:
         9d:f1:3a:85:df:a4:b6:83:60:d5:80:5e:ac:1c:45:94:1c:7d:
         fd:40:e9:9e:14:92:90:0b:7a:d1:bf:0b:9f:7a:69:8a:aa:33:
         57:71:18:b0:54:f5:f3:cc:1f:e2:ca:56:ee:26:e7:70:05:35:
         e0:bf:bb:a8:f1:a1:dc:18:c3:f4:f1:c9:fe:61:f1:b6:f9:59:
         d1:0d:2b:30
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUcHRAVy8D7n0x54lwwSu/zxDpKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVBMzdDNEQwODBBRUI5RjU1ODdCN0M1MzdCRTYzM0Q3
MTRGNTc0ODAeFw0yNDEyMDQxNjI2MTRaFw0yNTEyMDMxNjMxMTRaMDMxMTAvBgNV
BAMTKEMzQjU1NDgzQTFEMTFCN0Q3QjgyMDJFRkI4M0U2MzlCODFDRDZEMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcRkQAKc+vPx6MGBKl8WyYBI/N
6UBlYOCoHAGk7X60TujoWRF7b+p+RlK5TfZiFMpGY+NwGzUFfbJZhApZhCo5f/9R
8UyTWzhjXGCAQkTssyIddnBHDZELJosnRklOgj0QLQ2fglUOEAPeuIBEhp0aUwbg
0+BhibCQlCG2tY4/Y6kOB/n4zkcmaleKMRz1TDBn4H5nBvGLmP1w0N+xFMos1fiR
7Ozn/WjFiSCeDl5l+vaqlRkMTYQ7EBIfADlNw+RQPbasKW8wG97SX77AeTggCywp
sr+lg4FBzv7AL2g0O95ZJDVfcRFVnWPE1sFx+F6RCrhy+xznK2fQXYdesGJLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUw7VUg6HRG317ggLvuD5jm4HNbSIwHwYDVR0j
BBgwFoAUbqN8TQgK659Vh7fFN75jPXFPV0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNms4QTJlVXRCd2k1a0E5UEo2eHBhc3pCU2NjeWNyTnB0MlpKZUJSSjVK
bjQvMC82RUEzN0M0RDA4MEFFQjlGNTU4N0I3QzUzN0JFNjMzRDcxNEY1NzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFQTM3QzREMDgwQUVCOUY1
NTg3QjdDNTM3QkU2MzNENzE0RjU3NDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZrOEEyZVV0QndpNWtBOVBKNnhwYXN6QlNjY3ljck5wdDJaSmVCUko1Sm40LzAv
MzQzNTJlMzIzMjM5MmUzMjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzAzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeUYMA0GCSqGSIb3DQEBCwUAA4IBAQBPB0rC3u0c
QAuAcm7p+ZBAPCpf8T+e6AwcdXjmZCe2KoLZC7gG0RPy5FkmsPcid1rba5RhIF50
KHCxubcWtWTTsZACwm88xb8rmqhmofeP0Xb6DEhTc3HxOuFPmWgmHhDulpFab/rJ
DU4N/QG5ef+9gplzK/5Y5pwDwm7P1uvnfWkkKWvsASpyX4hr6kME3+QzfvXNYbIw
JifK+2I5trRx53Z+20UaZlLkkoZ+nXlnygsMA4qd8TqF36S2g2DVgF6sHEWUHH39
QOmeFJKQC3rRvwufemmKqjNXcRiwVPXzzB/iylbuJudwBTXgv7uo8aHcGMP08cn+
YfG2+VnRDSsw
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:23:43 2025 by rpki-client