Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa
File:                     34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa (raw, json)
Hash identifier:          Me2As91cxhG+/dqx8yX9zaYQScOJY/cWFuECkfueDI4=
Subject key identifier:   B3:FD:DB:D6:28:32:EF:AF:B6:26:E4:52:43:47:3C:29:BC:CD:C7:6F
Certificate issuer:       /CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
Certificate serial:       624129AD1186D3BFA59DC9A327B255DF55CB4008
Authority key identifier: 35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa
Signing time:             Wed 08 Jan 2025 22:53:11 +0000
ROA not before:           Wed 08 Jan 2025 22:48:11 +0000
ROA not after:            Wed 07 Jan 2026 22:53:11 +0000
asID:                     268116
IP address blocks:        45.169.156.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:41:29:ad:11:86:d3:bf:a5:9d:c9:a3:27:b2:55:df:55:cb:40:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
        Validity
            Not Before: Jan  8 22:48:11 2025 GMT
            Not After : Jan  7 22:53:11 2026 GMT
        Subject: CN=B3FDDBD62832EFAFB626E45243473C29BCCDC76F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:18:02:68:95:69:ab:1f:b8:ee:04:51:1e:
                    d7:e4:a1:2f:5e:5c:a4:a9:2d:ab:52:89:24:11:c3:
                    93:2b:1d:7d:b8:0b:c5:47:85:61:dd:8b:23:48:8e:
                    dd:90:d6:d9:87:6f:36:5d:2f:b6:cb:69:60:1c:0b:
                    18:07:e5:d4:03:4a:4a:a5:ee:09:f5:4b:eb:9f:bd:
                    f5:62:65:a7:4e:27:eb:30:fd:69:6b:d8:25:61:aa:
                    bf:27:06:08:60:6c:19:fb:ed:65:49:3d:d7:80:bf:
                    92:ee:f3:7a:ec:c5:10:e2:30:b7:e5:19:95:8c:f7:
                    11:87:20:74:d0:86:f1:94:48:4b:9c:69:ff:7c:2d:
                    08:27:f3:6e:fe:b6:21:d6:47:28:e7:3f:32:f5:a5:
                    30:54:b2:e6:24:59:a3:6a:e2:34:c9:70:a6:2b:96:
                    85:d7:ad:d9:98:ce:1c:00:d9:39:71:54:dd:ac:ee:
                    9b:0b:2a:7f:c5:9c:b6:e4:81:37:cb:7f:42:04:76:
                    07:45:3d:c7:38:53:a2:8a:05:16:ee:f9:d6:07:d5:
                    71:21:6a:c4:c6:d9:0f:0f:5d:33:23:a3:10:5d:e3:
                    e9:0f:b8:ca:79:f4:74:40:11:0b:46:32:fa:0e:c2:
                    f2:a0:72:62:7f:08:36:54:7f:16:55:90:50:3e:c1:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FD:DB:D6:28:32:EF:AF:B6:26:E4:52:43:47:3C:29:BC:CD:C7:6F
            X509v3 Authority Key Identifier:
                keyid:35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:b3:fe:7b:5e:d8:f3:5d:3a:a2:e8:9a:b6:17:fe:0e:1a:7e:
         44:bd:c1:e5:bb:f8:18:11:6e:b8:62:ad:12:b6:76:1e:6a:90:
         61:ac:cf:9a:3e:e0:3c:ec:2f:f6:13:8f:df:43:ad:d9:24:04:
         ee:03:f6:b2:ba:42:75:93:10:31:93:67:0f:af:55:72:08:18:
         11:e0:f6:51:1d:9e:77:bd:9d:8a:f2:94:cc:18:58:ea:59:ed:
         08:c8:44:0b:28:7e:3a:c6:de:bf:b9:2b:6d:4a:bd:60:49:2a:
         f6:0c:54:56:91:11:49:02:c1:30:f6:2d:e0:21:79:71:08:8b:
         be:94:99:91:76:f5:7f:12:8a:e1:d9:8e:ba:af:6a:61:d2:37:
         35:f9:c1:bb:b1:26:74:65:a8:a2:50:a2:af:b8:b5:27:e2:61:
         13:d1:ac:76:01:89:62:41:ec:ef:66:7b:d0:2d:3a:4f:39:30:
         62:91:cf:3f:80:26:be:4d:88:3b:d8:22:16:0a:8c:48:eb:4e:
         95:47:54:a9:bb:c3:c4:e8:ca:37:4f:03:08:74:6c:9d:91:c4:
         5f:a1:73:02:34:36:2a:50:ca:41:0b:1d:b4:59:ab:7d:5a:b4:
         55:7b:eb:79:73:14:11:56:9c:f6:8d:5f:1b:24:d5:ac:84:84:
         83:d4:46:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYkEprRGG07+lncmjJ7JV31XLQAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3QzY2QUVERTVDODVENjJFNDNGMkU3QjQ3QTlBNEQy
QURCRURCQTAeFw0yNTAxMDgyMjQ4MTFaFw0yNjAxMDcyMjUzMTFaMDMxMTAvBgNV
BAMTKEIzRkREQkQ2MjgzMkVGQUZCNjI2RTQ1MjQzNDczQzI5QkNDREM3NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbohgCaJVpqx+47gRRHtfkoS9e
XKSpLatSiSQRw5MrHX24C8VHhWHdiyNIjt2Q1tmHbzZdL7bLaWAcCxgH5dQDSkql
7gn1S+ufvfViZadOJ+sw/Wlr2CVhqr8nBghgbBn77WVJPdeAv5Lu83rsxRDiMLfl
GZWM9xGHIHTQhvGUSEucaf98LQgn827+tiHWRyjnPzL1pTBUsuYkWaNq4jTJcKYr
loXXrdmYzhwA2TlxVN2s7psLKn/FnLbkgTfLf0IEdgdFPcc4U6KKBRbu+dYH1XEh
asTG2Q8PXTMjoxBd4+kPuMp59HRAEQtGMvoOwvKgcmJ/CDZUfxZVkFA+wQkVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUs/3b1igy76+2JuRSQ0c8KbzNx28wHwYDVR0j
BBgwFoAUNXxmrt5chdYuQ/LntHqaTSrb7bowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnlhRjZnVjVYNkV6WUU0dTlFc0pqMVhtZFpOUlExakFYVGdyM2RQMjZT
NlYvMi8zNTdDNjZBRURFNUM4NUQ2MkU0M0YyRTdCNDdBOUE0RDJBREJFREJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1N0M2NkFFREU1Qzg1RDYy
RTQzRjJFN0I0N0E5QTREMkFEQkVEQkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5YUY2Z1Y1WDZFellFNHU5RXNKajFYbWRaTlJRMWpBWFRncjNkUDI2UzZWLzIv
MzQzNTJlMzEzNjM5MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMTMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqZwwDQYJKoZIhvcNAQELBQADggEBAKSz/nte
2PNdOqLomrYX/g4afkS9weW7+BgRbrhirRK2dh5qkGGsz5o+4DzsL/YTj99Drdkk
BO4D9rK6QnWTEDGTZw+vVXIIGBHg9lEdnne9nYrylMwYWOpZ7QjIRAsofjrG3r+5
K21KvWBJKvYMVFaREUkCwTD2LeAheXEIi76UmZF29X8SiuHZjrqvamHSNzX5wbux
JnRlqKJQoq+4tSfiYRPRrHYBiWJB7O9me9AtOk85MGKRzz+AJr5NiDvYIhYKjEjr
TpVHVKm7w8ToyjdPAwh0bJ2RxF+hcwI0NipQykELHbRZq31atFV763lzFBFWnPaN
Xxsk1ayEhIPURhI=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:03:05 2025 by rpki-client