Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e372e302f32342d3234203d3e20323638393235.roa
File:                     34352e3137362e372e302f32342d3234203d3e20323638393235.roa (raw, json)
Hash identifier:          VBBmj7apnXu/Xxbe61vGl5FeNzswNcsFoWT5G0wzrw8=
Subject key identifier:   FA:F9:D7:80:E9:8A:1D:AC:F7:FA:79:6E:EF:32:E4:39:F1:78:A9:FE
Certificate issuer:       /CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
Certificate serial:       54E461C88BC90E81B7DB013F9E20E8838E985D35
Authority key identifier: E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e372e302f32342d3234203d3e20323638393235.roa
Signing time:             Thu 01 Feb 2024 14:27:01 +0000
ROA not before:           Thu 01 Feb 2024 14:22:01 +0000
ROA not after:            Thu 30 Jan 2025 14:27:01 +0000
asID:                     268925
IP address blocks:        45.176.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e4:61:c8:8b:c9:0e:81:b7:db:01:3f:9e:20:e8:83:8e:98:5d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
        Validity
            Not Before: Feb  1 14:22:01 2024 GMT
            Not After : Jan 30 14:27:01 2025 GMT
        Subject: CN=FAF9D780E98A1DACF7FA796EEF32E439F178A9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:22:72:e3:34:4c:4c:ba:8f:06:75:e7:15:
                    d8:0d:a7:86:ba:1c:b4:0c:9e:b6:95:6d:f5:36:8e:
                    5e:cd:4f:e8:8c:f8:68:a3:f4:2d:75:62:17:47:42:
                    37:16:d3:ba:73:62:68:54:e3:a7:0c:ef:2e:0f:1a:
                    ef:0b:54:f7:74:b9:00:d4:1a:9b:c1:3a:40:54:9c:
                    b6:92:69:05:ed:fa:e8:1a:55:c7:a6:38:c6:ae:be:
                    40:10:c8:f5:a9:84:e7:c5:d9:5c:86:35:15:8e:92:
                    24:0e:f4:0c:16:69:10:82:83:21:0f:80:9e:d6:54:
                    81:dd:a9:d8:8d:2f:c0:ed:fe:9f:d4:dd:90:b5:2a:
                    4d:2c:72:50:e6:bc:4b:91:88:bd:0a:fa:aa:df:84:
                    7e:cf:de:9e:61:24:52:da:77:21:0d:67:bf:7c:f2:
                    6e:79:c1:5f:1c:14:fc:3e:22:db:b0:de:32:51:31:
                    46:26:d3:3a:d4:d4:aa:2e:47:3b:70:76:b7:26:9a:
                    1f:21:de:23:6c:0c:7d:e5:bf:e4:f8:8a:3e:9d:7a:
                    b6:9c:74:fe:1f:fa:e2:45:b4:b4:a1:95:45:4c:dc:
                    99:e4:0a:80:71:fc:38:4d:6b:82:3b:84:f8:d9:98:
                    62:4d:cb:a9:fe:ba:f4:40:61:72:66:fb:c9:7d:f4:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F9:D7:80:E9:8A:1D:AC:F7:FA:79:6E:EF:32:E4:39:F1:78:A9:FE
            X509v3 Authority Key Identifier:
                keyid:E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e372e302f32342d3234203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:08:75:69:51:de:5a:11:1d:18:72:6d:30:ee:37:b2:4f:d8:
         dc:7b:ca:90:ca:64:37:e7:bc:65:92:cf:6a:74:62:3c:63:00:
         e4:26:98:70:ad:59:5e:a0:e6:cf:0d:a8:47:28:5a:1c:ac:e1:
         f4:c6:bd:3e:1e:ad:41:6d:4f:f9:fd:4f:29:80:1c:7d:88:75:
         58:37:e6:34:59:10:ce:30:51:31:cb:5c:45:37:0a:e4:a4:12:
         17:57:04:59:dd:f9:0f:55:ad:e9:d4:2a:4c:dc:34:f5:30:91:
         ae:0e:2a:da:65:a1:5e:da:80:14:c8:14:8a:60:51:8f:62:89:
         d9:a1:6b:45:7a:cd:76:5f:bb:98:37:16:5f:60:0c:c9:24:56:
         92:77:26:60:36:47:c2:f4:4d:3b:e7:3c:d3:89:2f:3c:52:52:
         99:b9:81:56:db:26:ec:be:70:86:d3:8d:ff:bc:f8:5d:9e:6a:
         b4:f1:11:6d:37:30:1c:a3:17:c0:bc:9e:a8:cb:61:e4:68:98:
         10:76:43:6e:5e:7b:9f:2e:7e:d3:8e:d0:12:1f:2c:4a:01:b7:
         41:c5:86:46:d7:24:cb:cf:dd:d1:ce:c0:07:6e:ca:a3:1c:1a:
         5f:a6:51:b3:f9:6a:e0:30:f7:b7:53:b0:e2:27:1d:32:12:a3:
         10:37:7c:13
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVORhyIvJDoG32wE/niDog46YXTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGRjQ5QTYyNkM4QjMzMDU4NjM3N0QyQjQzOThDQkMy
NEZBNTg2RTAeFw0yNDAyMDExNDIyMDFaFw0yNTAxMzAxNDI3MDFaMDMxMTAvBgNV
BAMTKEZBRjlENzgwRTk4QTFEQUNGN0ZBNzk2RUVGMzJFNDM5RjE3OEE5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/iJy4zRMTLqPBnXnFdgNp4a6
HLQMnraVbfU2jl7NT+iM+Gij9C11YhdHQjcW07pzYmhU46cM7y4PGu8LVPd0uQDU
GpvBOkBUnLaSaQXt+ugaVcemOMauvkAQyPWphOfF2VyGNRWOkiQO9AwWaRCCgyEP
gJ7WVIHdqdiNL8Dt/p/U3ZC1Kk0sclDmvEuRiL0K+qrfhH7P3p5hJFLadyENZ798
8m55wV8cFPw+Ituw3jJRMUYm0zrU1KouRztwdrcmmh8h3iNsDH3lv+T4ij6derac
dP4f+uJFtLShlUVM3JnkCoBx/DhNa4I7hPjZmGJNy6n+uvRAYXJm+8l99IFdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU+vnXgOmKHaz3+nlu7zLkOfF4qf4wHwYDVR0j
BBgwFoAU4v9JpibIszBYY3fStDmMvCT6WG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRVU1RXaDZWZW1l
S3QvMC9FMkZGNDlBNjI2QzhCMzMwNTg2Mzc3RDJCNDM5OENCQzI0RkE1ODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UyRkY0OUE2MjZDOEIzMzA1
ODYzNzdEMkI0Mzk4Q0JDMjRGQTU4NkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZdXBMQXB5RThwMWphQmFNUlZzVFdxcG9UZ1FKdGM0VVNUV2g2VmVtZUt0LzAv
MzQzNTJlMzEzNzM2MmUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODM5
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC2wBzANBgkqhkiG9w0BAQsFAAOCAQEALAh1aVHeWhEd
GHJtMO43sk/Y3HvKkMpkN+e8ZZLPanRiPGMA5CaYcK1ZXqDmzw2oRyhaHKzh9Ma9
Ph6tQW1P+f1PKYAcfYh1WDfmNFkQzjBRMctcRTcK5KQSF1cEWd35D1Wt6dQqTNw0
9TCRrg4q2mWhXtqAFMgUimBRj2KJ2aFrRXrNdl+7mDcWX2AMySRWkncmYDZHwvRN
O+c804kvPFJSmbmBVtsm7L5whtON/7z4XZ5qtPERbTcwHKMXwLyeqMth5GiYEHZD
bl57ny5+047QEh8sSgG3QcWGRtcky8/d0c7AB27KoxwaX6ZRs/lq4DD3t1Ow4icd
MhKjEDd8Ew==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:54 2025 by rpki-client