Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/34352e3138312e37362e302f32342d3332203d3e20323731343239.roa
File:                     34352e3138312e37362e302f32342d3332203d3e20323731343239.roa (raw, json)
Hash identifier:          qTxpWY89dx+7vbu6dn0LlceL6OTtSrbrBN5KWezhB9c=
Subject key identifier:   F6:E3:BB:B7:C4:C0:01:C9:B7:04:C6:DB:E4:C7:3B:DD:37:3B:E9:54
Certificate issuer:       /CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
Certificate serial:       7296FC508BDEEAA3B1BD5C92872BEBD44597A4FB
Authority key identifier: FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/34352e3138312e37362e302f32342d3332203d3e20323731343239.roa
Signing time:             Fri 03 May 2024 11:34:33 +0000
ROA not before:           Fri 03 May 2024 11:29:33 +0000
ROA not after:            Fri 02 May 2025 11:34:33 +0000
asID:                     271429
IP address blocks:        45.181.76.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:96:fc:50:8b:de:ea:a3:b1:bd:5c:92:87:2b:eb:d4:45:97:a4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
        Validity
            Not Before: May  3 11:29:33 2024 GMT
            Not After : May  2 11:34:33 2025 GMT
        Subject: CN=F6E3BBB7C4C001C9B704C6DBE4C73BDD373BE954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:fb:e6:7f:d5:7f:88:28:00:1c:8f:40:c7:
                    20:76:bf:35:18:85:2f:9a:f7:6b:07:94:6e:62:94:
                    a8:29:98:f6:fd:4e:fd:6b:7d:f9:98:3a:8d:28:79:
                    b9:c5:56:9d:2e:24:bb:3b:8d:d5:44:43:a8:04:0f:
                    54:b1:48:0a:11:d8:10:22:f1:0c:b9:42:96:3c:07:
                    09:bd:41:92:12:8c:42:4f:d4:fd:52:c8:49:5e:48:
                    89:53:4d:39:85:b9:65:1a:33:2e:07:b5:e8:cf:b3:
                    37:3a:25:21:36:e6:a6:3a:01:ac:96:60:4e:1e:b8:
                    e3:c5:65:c6:20:a5:82:f2:19:34:ae:3c:59:2c:22:
                    93:b6:d0:cb:07:34:0c:32:3c:1f:88:8d:d5:90:a6:
                    46:77:75:a5:16:d0:9f:fa:b9:98:18:96:c6:8b:75:
                    fe:35:e8:f3:25:61:f9:db:e6:c1:94:49:b3:42:2b:
                    c6:5d:80:ff:00:c0:fc:fd:fb:ba:f4:97:1b:5c:65:
                    ac:2d:4f:8a:fd:c5:43:61:e8:56:a7:62:c3:cf:02:
                    8a:a1:6c:3d:9f:5b:81:cf:12:48:c6:04:8b:fc:ab:
                    a0:97:63:80:56:fa:c6:cd:bf:d0:fe:c4:2c:0f:51:
                    f9:8c:60:7b:c3:7a:91:94:59:41:d0:8c:19:a8:12:
                    68:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E3:BB:B7:C4:C0:01:C9:B7:04:C6:DB:E4:C7:3B:DD:37:3B:E9:54
            X509v3 Authority Key Identifier:
                keyid:FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/34352e3138312e37362e302f32342d3332203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:9f:1c:e1:21:da:f7:7e:58:ce:1c:56:92:16:06:95:a9:aa:
         86:78:87:27:ed:69:94:bd:5a:c5:01:c7:55:bc:1e:f0:67:28:
         3c:47:0c:1a:db:fb:ce:da:ed:af:a6:d2:0b:8f:80:fd:98:c6:
         e9:90:a4:c9:8c:b0:00:8e:57:8c:c2:ff:b2:f6:96:96:06:46:
         64:41:81:36:ba:5b:86:c5:c6:fd:e0:c7:24:20:16:b8:6b:9f:
         83:96:77:7e:5c:cc:83:f1:47:ac:1b:00:5b:3d:25:81:74:4a:
         fd:10:87:b6:2e:55:e0:d5:ea:9f:c6:ae:0c:a3:94:75:0f:b5:
         03:d5:ae:3e:3f:71:1b:96:df:d0:c5:4c:fe:d2:e6:b1:d1:c2:
         71:36:33:09:a1:2b:f1:82:6d:6c:13:e9:16:b7:56:22:fe:31:
         22:58:f7:2b:b7:45:82:68:17:92:69:4b:f8:e6:d7:54:a4:22:
         4a:36:ef:46:fc:a5:ec:00:16:03:85:41:d9:29:12:34:e2:25:
         5f:2f:b3:c1:f5:40:be:c3:c4:e3:b7:bf:78:e9:dd:51:cf:26:
         ab:32:e8:60:f7:78:44:30:48:a4:2a:79:43:bf:48:5b:79:bd:
         eb:4f:c4:3e:33:57:a9:53:46:fc:05:cc:ca:c2:85:5b:15:0b:
         e8:19:e0:b5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcpb8UIve6qOxvVyShyvr1EWXpPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYwOEZGQjZEMEZFMzlENDYwOThGMjlFMjU2MTUwMEU4
ODI3QzNCMzAeFw0yNDA1MDMxMTI5MzNaFw0yNTA1MDIxMTM0MzNaMDMxMTAvBgNV
BAMTKEY2RTNCQkI3QzRDMDAxQzlCNzA0QzZEQkU0QzczQkREMzczQkU5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJv/vmf9V/iCgAHI9AxyB2vzUY
hS+a92sHlG5ilKgpmPb9Tv1rffmYOo0oebnFVp0uJLs7jdVEQ6gED1SxSAoR2BAi
8Qy5QpY8Bwm9QZISjEJP1P1SyEleSIlTTTmFuWUaMy4HtejPszc6JSE25qY6AayW
YE4euOPFZcYgpYLyGTSuPFksIpO20MsHNAwyPB+IjdWQpkZ3daUW0J/6uZgYlsaL
df416PMlYfnb5sGUSbNCK8ZdgP8AwPz9+7r0lxtcZawtT4r9xUNh6FanYsPPAoqh
bD2fW4HPEkjGBIv8q6CXY4BW+sbNv9D+xCwPUfmMYHvDepGUWUHQjBmoEminAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9uO7t8TAAcm3BMbb5Mc73Tc76VQwHwYDVR0j
BBgwFoAU/wj/ttD+OdRgmPKeJWFQDognw7MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2FoS2tnNjRIcGgzNFNWZXBGbzZkVUxaVk1HYUNMQ3FEUDRKSlBpU0x4
eDkvMC9GRjA4RkZCNkQwRkUzOUQ0NjA5OEYyOUUyNTYxNTAwRTg4MjdDM0IzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMDhGRkI2RDBGRTM5RDQ2
MDk4RjI5RTI1NjE1MDBFODgyN0MzQjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdhaEtrZzY0SHBoMzRTVmVwRm82ZFVMWlZNR2FDTENxRFA0SkpQaVNMeHg5LzAv
MzQzNTJlMzEzODMxMmUzNzM2MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNzMx
MzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbVMMA0GCSqGSIb3DQEBCwUAA4IBAQBKnxzhIdr3
fljOHFaSFgaVqaqGeIcn7WmUvVrFAcdVvB7wZyg8Rwwa2/vO2u2vptILj4D9mMbp
kKTJjLAAjleMwv+y9paWBkZkQYE2uluGxcb94MckIBa4a5+Dlnd+XMyD8UesGwBb
PSWBdEr9EIe2LlXg1eqfxq4Mo5R1D7UD1a4+P3Eblt/QxUz+0uax0cJxNjMJoSvx
gm1sE+kWt1Yi/jEiWPcrt0WCaBeSaUv45tdUpCJKNu9G/KXsABYDhUHZKRI04iVf
L7PB9UC+w8Tjt7946d1RzyarMuhg93hEMEikKnlDv0hbeb3rT8Q+M1epU0b8BczK
woVbFQvoGeC1
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:18:56 2025 by rpki-client