Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa
File:                     34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa (raw, json)
Hash identifier:          9HOolzBoXLsUuFMv6PED/vkvzNRIIY/qZDKarqxMqas=
Subject key identifier:   5B:9C:6C:1A:F5:13:9B:80:92:7D:BD:F9:AD:B7:F4:81:12:2B:B4:F6
Certificate issuer:       /CN=D027A3C3905699BE1B01BC2FAF77686EEA66C20A
Certificate serial:       795A51EEF6A5F72DEDC197E971097CEBB386FA84
Authority key identifier: D0:27:A3:C3:90:56:99:BE:1B:01:BC:2F:AF:77:68:6E:EA:66:C2:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa
Signing time:             Tue 25 Mar 2025 14:27:38 +0000
ROA not before:           Tue 25 Mar 2025 14:22:38 +0000
ROA not after:            Tue 24 Mar 2026 14:27:38 +0000
asID:                     269467
IP address blocks:        45.187.140.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5a:51:ee:f6:a5:f7:2d:ed:c1:97:e9:71:09:7c:eb:b3:86:fa:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D027A3C3905699BE1B01BC2FAF77686EEA66C20A
        Validity
            Not Before: Mar 25 14:22:38 2025 GMT
            Not After : Mar 24 14:27:38 2026 GMT
        Subject: CN=5B9C6C1AF5139B80927DBDF9ADB7F481122BB4F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:93:32:02:b2:32:ad:81:0e:ca:f6:d7:35:
                    7f:45:bb:9e:28:0d:88:88:67:6e:b0:a2:07:f6:8f:
                    1d:27:84:ba:b8:9b:e2:0e:a0:27:d6:d5:3b:3f:e2:
                    21:a3:ab:c5:9a:9c:f0:2a:56:3e:36:11:ad:15:86:
                    26:bc:9e:d0:d5:cb:a3:b0:7c:dc:2d:49:05:1c:b7:
                    00:f7:3a:51:7a:09:57:d3:77:3d:5c:ca:f5:d8:cf:
                    9b:e2:46:06:d9:4b:47:34:13:f1:93:a7:bc:bc:35:
                    46:53:20:95:94:dd:3f:db:72:78:82:ba:ce:b3:af:
                    c0:37:a2:ce:f3:d2:b2:d4:5b:c2:da:60:c4:7f:79:
                    6b:9b:14:07:59:49:c7:d4:a0:76:84:49:26:83:e7:
                    95:7e:1e:37:3a:31:3d:e0:e2:7c:03:03:5c:34:58:
                    f5:92:ca:40:03:5b:d7:9b:6a:d9:5d:a9:03:99:17:
                    98:50:94:48:ca:46:4a:60:f1:82:f5:56:43:9a:03:
                    7b:c4:09:e3:22:71:8a:8b:9c:cb:ac:3c:63:75:af:
                    49:2d:fc:7f:25:b5:17:a2:0b:91:b4:13:e2:63:65:
                    e7:dc:5c:a4:7d:75:b2:4b:40:da:0a:6f:22:58:0e:
                    a3:c0:8c:66:52:79:72:a8:57:44:7e:c9:63:5b:84:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9C:6C:1A:F5:13:9B:80:92:7D:BD:F9:AD:B7:F4:81:12:2B:B4:F6
            X509v3 Authority Key Identifier:
                keyid:D0:27:A3:C3:90:56:99:BE:1B:01:BC:2F:AF:77:68:6E:EA:66:C2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:4e:08:57:da:a9:9a:f0:48:d2:39:c1:43:e5:18:c1:46:df:
         7c:32:ac:8e:04:66:0f:f0:a4:de:6c:01:5e:63:18:5c:92:60:
         92:61:32:30:df:11:ff:d6:60:bd:3d:db:5e:c4:a1:35:08:96:
         cc:ff:ca:32:cd:b4:8b:3a:5e:09:11:7c:72:78:ba:f1:ed:44:
         0f:ff:f2:83:37:5a:80:b1:14:cc:07:4d:db:eb:ad:99:d5:eb:
         5b:7c:0f:87:bc:aa:cc:e3:08:9c:09:23:8e:b5:04:82:63:9c:
         72:6f:56:5b:67:ac:ad:e9:d2:77:4b:a8:42:f5:07:a1:bb:59:
         d3:4d:02:51:30:8b:eb:2c:88:77:80:e2:a9:92:d7:4e:38:5c:
         33:b3:19:6e:e4:00:31:60:a3:13:6e:15:6b:23:2a:33:9f:e4:
         64:81:b3:52:e6:b9:b5:fe:e1:88:f6:2e:4a:4e:bc:6c:ce:ac:
         b3:be:15:a0:33:93:03:cf:d7:8e:40:b2:c1:9a:27:65:dd:1e:
         d4:81:cd:10:84:e1:07:f0:30:09:bd:19:a3:0f:e4:5b:85:ae:
         e8:a9:53:2e:52:6d:4a:3f:56:36:9a:98:e6:40:bf:97:28:76:
         3e:ab:f7:8a:0d:eb:45:83:3e:f1:2c:96:86:ca:8f:01:02:25:
         8a:fd:a0:d3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeVpR7val9y3twZfpcQl867OG+oQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAyN0EzQzM5MDU2OTlCRTFCMDFCQzJGQUY3NzY4NkVF
QTY2QzIwQTAeFw0yNTAzMjUxNDIyMzhaFw0yNjAzMjQxNDI3MzhaMDMxMTAvBgNV
BAMTKDVCOUM2QzFBRjUxMzlCODA5MjdEQkRGOUFEQjdGNDgxMTIyQkI0RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV4JMyArIyrYEOyvbXNX9Fu54o
DYiIZ26wogf2jx0nhLq4m+IOoCfW1Ts/4iGjq8WanPAqVj42Ea0Vhia8ntDVy6Ow
fNwtSQUctwD3OlF6CVfTdz1cyvXYz5viRgbZS0c0E/GTp7y8NUZTIJWU3T/bcniC
us6zr8A3os7z0rLUW8LaYMR/eWubFAdZScfUoHaESSaD55V+Hjc6MT3g4nwDA1w0
WPWSykADW9ebatldqQOZF5hQlEjKRkpg8YL1VkOaA3vECeMicYqLnMusPGN1r0kt
/H8ltReiC5G0E+JjZefcXKR9dbJLQNoKbyJYDqPAjGZSeXKoV0R+yWNbhPdFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUW5xsGvUTm4CSfb35rbf0gRIrtPYwHwYDVR0j
BBgwFoAU0Cejw5BWmb4bAbwvr3dobupmwgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2Myc0FWSFl2QnhuTnBWREFBMjhlYW5tSjlvZWdTWUNYVUc3NUtQR0h1
d2svMC9EMDI3QTNDMzkwNTY5OUJFMUIwMUJDMkZBRjc3Njg2RUVBNjZDMjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwMjdBM0MzOTA1Njk5QkUx
QjAxQkMyRkFGNzc2ODZFRUE2NkMyMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdjMnNBVkhZdkJ4bk5wVkRBQTI4ZWFubUo5b2VnU1lDWFVHNzVLUEdIdXdrLzAv
MzQzNTJlMzEzODM3MmUzMTM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzNDM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItu4wwDQYJKoZIhvcNAQELBQADggEBAAtOCFfa
qZrwSNI5wUPlGMFG33wyrI4EZg/wpN5sAV5jGFySYJJhMjDfEf/WYL09217EoTUI
lsz/yjLNtIs6XgkRfHJ4uvHtRA//8oM3WoCxFMwHTdvrrZnV61t8D4e8qszjCJwJ
I461BIJjnHJvVltnrK3p0ndLqEL1B6G7WdNNAlEwi+ssiHeA4qmS1044XDOzGW7k
ADFgoxNuFWsjKjOf5GSBs1LmubX+4Yj2LkpOvGzOrLO+FaAzkwPP145AssGaJ2Xd
HtSBzRCE4QfwMAm9GaMP5FuFruipUy5SbUo/VjaamOZAv5codj6r94oN60WDPvEs
lobKjwECJYr9oNM=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:15:30 2025 by rpki-client