Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130332e302f32342d3234203d3e20323636303935.roa
File:                     34352e352e3130332e302f32342d3234203d3e20323636303935.roa (raw, json)
Hash identifier:          wWwEDt9MrO8pQsRvG+il8agC8KcsC2c8p//M+aqBDew=
Subject key identifier:   5E:21:24:31:35:3D:CF:5D:7A:DF:12:7D:5D:D6:FD:4A:03:B9:F6:71
Certificate issuer:       /CN=771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0
Certificate serial:       30665ADD631B908B0818613A1EDEE533123AA0F4
Authority key identifier: 77:1D:E8:CD:05:B7:DC:3B:A5:A3:29:B2:F1:10:E4:AD:8D:6C:7B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130332e302f32342d3234203d3e20323636303935.roa
Signing time:             Fri 03 Jan 2025 14:22:38 +0000
ROA not before:           Fri 03 Jan 2025 14:17:38 +0000
ROA not after:            Fri 02 Jan 2026 14:22:38 +0000
asID:                     266095
IP address blocks:        45.5.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:66:5a:dd:63:1b:90:8b:08:18:61:3a:1e:de:e5:33:12:3a:a0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0
        Validity
            Not Before: Jan  3 14:17:38 2025 GMT
            Not After : Jan  2 14:22:38 2026 GMT
        Subject: CN=5E212431353DCF5D7ADF127D5DD6FD4A03B9F671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:ae:d2:e3:f6:8d:bd:a8:54:93:48:ec:86:
                    b1:37:44:23:5a:8d:ec:dc:ee:d9:e4:3f:7c:b4:e7:
                    84:c7:30:f7:cc:f8:21:f0:ba:f2:44:26:a4:63:60:
                    2b:df:4b:1d:0b:96:2c:e8:6d:4e:e0:39:64:8e:06:
                    5f:34:65:d2:7a:ca:ee:03:8b:1b:40:b3:2c:a0:c5:
                    bc:d6:e7:b3:d0:c6:7a:e7:a5:9c:e4:73:c5:ef:97:
                    85:43:7a:70:a1:3a:e2:f4:bd:e0:4e:c1:97:80:42:
                    04:3a:d4:99:81:b3:f9:fb:84:8c:88:56:10:6b:25:
                    28:de:54:08:a0:98:a3:fc:ad:75:8d:91:a6:c1:ec:
                    37:cf:e9:c1:7d:82:e6:a1:1f:0d:9e:c7:77:f0:4a:
                    fc:b4:2a:bd:7f:26:c1:c9:10:17:9b:22:9e:45:7a:
                    55:a2:c7:39:18:d1:92:39:a4:77:b2:e0:c2:7f:33:
                    0a:59:91:ee:66:d4:4c:fa:08:7e:1b:83:02:15:31:
                    a5:8f:e2:11:74:81:aa:84:0c:9d:65:af:94:d0:bd:
                    e8:31:d9:4f:6a:cb:f8:d1:18:fc:9b:2b:c8:e4:b7:
                    0b:0a:5e:fd:93:54:e1:2e:4e:f6:07:fa:f6:18:10:
                    e6:a0:04:8e:65:8d:73:75:bb:39:81:f0:e8:cc:ce:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:21:24:31:35:3D:CF:5D:7A:DF:12:7D:5D:D6:FD:4A:03:B9:F6:71
            X509v3 Authority Key Identifier:
                keyid:77:1D:E8:CD:05:B7:DC:3B:A5:A3:29:B2:F1:10:E4:AD:8D:6C:7B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130332e302f32342d3234203d3e20323636303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:25:d3:3e:64:bf:39:72:c6:f1:3c:fe:34:0a:09:06:9a:99:
         ce:fe:00:61:77:e0:87:cf:02:17:83:a3:3b:02:36:d0:79:f6:
         e8:a7:b3:50:14:1c:98:99:01:86:8a:8e:3e:2f:c3:be:61:d4:
         47:79:aa:b5:80:f5:68:06:a1:65:09:58:5f:cd:47:13:29:bc:
         4f:ab:a6:8c:01:11:08:a6:ae:e2:c3:71:24:47:1b:07:69:d4:
         10:4b:f7:68:80:45:61:34:c2:ca:61:3b:d0:aa:08:a2:76:3c:
         f1:f3:9d:7a:fc:ba:d9:14:87:87:05:16:af:bf:20:54:ef:88:
         43:62:44:60:ef:63:8e:5b:cc:6e:b1:5c:b3:ff:e0:fe:b2:17:
         e1:e8:6d:12:1b:ee:aa:19:a6:bb:b3:89:20:01:1c:64:3c:02:
         22:4e:73:42:74:d4:9b:a6:80:a8:d5:66:cb:0a:31:74:c7:61:
         cf:1d:ee:2e:0c:0d:e2:72:90:69:6f:b5:f3:0c:d8:ea:3d:9f:
         8d:1d:5c:d4:bb:7e:db:fa:a1:f5:b9:57:ff:de:8f:de:5c:2e:
         2f:11:03:97:14:5e:4c:05:61:af:d9:c6:03:a8:0e:b5:02:89:
         b5:c1:9a:fd:23:a9:a9:a0:6f:dd:56:06:38:b9:43:e7:bb:8f:
         1e:63:61:b1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMGZa3WMbkIsIGGE6Ht7lMxI6oPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcxREU4Q0QwNUI3REMzQkE1QTMyOUIyRjExMEU0QUQ4
RDZDN0JFMDAeFw0yNTAxMDMxNDE3MzhaFw0yNjAxMDIxNDIyMzhaMDMxMTAvBgNV
BAMTKDVFMjEyNDMxMzUzRENGNUQ3QURGMTI3RDVERDZGRDRBMDNCOUY2NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDem67S4/aNvahUk0jshrE3RCNa
jezc7tnkP3y054THMPfM+CHwuvJEJqRjYCvfSx0LlizobU7gOWSOBl80ZdJ6yu4D
ixtAsyygxbzW57PQxnrnpZzkc8Xvl4VDenChOuL0veBOwZeAQgQ61JmBs/n7hIyI
VhBrJSjeVAigmKP8rXWNkabB7DfP6cF9guahHw2ex3fwSvy0Kr1/JsHJEBebIp5F
elWixzkY0ZI5pHey4MJ/MwpZke5m1Ez6CH4bgwIVMaWP4hF0gaqEDJ1lr5TQvegx
2U9qy/jRGPybK8jktwsKXv2TVOEuTvYH+vYYEOagBI5ljXN1uzmB8OjMzuQFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUXiEkMTU9z1163xJ9Xdb9SgO59nEwHwYDVR0j
BBgwFoAUdx3ozQW33Duloymy8RDkrY1se+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN21NejU1UHZQdDUyN0o5Q3pYQVVoZGJHMndCa3dWOXlaUFFHYmtGSm9N
MkEvMC83NzFERThDRDA1QjdEQzNCQTVBMzI5QjJGMTEwRTRBRDhENkM3QkUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MURFOENEMDVCN0RDM0JB
NUEzMjlCMkYxMTBFNEFEOEQ2QzdCRTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdtTXo1NVB2UHQ1MjdKOUN6WEFVaGRiRzJ3Qmt3Vjl5WlBRR2JrRkpvTTJBLzAv
MzQzNTJlMzUyZTMxMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMw
MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0FZzANBgkqhkiG9w0BAQsFAAOCAQEAtSXTPmS/OXLG
8Tz+NAoJBpqZzv4AYXfgh88CF4OjOwI20Hn26KezUBQcmJkBhoqOPi/DvmHUR3mq
tYD1aAahZQlYX81HEym8T6umjAERCKau4sNxJEcbB2nUEEv3aIBFYTTCymE70KoI
onY88fOdevy62RSHhwUWr78gVO+IQ2JEYO9jjlvMbrFcs//g/rIX4ehtEhvuqhmm
u7OJIAEcZDwCIk5zQnTUm6aAqNVmywoxdMdhzx3uLgwN4nKQaW+18wzY6j2fjR1c
1Lt+2/qh9blX/96P3lwuLxEDlxReTAVhr9nGA6gOtQKJtcGa/SOpqaBv3VYGOLlD
57uPHmNhsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:21:29 2025 by rpki-client