Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3131302e302f32332d3233203d3e20323636303437.roa
File:                     34352e342e3131302e302f32332d3233203d3e20323636303437.roa (raw, json)
Hash identifier:          6ffsNF5USA8tlwIMwQ4FdRXchkmbJU5C96a+alxfVAY=
Subject key identifier:   58:EA:58:C6:6B:26:45:6C:C8:E3:50:53:9A:77:15:ED:70:10:D8:BF
Certificate issuer:       /CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Certificate serial:       0AD0F8A2D617F67FE9916401B01724BD7BBDA074
Authority key identifier: 5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3131302e302f32332d3233203d3e20323636303437.roa
Signing time:             Thu 16 Jan 2025 13:02:12 +0000
ROA not before:           Thu 16 Jan 2025 12:57:12 +0000
ROA not after:            Thu 15 Jan 2026 13:02:12 +0000
asID:                     266047
IP address blocks:        45.4.110.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d0:f8:a2:d6:17:f6:7f:e9:91:64:01:b0:17:24:bd:7b:bd:a0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
        Validity
            Not Before: Jan 16 12:57:12 2025 GMT
            Not After : Jan 15 13:02:12 2026 GMT
        Subject: CN=58EA58C66B26456CC8E350539A7715ED7010D8BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:a5:07:fd:f5:fb:bc:4f:cc:ed:c6:73:32:
                    af:3f:80:ec:8e:17:26:0f:3b:49:0d:ec:b8:29:f2:
                    7e:34:28:13:8c:4b:eb:22:5d:a2:b3:91:df:a0:fb:
                    03:f9:b4:c4:e2:e7:bf:ed:46:76:ef:d7:71:f7:1a:
                    83:da:a1:fa:82:a5:1a:78:5d:c6:e3:68:35:98:01:
                    c4:4c:ef:0b:66:c2:25:57:77:03:90:37:c8:00:11:
                    4b:1d:57:10:3a:39:b3:aa:31:c5:df:e0:e3:6f:6e:
                    32:0d:7b:61:68:58:d7:85:4c:d4:6d:83:39:ee:b5:
                    cf:98:97:43:f3:75:19:b9:46:86:4b:a2:5f:67:71:
                    2e:b1:ad:ac:4f:a0:f5:e9:f8:3d:f7:20:96:66:28:
                    e6:ae:a7:f8:3b:d5:af:38:8a:09:01:c0:96:85:91:
                    ac:cb:5a:22:25:aa:ce:cf:ba:3c:26:ff:6e:08:4d:
                    81:8d:e8:9a:44:e8:04:cf:8f:b4:4e:f0:46:da:cd:
                    23:42:b4:02:b2:13:b8:80:b1:1b:52:cb:01:21:57:
                    f3:4d:ea:05:bc:4d:5e:62:ec:d8:1a:83:34:f0:eb:
                    db:99:69:57:fd:7b:2e:4c:cd:cf:59:12:6a:21:e9:
                    81:10:c3:e2:b3:05:ed:ef:f2:8a:c2:98:89:a5:32:
                    57:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EA:58:C6:6B:26:45:6C:C8:E3:50:53:9A:77:15:ED:70:10:D8:BF
            X509v3 Authority Key Identifier:
                keyid:5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3131302e302f32332d3233203d3e20323636303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:80:0f:97:57:60:25:ac:c8:fa:b4:c0:46:b8:1b:d7:27:fc:
         d8:1f:c2:10:27:14:e3:e6:21:0c:49:0e:50:cc:f4:4d:54:12:
         eb:09:92:21:9c:69:93:02:66:f6:de:18:b0:99:ca:c7:1e:09:
         33:a3:8e:6e:71:c1:f3:eb:d8:51:90:cd:b0:b5:37:70:8a:35:
         34:bd:49:ff:48:9b:58:c4:9d:b9:d8:97:ec:6b:6f:4a:cc:27:
         ed:8b:74:2b:3b:e7:e6:57:12:2c:51:be:e1:f6:93:02:a2:9b:
         a9:4d:e7:df:7f:cf:4e:82:bf:5d:b8:a7:98:b3:1f:2f:eb:2f:
         0c:9e:82:94:29:de:45:2d:e7:7b:c3:37:61:b4:aa:0a:a9:03:
         e5:3a:a7:7b:14:39:37:6c:b5:d3:1e:3b:d2:7a:3d:8e:6f:76:
         2f:96:db:f5:b7:8e:da:c8:56:76:f2:53:a4:f5:39:d2:13:70:
         7e:c2:a0:b8:9e:98:ae:82:c7:0c:9c:1d:a4:5e:6a:3e:0d:17:
         cc:2b:98:4d:ff:43:eb:e2:d3:3e:7b:b3:0d:05:4c:29:26:74:
         93:20:1d:ff:f2:ea:1e:ba:0d:89:ba:3c:5b:0b:fb:fb:c0:b0:
         1d:9f:70:e7:c8:00:38:7a:2d:2e:a2:02:e2:8a:2b:12:07:d6:
         2d:d8:52:d0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCtD4otYX9n/pkWQBsBckvXu9oHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU5OTkwMkM3MjU1OEQ5MkMxNkZBMjRDQkEzM0Y3ODY2
RTZENkU5QjAeFw0yNTAxMTYxMjU3MTJaFw0yNjAxMTUxMzAyMTJaMDMxMTAvBgNV
BAMTKDU4RUE1OEM2NkIyNjQ1NkNDOEUzNTA1MzlBNzcxNUVENzAxMEQ4QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChKUH/fX7vE/M7cZzMq8/gOyO
FyYPO0kN7Lgp8n40KBOMS+siXaKzkd+g+wP5tMTi57/tRnbv13H3GoPaofqCpRp4
XcbjaDWYAcRM7wtmwiVXdwOQN8gAEUsdVxA6ObOqMcXf4ONvbjINe2FoWNeFTNRt
gznutc+Yl0PzdRm5RoZLol9ncS6xraxPoPXp+D33IJZmKOaup/g71a84igkBwJaF
kazLWiIlqs7Pujwm/24ITYGN6JpE6ATPj7RO8EbazSNCtAKyE7iAsRtSywEhV/NN
6gW8TV5i7NgagzTw69uZaVf9ey5Mzc9ZEmoh6YEQw+KzBe3v8orCmImlMleNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUWOpYxmsmRWzI41BTmncV7XAQ2L8wHwYDVR0j
BBgwFoAUXpmQLHJVjZLBb6JMujP3hm5tbpswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGZVeUQ3dEZ4TVpWeVJTQ3VTaGlXV0FtbVltQnhiZ2d2M1NGaVZqcnU1
Y0gvMC81RTk5OTAyQzcyNTU4RDkyQzE2RkEyNENCQTMzRjc4NjZFNkQ2RTlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFOTk5MDJDNzI1NThEOTJD
MTZGQTI0Q0JBMzNGNzg2NkU2RDZFOUIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhmVXlEN3RGeE1aVnlSU0N1U2hpV1dBbW1ZbUJ4YmdndjNTRmlWanJ1NWNILzAv
MzQzNTJlMzQyZTMxMzEzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjMw
MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS0EbjANBgkqhkiG9w0BAQsFAAOCAQEAuYAPl1dgJazI
+rTARrgb1yf82B/CECcU4+YhDEkOUMz0TVQS6wmSIZxpkwJm9t4YsJnKxx4JM6OO
bnHB8+vYUZDNsLU3cIo1NL1J/0ibWMSdudiX7GtvSswn7Yt0Kzvn5lcSLFG+4faT
AqKbqU3n33/PToK/XbinmLMfL+svDJ6ClCneRS3ne8M3YbSqCqkD5TqnexQ5N2y1
0x470no9jm92L5bb9beO2shWdvJTpPU50hNwfsKguJ6YroLHDJwdpF5qPg0XzCuY
Tf9D6+LTPnuzDQVMKSZ0kyAd//LqHroNibo8Wwv7+8CwHZ9w58gAOHotLqIC4oor
EgfWLdhS0A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:28:38 2025 by rpki-client