Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32332d3234203d3e20323731363039.roa
File:                     34352e3138332e3137362e302f32332d3234203d3e20323731363039.roa (raw, json)
Hash identifier:          Vsd5QRJjvgtpOCJxhMq6knZBYnpYpxgSgkoH9SpVQ/o=
Subject key identifier:   79:A6:5C:92:C8:D3:A9:D0:F7:EF:A3:99:16:3A:A9:DD:7F:D9:C5:89
Certificate issuer:       /CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6
Certificate serial:       7D0F8FADB6B8CF597A3B21BFA97DB095EF4395C7
Authority key identifier: AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32332d3234203d3e20323731363039.roa
Signing time:             Sun 16 Feb 2025 01:23:04 +0000
ROA not before:           Sun 16 Feb 2025 01:18:04 +0000
ROA not after:            Sun 15 Feb 2026 01:23:04 +0000
asID:                     271609
IP address blocks:        45.183.176.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0f:8f:ad:b6:b8:cf:59:7a:3b:21:bf:a9:7d:b0:95:ef:43:95:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6
        Validity
            Not Before: Feb 16 01:18:04 2025 GMT
            Not After : Feb 15 01:23:04 2026 GMT
        Subject: CN=79A65C92C8D3A9D0F7EFA399163AA9DD7FD9C589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:d4:a4:5a:a8:bb:9c:7a:63:de:96:3f:47:
                    b2:10:0f:de:9f:c0:fa:0f:a2:49:2a:c0:4f:97:de:
                    50:ec:e3:a6:8b:34:ba:73:af:c3:e5:f7:ef:01:f6:
                    3e:22:46:da:ea:d0:57:86:a9:66:e7:af:cc:bb:93:
                    0e:e1:66:ca:48:27:8d:ab:6a:20:6c:83:11:c1:10:
                    e2:ce:b4:14:e7:68:6c:34:a2:f7:a5:d4:96:72:be:
                    d1:4f:0a:e9:e1:7f:1b:60:1b:91:61:be:78:a6:9b:
                    1b:5d:3c:77:aa:a7:98:5e:73:ea:ac:b2:e4:bc:18:
                    f0:22:f0:fc:c4:97:b0:04:da:80:29:de:ff:19:6a:
                    5c:e2:14:b9:bd:bc:17:fa:48:33:ff:9b:48:39:d7:
                    10:64:a0:c6:65:6f:0e:0c:ca:9d:3d:4d:8a:f1:ce:
                    1a:1f:f2:49:b6:02:14:0a:13:71:f2:c3:ca:df:3e:
                    2b:d0:6c:ea:b6:68:44:3a:0b:6a:89:64:8b:2a:cb:
                    59:f2:09:b1:b1:1c:1b:cc:5a:ac:c7:61:46:92:2d:
                    ea:a5:18:f7:21:9b:28:f9:14:b8:de:79:59:28:c8:
                    10:f2:18:d9:5a:28:55:5c:00:98:2f:0b:9d:ed:e0:
                    35:4d:40:d0:b7:d5:33:f8:e4:c1:ec:4b:59:fb:4f:
                    13:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A6:5C:92:C8:D3:A9:D0:F7:EF:A3:99:16:3A:A9:DD:7F:D9:C5:89
            X509v3 Authority Key Identifier:
                keyid:AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32332d3234203d3e20323731363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:26:09:36:6d:a3:b3:ba:9b:b5:b7:5a:e4:93:26:ef:79:49:
         e4:b0:1f:fc:c1:c7:51:3f:a8:63:af:2b:fa:2b:9d:0b:97:f7:
         83:3f:27:a3:f6:f7:a4:44:7f:b4:91:6e:28:67:5c:d7:a1:b7:
         36:26:b2:73:18:8a:e0:64:8b:3e:bc:d6:d7:f4:15:27:aa:1f:
         fa:83:62:4a:11:cc:22:15:90:73:ca:13:eb:a9:67:ae:53:8d:
         ad:0e:24:ae:a5:17:b0:73:6f:9c:37:99:ab:fe:4a:54:30:6e:
         c1:e6:c0:64:5d:40:d2:bc:a5:91:a8:48:c0:10:60:7e:86:23:
         34:5c:74:7f:4e:62:e9:39:c5:08:43:f2:09:00:18:cd:20:1c:
         c9:06:44:ff:8a:ea:ac:82:3a:2e:2f:5d:d9:e6:03:22:fe:24:
         bb:77:51:32:fa:2b:b1:96:6f:2e:60:6d:63:2e:1c:55:85:4d:
         49:6c:26:a2:fc:97:11:7a:c1:96:26:13:fa:21:17:3f:84:9f:
         38:b5:d5:81:76:2f:2c:f4:5b:94:41:80:2d:ec:70:06:54:a7:
         5f:b9:c0:a4:e3:bd:ca:ea:13:7b:57:fd:e8:21:a5:90:d4:b6:
         35:0f:34:0a:72:04:1c:ab:00:fa:d9:30:24:64:2e:88:39:8a:
         08:aa:c0:15
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfQ+Prba4z1l6OyG/qX2wle9DlccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY2OUY5NzdBOEZCNUYxQ0E5NjcwNUQ2MkVCRUVBQ0U0
NkJGRDlENjAeFw0yNTAyMTYwMTE4MDRaFw0yNjAyMTUwMTIzMDRaMDMxMTAvBgNV
BAMTKDc5QTY1QzkyQzhEM0E5RDBGN0VGQTM5OTE2M0FBOUREN0ZEOUM1ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpGtSkWqi7nHpj3pY/R7IQD96f
wPoPokkqwE+X3lDs46aLNLpzr8Pl9+8B9j4iRtrq0FeGqWbnr8y7kw7hZspIJ42r
aiBsgxHBEOLOtBTnaGw0ovel1JZyvtFPCunhfxtgG5FhvnimmxtdPHeqp5hec+qs
suS8GPAi8PzEl7AE2oAp3v8ZalziFLm9vBf6SDP/m0g51xBkoMZlbw4Myp09TYrx
zhof8km2AhQKE3Hyw8rfPivQbOq2aEQ6C2qJZIsqy1nyCbGxHBvMWqzHYUaSLeql
GPchmyj5FLjeeVkoyBDyGNlaKFVcAJgvC53t4DVNQNC31TP45MHsS1n7TxMLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeaZcksjTqdD376OZFjqp3X/ZxYkwHwYDVR0j
BBgwFoAUr2n5d6j7XxypZwXWLr7qzka/2dYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHoyNUI2MUtva1MxZVZXVU1UeEJIRlB1NWU0c055QWdBTkRiZmd1VXVL
dGovMC9BRjY5Rjk3N0E4RkI1RjFDQTk2NzA1RDYyRUJFRUFDRTQ2QkZEOUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNjlGOTc3QThGQjVGMUNB
OTY3MDVENjJFQkVFQUNFNDZCRkQ5RDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh6MjVCNjFLb2tTMWVWV1VNVHhCSEZQdTVlNHNOeUFnQU5EYmZndVV1S3RqLzAv
MzQzNTJlMzEzODMzMmUzMTM3MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtt7AwDQYJKoZIhvcNAQELBQADggEBAJYmCTZt
o7O6m7W3WuSTJu95SeSwH/zBx1E/qGOvK/ornQuX94M/J6P296REf7SRbihnXNeh
tzYmsnMYiuBkiz681tf0FSeqH/qDYkoRzCIVkHPKE+upZ65Tja0OJK6lF7Bzb5w3
mav+SlQwbsHmwGRdQNK8pZGoSMAQYH6GIzRcdH9OYuk5xQhD8gkAGM0gHMkGRP+K
6qyCOi4vXdnmAyL+JLt3UTL6K7GWby5gbWMuHFWFTUlsJqL8lxF6wZYmE/ohFz+E
nzi11YF2Lyz0W5RBgC3scAZUp1+5wKTjvcrqE3tX/eghpZDUtjUPNApyBByrAPrZ
MCRkLog5igiqwBU=
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:48:56 2025 by rpki-client