Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97JeHykbziVoni9Ts4p5RFfW5JS7bHUYDt6gDUWiVmi8/0/34352e3233392e3135322e302f32322d3234203d3e20323638333639.roa
File:                     34352e3233392e3135322e302f32322d3234203d3e20323638333639.roa (raw, json)
Hash identifier:          S5TeoSGydACJC0JLI3XHdNXjNRYvsO/byEuP8uuN0uQ=
Subject key identifier:   69:E4:DE:A6:28:ED:25:E7:A3:38:FA:F4:4C:CE:0F:E6:72:2A:C4:F8
Certificate issuer:       /CN=032FEABE2ADADE56C2F968CA33516E692820DD03
Certificate serial:       15EF4C486AD66601383E15F06CBB60D2D2EB9BCC
Authority key identifier: 03:2F:EA:BE:2A:DA:DE:56:C2:F9:68:CA:33:51:6E:69:28:20:DD:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/032FEABE2ADADE56C2F968CA33516E692820DD03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97JeHykbziVoni9Ts4p5RFfW5JS7bHUYDt6gDUWiVmi8/0/34352e3233392e3135322e302f32322d3234203d3e20323638333639.roa
Signing time:             Sat 23 Jul 2022 01:36:00 +0000
ROA not before:           Sat 23 Jul 2022 01:31:00 +0000
ROA not after:            Sat 22 Jul 2023 01:36:00 +0000
asID:                     268369
IP address blocks:        45.239.152.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ef:4c:48:6a:d6:66:01:38:3e:15:f0:6c:bb:60:d2:d2:eb:9b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032FEABE2ADADE56C2F968CA33516E692820DD03
        Validity
            Not Before: Jul 23 01:31:00 2022 GMT
            Not After : Jul 22 01:36:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fd:26:a6:69:d4:3f:6f:da:2f:e2:50:0d:1d:
                    19:02:26:eb:9d:d4:e7:b9:d9:56:f4:fd:e0:38:57:
                    ca:8a:45:60:8a:07:4d:08:77:08:28:af:13:cd:d2:
                    35:1d:11:4b:aa:ca:1a:8c:c4:4f:5a:9b:98:77:50:
                    5f:b4:4a:d7:63:4d:bd:57:3b:b5:3f:28:0e:67:4a:
                    78:fe:32:50:18:24:3b:91:03:23:f7:8e:cb:15:73:
                    e9:76:09:7e:5b:e8:00:69:72:0b:a0:ab:33:04:ba:
                    dc:cd:2b:f7:e9:86:e0:8b:2a:9f:ae:9f:7d:94:60:
                    28:46:17:a4:85:6a:e5:74:88:3d:53:3b:db:63:97:
                    0f:a2:0f:2c:18:c1:df:31:9e:df:3f:20:a9:ac:66:
                    11:db:61:19:2e:3a:c8:c2:67:c6:dc:37:86:7f:36:
                    3b:5d:71:0a:18:83:36:59:69:5e:52:87:98:57:47:
                    c8:2d:94:47:fc:ec:79:4e:9d:b1:03:6f:4a:e1:1e:
                    28:0b:44:9e:32:36:e9:c5:75:45:43:69:d7:69:7c:
                    bf:90:19:5a:a4:06:b7:af:84:b1:23:68:81:ac:d8:
                    0d:c0:d2:24:64:d8:78:7f:f0:50:7d:58:b8:d0:17:
                    bf:af:25:92:b3:fa:6a:c4:5d:6b:2d:54:8e:a5:5b:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E4:DE:A6:28:ED:25:E7:A3:38:FA:F4:4C:CE:0F:E6:72:2A:C4:F8
            X509v3 Authority Key Identifier:
                keyid:03:2F:EA:BE:2A:DA:DE:56:C2:F9:68:CA:33:51:6E:69:28:20:DD:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97JeHykbziVoni9Ts4p5RFfW5JS7bHUYDt6gDUWiVmi8/0/032FEABE2ADADE56C2F968CA33516E692820DD03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/032FEABE2ADADE56C2F968CA33516E692820DD03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97JeHykbziVoni9Ts4p5RFfW5JS7bHUYDt6gDUWiVmi8/0/34352e3233392e3135322e302f32322d3234203d3e20323638333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:15:f4:6c:62:12:ed:18:51:0b:04:ab:8a:ab:4c:d9:11:
         1b:cc:59:d4:dd:39:a6:66:77:71:a9:6d:5f:cd:14:cf:e6:36:
         ba:f8:35:a7:11:17:76:70:0e:bd:b2:62:b9:a6:ea:17:31:b0:
         c8:88:4e:83:09:ae:77:f2:5c:04:cc:09:5c:6a:b5:2a:20:f0:
         3a:62:32:b5:94:f5:09:7d:0b:66:d0:97:55:5c:87:9f:ab:a7:
         74:ed:be:49:c6:b8:ec:5a:80:01:c5:1a:70:2f:41:2d:3d:80:
         52:6a:c5:d2:9f:a4:fc:0d:93:20:a9:34:0a:e2:58:25:93:4f:
         85:41:da:65:24:b2:01:cd:9a:33:31:31:ef:ec:7f:71:b5:bd:
         b5:c9:da:e1:69:79:f2:da:37:37:f0:4c:e9:3d:3b:d0:aa:dc:
         b8:2a:ef:d9:bc:81:98:52:81:6d:6f:84:0f:54:80:27:92:5c:
         ba:15:86:f7:30:bc:b9:e8:50:6c:6d:63:1d:46:c9:dd:63:4a:
         a1:eb:e8:a0:16:af:1b:19:3c:30:24:eb:13:de:4d:3e:5f:74:
         7b:a2:63:d0:58:84:1b:d9:dd:b6:63:02:6f:6a:72:82:27:7c:
         a9:77:99:e2:28:fd:5a:0e:7e:3f:3f:e6:08:c9:a8:f0:f2:59:
         63:d2:89:be
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUFe9MSGrWZgE4PhXwbLtg0tLrm8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMyRkVBQkUyQURBREU1NkMyRjk2OENBMzM1MTZFNjky
ODIwREQwMzAeFw0yMjA3MjMwMTMxMDBaFw0yMzA3MjIwMTM2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTRGRDI2QTY2OUQ0M0Y2RkRB
MkZFMjUwMEQxRDE5MDIyNkVCOURENEU3QjlEOTU2RjRGREUwMzg1N0NBOEE0NTYw
OEEwNzREMDg3NzA4MjhBRjEzQ0REMjM1MUQxMTRCQUFDQTFBOENDNDRGNUE5Qjk4
Nzc1MDVGQjQ0QUQ3NjM0REJENTczQkI1M0YyODBFNjc0QTc4RkUzMjUwMTgyNDNC
OTEwMzIzRjc4RUNCMTU3M0U5NzYwOTdFNUJFODAwNjk3MjBCQTBBQjMzMDRCQURD
Q0QyQkY3RTk4NkUwOEIyQTlGQUU5RjdEOTQ2MDI4NDYxN0E0ODU2QUU1NzQ4ODNE
NTMzQkRCNjM5NzBGQTIwRjJDMThDMURGMzE5RURGM0YyMEE5QUM2NjExREI2MTE5
MkUzQUM4QzI2N0M2REMzNzg2N0YzNjNCNUQ3MTBBMTg4MzM2NTk2OTVFNTI4Nzk4
NTc0N0M4MkQ5NDQ3RkNFQzc5NEU5REIxMDM2RjRBRTExRTI4MEI0NDlFMzIzNkU5
QzU3NTQ1NDM2OUQ3Njk3Q0JGOTAxOTVBQTQwNkI3QUY4NEIxMjM2ODgxQUNEODBE
QzBEMjI0NjREODc4N0ZGMDUwN0Q1OEI4RDAxN0JGQUYyNTkyQjNGQTZBQzQ1RDZC
MkQ1NDhFQTU1QjAwOUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5P0mpmnUP2/aL+JQDR0ZAibrndTnudlW9P3gOFfKikVgigdNCHcI
KK8TzdI1HRFLqsoajMRPWpuYd1BftErXY029Vzu1PygOZ0p4/jJQGCQ7kQMj947L
FXPpdgl+W+gAaXILoKszBLrczSv36Ybgiyqfrp99lGAoRhekhWrldIg9UzvbY5cP
og8sGMHfMZ7fPyCprGYR22EZLjrIwmfG3DeGfzY7XXEKGIM2WWleUoeYV0fILZRH
/Ox5Tp2xA29K4R4oC0SeMjbpxXVFQ2nXaXy/kBlapAa3r4SxI2iBrNgNwNIkZNh4
f/BQfVi40Be/ryWSs/pqxF1rLVSOpVsAnwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGnk3qYo7SXnozj69EzOD+ZyKsT4MB8GA1UdIwQYMBaAFAMv6r4q2t5WwvloyjNR
bmkoIN0DMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk3SmVIeWtiemlWb25p
OVRzNHA1UkZmVzVKUzdiSFVZRHQ2Z0RVV2lWbWk4LzAvMDMyRkVBQkUyQURBREU1
NkMyRjk2OENBMzM1MTZFNjkyODIwREQwMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wMzJGRUFCRTJBREFERTU2QzJGOTY4Q0EzMzUxNkU2OTI4MjBE
RDAzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85N0plSHlrYnppVm9uaTlUczRw
NVJGZlc1SlM3YkhVWUR0NmdEVVdpVm1pOC8wLzM0MzUyZTMyMzMzOTJlMzEzNTMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4MzMzNjM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
Le+YMA0GCSqGSIb3DQEBCwUAA4IBAQBJfxX0bGIS7RhRCwSriqtM2REbzFnU3Tmm
ZndxqW1fzRTP5ja6+DWnERd2cA69smK5puoXMbDIiE6DCa538lwEzAlcarUqIPA6
YjK1lPUJfQtm0JdVXIefq6d07b5JxrjsWoABxRpwL0EtPYBSasXSn6T8DZMgqTQK
4lglk0+FQdplJLIBzZozMTHv7H9xtb21ydrhaXny2jc38EzpPTvQqty4Ku/ZvIGY
UoFtb4QPVIAnkly6FYb3MLy56FBsbWMdRsndY0qh6+igFq8bGTwwJOsT3k0+X3R7
omPQWIQb2d22YwJvanKCJ3ypd5niKP1aDn4/P+YIyajw8llj0om+
-----END CERTIFICATE-----
Generated at Mon Apr 21 17:18:48 2025 by rpki-client