Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/34352e3233342e3233362e302f32332d3233203d3e20323637333836.roa
File:                     34352e3233342e3233362e302f32332d3233203d3e20323637333836.roa (raw, json)
Hash identifier:          jQFB1UWAmDAFnu6bxYSQsMUe+g9esGasYQBOOBPo4Ao=
Subject key identifier:   1F:78:C6:28:8A:B3:E0:77:A3:AE:0A:64:75:52:38:B4:32:1C:C7:1A
Certificate issuer:       /CN=272EE1B25800F489DD72CC554F5C22037BDA8291
Certificate serial:       4EE9C2407071BD1AA29A068B98A7012CC5DBE334
Authority key identifier: 27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/34352e3233342e3233362e302f32332d3233203d3e20323637333836.roa
Signing time:             Thu 01 Aug 2024 11:59:02 +0000
ROA not before:           Thu 01 Aug 2024 11:54:02 +0000
ROA not after:            Thu 31 Jul 2025 11:59:02 +0000
asID:                     267386
IP address blocks:        45.234.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e9:c2:40:70:71:bd:1a:a2:9a:06:8b:98:a7:01:2c:c5:db:e3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272EE1B25800F489DD72CC554F5C22037BDA8291
        Validity
            Not Before: Aug  1 11:54:02 2024 GMT
            Not After : Jul 31 11:59:02 2025 GMT
        Subject: CN=1F78C6288AB3E077A3AE0A64755238B4321CC71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:c9:60:2d:4e:69:2a:bb:d3:75:e8:8e:44:
                    5a:3c:62:59:99:2b:43:71:c3:2f:d9:37:e7:45:14:
                    e2:6c:c6:82:67:31:a9:39:bc:29:6c:78:f2:7d:c1:
                    71:cb:8a:f5:65:a2:93:5a:a6:06:ca:14:3c:73:76:
                    18:35:71:81:02:a0:b7:99:2f:ee:82:bb:9f:85:46:
                    b7:86:8f:d9:0b:a3:77:84:99:10:bb:68:a1:62:21:
                    59:d1:ff:4f:0e:e9:54:5b:0a:36:2a:ea:ff:e3:14:
                    57:eb:07:33:90:f3:e4:03:81:0f:6f:9c:7f:15:cf:
                    2b:ab:02:10:94:b4:c6:c4:18:3e:c5:38:89:2b:13:
                    60:60:cd:26:7f:f2:d6:ec:2a:9b:9b:fc:1c:22:3e:
                    fa:20:66:bb:5b:75:37:f9:f4:da:1f:42:e2:fa:45:
                    86:13:e8:6c:0a:56:08:d6:b6:e7:54:df:1d:bc:6c:
                    86:a7:da:2f:87:3f:45:ff:36:ca:b3:d6:40:a6:fe:
                    74:a1:dc:a2:1f:bb:5b:eb:29:f4:46:4a:3e:63:d6:
                    e4:9b:c9:2b:d6:a6:3e:2c:c4:cb:2c:b5:46:03:65:
                    0c:4b:71:3e:fe:0f:4d:36:f0:93:f3:03:57:ef:52:
                    30:fd:23:5f:d2:64:36:a5:b6:f0:f7:60:39:e0:f9:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:78:C6:28:8A:B3:E0:77:A3:AE:0A:64:75:52:38:B4:32:1C:C7:1A
            X509v3 Authority Key Identifier:
                keyid:27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/34352e3233342e3233362e302f32332d3233203d3e20323637333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:b6:7b:8e:42:e5:b3:92:e1:e6:63:48:9a:79:38:1d:6e:6e:
         fb:2b:a0:0e:c6:b4:2c:11:dd:1d:95:52:5f:e3:6b:0b:52:4c:
         d6:71:ad:45:11:02:3e:27:28:8e:90:65:9b:4b:56:74:0b:60:
         54:40:1f:35:a3:57:ca:18:80:0e:7c:ce:01:d0:91:51:d2:be:
         98:83:0b:41:fe:66:f6:ee:c5:bc:56:89:c7:f1:cc:c7:72:b3:
         8b:b8:c2:81:76:e4:fb:e8:be:72:2f:c7:bf:20:e4:40:4f:aa:
         03:a0:b6:8f:39:a5:8b:3c:33:fd:c7:ed:67:1c:81:6d:6b:b9:
         91:16:dd:0d:04:96:43:00:70:9a:69:5c:ca:12:dd:db:33:e2:
         ba:8a:03:d7:a9:b2:7c:44:91:9f:19:de:ab:c3:c8:b2:e5:54:
         b7:1e:67:98:d2:5f:b6:65:60:da:96:d9:81:5f:2e:0f:9d:f8:
         d2:6b:2b:77:b3:ae:77:6b:c2:b3:a7:4a:ab:08:a5:c2:39:5c:
         85:0c:ec:47:5a:c0:eb:29:24:f0:48:d4:ff:bf:25:91:f1:4d:
         73:7e:23:39:cf:f1:f7:b1:7f:01:d1:eb:0d:13:81:13:a9:6a:
         89:2c:9f:50:43:29:5a:01:0d:28:1f:f6:84:5f:fc:b0:80:f4:
         fb:c0:40:64
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTunCQHBxvRqimgaLmKcBLMXb4zQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcyRUUxQjI1ODAwRjQ4OURENzJDQzU1NEY1QzIyMDM3
QkRBODI5MTAeFw0yNDA4MDExMTU0MDJaFw0yNTA3MzExMTU5MDJaMDMxMTAvBgNV
BAMTKDFGNzhDNjI4OEFCM0UwNzdBM0FFMEE2NDc1NTIzOEI0MzIxQ0M3MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMlslgLU5pKrvTdeiORFo8YlmZ
K0Nxwy/ZN+dFFOJsxoJnMak5vClsePJ9wXHLivVlopNapgbKFDxzdhg1cYECoLeZ
L+6Cu5+FRreGj9kLo3eEmRC7aKFiIVnR/08O6VRbCjYq6v/jFFfrBzOQ8+QDgQ9v
nH8VzyurAhCUtMbEGD7FOIkrE2BgzSZ/8tbsKpub/BwiPvogZrtbdTf59NofQuL6
RYYT6GwKVgjWtudU3x28bIan2i+HP0X/Nsqz1kCm/nSh3KIfu1vrKfRGSj5j1uSb
ySvWpj4sxMsstUYDZQxLcT7+D0028JPzA1fvUjD9I1/SZDaltvD3YDng+TrJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUH3jGKIqz4HejrgpkdVI4tDIcxxowHwYDVR0j
BBgwFoAUJy7hslgA9IndcsxVT1wiA3vagpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXdMRHNMdEZRZUFwOHFHU05nZGNxVUIyN205d0Y4QlJRVmpTYWZ5NnUy
ZzkvMC8yNzJFRTFCMjU4MDBGNDg5REQ3MkNDNTU0RjVDMjIwMzdCREE4MjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3MkVFMUIyNTgwMEY0ODlE
RDcyQ0M1NTRGNUMyMjAzN0JEQTgyOTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl3TERzTHRGUWVBcDhxR1NOZ2RjcVVCMjdtOXdGOEJSUVZqU2FmeTZ1Mmc5LzAv
MzQzNTJlMzIzMzM0MmUzMjMzMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6uwwDQYJKoZIhvcNAQELBQADggEBAFm2e45C
5bOS4eZjSJp5OB1ubvsroA7GtCwR3R2VUl/jawtSTNZxrUURAj4nKI6QZZtLVnQL
YFRAHzWjV8oYgA58zgHQkVHSvpiDC0H+ZvbuxbxWicfxzMdys4u4woF25PvovnIv
x78g5EBPqgOgto85pYs8M/3H7WccgW1ruZEW3Q0ElkMAcJppXMoS3dsz4rqKA9ep
snxEkZ8Z3qvDyLLlVLceZ5jSX7ZlYNqW2YFfLg+d+NJrK3ezrndrwrOnSqsIpcI5
XIUM7EdawOspJPBI1P+/JZHxTXN+IznP8fexfwHR6w0TgROpaoksn1BDKVoBDSgf
9oRf/LCA9PvAQGQ=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:09 2025 by rpki-client