Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa
File:                     34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa (raw, json)
Hash identifier:          SBQ5/VrbfL6QosgKp8clS9dVWExayjm5xcOtmIBsMww=
Subject key identifier:   AE:84:21:55:6D:90:74:EF:2A:4F:C9:0D:5F:4C:6C:6A:7B:EC:84:36
Certificate issuer:       /CN=B325121E804B0FC95B1063C1102CA90077C97D97
Certificate serial:       6D825FB01CA2C388E0C6D96C8B39C2228E3187C5
Authority key identifier: B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa
Signing time:             Sun 02 Feb 2025 00:02:54 +0000
ROA not before:           Sat 01 Feb 2025 23:57:54 +0000
ROA not after:            Sun 01 Feb 2026 00:02:54 +0000
asID:                     269014
IP address blocks:        45.176.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:82:5f:b0:1c:a2:c3:88:e0:c6:d9:6c:8b:39:c2:22:8e:31:87:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B325121E804B0FC95B1063C1102CA90077C97D97
        Validity
            Not Before: Feb  1 23:57:54 2025 GMT
            Not After : Feb  1 00:02:54 2026 GMT
        Subject: CN=AE8421556D9074EF2A4FC90D5F4C6C6A7BEC8436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:52:ea:40:97:dd:c1:f1:62:88:ce:60:d5:
                    f0:7a:d1:2a:a4:25:36:a8:39:53:b3:35:d3:0a:ed:
                    02:ab:f7:4b:70:d2:b5:d2:ef:48:bb:a7:0c:7d:72:
                    68:26:f4:95:20:e4:c0:d2:34:74:4c:f1:a0:b6:36:
                    5f:e1:b5:5c:e5:e6:f3:a8:8a:91:bd:c0:d2:b6:de:
                    82:b9:b6:f0:a0:23:3c:a0:7b:5a:f7:2a:e0:33:d5:
                    22:4f:9d:87:05:e4:30:95:5c:61:c6:ad:e2:6b:0f:
                    9f:d5:92:6b:96:dc:4c:1b:86:5c:3c:52:f5:5d:6d:
                    f4:85:6e:b7:74:1c:3b:48:84:50:b5:57:f5:f0:38:
                    74:5a:09:eb:2a:a1:56:6c:c4:12:bc:83:e0:b8:2a:
                    42:a9:4a:64:69:c4:ad:10:55:84:78:48:4a:0f:d3:
                    22:64:1d:94:9b:9e:c3:6f:b7:26:b0:25:e8:ca:26:
                    25:66:e9:a1:3c:fc:91:2f:2b:34:12:77:e1:52:c1:
                    a5:1e:04:a1:c0:37:69:44:50:fc:f1:33:bd:2a:c7:
                    30:ed:80:37:e8:55:19:27:c1:e6:94:7b:82:29:81:
                    24:b8:9e:a0:a5:d0:57:36:1d:ee:59:41:35:5e:c9:
                    97:e4:4a:d8:4f:9a:21:93:e4:15:55:7d:c4:7b:9c:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:84:21:55:6D:90:74:EF:2A:4F:C9:0D:5F:4C:6C:6A:7B:EC:84:36
            X509v3 Authority Key Identifier:
                keyid:B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:8b:d7:71:50:69:56:07:4f:e0:2f:e6:7f:ca:f0:98:ad:c5:
         ea:60:30:80:d7:aa:5b:7f:da:6c:85:40:13:cb:c1:b6:04:c7:
         c1:5d:f0:3c:4a:80:21:f9:7b:3e:cc:f7:d5:31:5e:1b:08:74:
         c9:d7:7b:82:a7:64:09:a2:79:68:23:36:50:5b:0c:f0:e4:1c:
         99:73:dc:f4:b6:15:ee:a1:32:a1:9f:d5:4c:64:55:2d:eb:16:
         6e:4a:91:0b:44:a8:0f:55:7c:95:99:77:2a:15:e2:68:09:1e:
         5c:0b:04:79:1d:6f:c1:33:9f:c7:a7:7e:a3:e7:c0:8d:84:43:
         32:68:80:f9:df:8d:bc:f1:55:0f:98:4d:14:04:f3:74:77:98:
         fc:6c:f1:9f:c1:97:ed:71:30:b7:cf:de:d2:8e:d0:d5:5f:9c:
         1d:73:a2:8d:8e:4e:d9:5f:01:d1:8c:3d:9d:00:c9:2d:0a:9f:
         3a:e6:c0:42:bd:aa:82:c1:46:d5:2d:33:d5:7f:db:ad:f9:9e:
         4a:fa:48:bb:8f:b4:70:3d:06:91:9e:a7:6c:03:64:f1:b2:7e:
         c5:2d:38:8b:66:a6:c7:a1:58:28:d6:fc:30:8d:9e:fa:aa:02:
         aa:02:0d:c5:00:fe:c9:85:ec:0b:ed:cc:29:f0:4a:f2:ae:93:
         f2:ec:46:74
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbYJfsByiw4jgxtlsiznCIo4xh8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjMyNTEyMUU4MDRCMEZDOTVCMTA2M0MxMTAyQ0E5MDA3
N0M5N0Q5NzAeFw0yNTAyMDEyMzU3NTRaFw0yNjAyMDEwMDAyNTRaMDMxMTAvBgNV
BAMTKEFFODQyMTU1NkQ5MDc0RUYyQTRGQzkwRDVGNEM2QzZBN0JFQzg0MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJFLqQJfdwfFiiM5g1fB60Sqk
JTaoOVOzNdMK7QKr90tw0rXS70i7pwx9cmgm9JUg5MDSNHRM8aC2Nl/htVzl5vOo
ipG9wNK23oK5tvCgIzyge1r3KuAz1SJPnYcF5DCVXGHGreJrD5/VkmuW3Ewbhlw8
UvVdbfSFbrd0HDtIhFC1V/XwOHRaCesqoVZsxBK8g+C4KkKpSmRpxK0QVYR4SEoP
0yJkHZSbnsNvtyawJejKJiVm6aE8/JEvKzQSd+FSwaUeBKHAN2lEUPzxM70qxzDt
gDfoVRknweaUe4IpgSS4nqCl0Fc2He5ZQTVeyZfkSthPmiGT5BVVfcR7nFLDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUroQhVW2QdO8qT8kNX0xsanvshDYwHwYDVR0j
BBgwFoAUsyUSHoBLD8lbEGPBECypAHfJfZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU5kcUp0Q2RKNUFVSEV0b1Bna0tNelpkeUtBOXRaWXNVeExXczhLM2E2
MUYvMC9CMzI1MTIxRTgwNEIwRkM5NUIxMDYzQzExMDJDQTkwMDc3Qzk3RDk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzMjUxMjFFODA0QjBGQzk1
QjEwNjNDMTEwMkNBOTAwNzdDOTdEOTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOZHFKdENkSjVBVUhFdG9QZ2tLTXpaZHlLQTl0WllzVXhMV3M4SzNhNjFGLzAv
MzQzNTJlMzEzNzM2MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsNwwDQYJKoZIhvcNAQELBQADggEBAB6L13FQ
aVYHT+Av5n/K8JitxepgMIDXqlt/2myFQBPLwbYEx8Fd8DxKgCH5ez7M99UxXhsI
dMnXe4KnZAmieWgjNlBbDPDkHJlz3PS2Fe6hMqGf1UxkVS3rFm5KkQtEqA9VfJWZ
dyoV4mgJHlwLBHkdb8Ezn8enfqPnwI2EQzJogPnfjbzxVQ+YTRQE83R3mPxs8Z/B
l+1xMLfP3tKO0NVfnB1zoo2OTtlfAdGMPZ0AyS0KnzrmwEK9qoLBRtUtM9V/2635
nkr6SLuPtHA9BpGep2wDZPGyfsUtOItmpsehWCjW/DCNnvqqAqoCDcUA/smF7Avt
zCnwSvKuk/LsRnQ=
-----END CERTIFICATE-----
Generated at Wed Apr 23 11:31:42 2025 by rpki-client