Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa
File:                     34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa (raw, json)
Hash identifier:          FRL5W0RE974/ES2frg5dqWaOt6RjPReRP5bpphtkMOM=
Subject key identifier:   26:18:ED:88:12:39:82:44:5B:ED:16:26:9D:BB:D6:AA:44:0D:0A:08
Certificate issuer:       /CN=B325121E804B0FC95B1063C1102CA90077C97D97
Certificate serial:       1B625DFAB5D496023DAB7396239A16F545B32F24
Authority key identifier: B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa
Signing time:             Sun 02 Feb 2025 00:02:52 +0000
ROA not before:           Sat 01 Feb 2025 23:57:52 +0000
ROA not after:            Sun 01 Feb 2026 00:02:52 +0000
asID:                     269014
IP address blocks:        45.176.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:62:5d:fa:b5:d4:96:02:3d:ab:73:96:23:9a:16:f5:45:b3:2f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B325121E804B0FC95B1063C1102CA90077C97D97
        Validity
            Not Before: Feb  1 23:57:52 2025 GMT
            Not After : Feb  1 00:02:52 2026 GMT
        Subject: CN=2618ED88123982445BED16269DBBD6AA440D0A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:bf:c9:08:8f:4f:66:d2:5a:cc:9d:b4:6c:
                    57:c5:14:b1:55:81:87:11:21:81:28:ee:86:f5:2f:
                    18:9f:38:56:22:3b:15:be:52:66:5c:c3:27:e2:6d:
                    67:71:ff:10:3f:df:a9:5a:61:5f:73:96:6d:3c:f6:
                    68:af:1d:51:96:51:ba:06:80:9a:3d:e9:ae:76:87:
                    13:89:2e:12:61:02:b0:61:cc:aa:ed:ad:ce:f8:0f:
                    2f:ee:96:0e:c9:06:ed:21:5b:c4:45:8e:2a:cc:e1:
                    43:f3:5d:d7:9c:a1:50:af:25:e4:b7:c8:09:bc:d9:
                    48:50:e9:de:25:9a:c3:c6:a5:17:b5:22:aa:e4:0f:
                    47:8b:d6:56:8f:06:26:74:0e:c6:5c:55:81:b8:d7:
                    bc:40:1a:1d:50:c5:97:83:03:67:0f:cf:cb:6c:de:
                    2e:04:48:c4:88:e5:67:54:d0:cd:6d:89:a6:2a:0a:
                    73:a6:5e:e2:1d:4e:1c:a2:0d:d1:4e:ea:9f:36:04:
                    ed:d6:bb:c9:c4:47:54:64:df:61:b8:49:87:de:fe:
                    ed:c4:c3:84:67:1f:2b:60:8a:7c:75:f8:38:28:ae:
                    f9:08:29:f7:3f:39:63:9e:92:1a:d2:e1:66:38:a3:
                    ca:c4:51:7b:06:05:76:f0:d9:f7:ed:56:34:33:68:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:18:ED:88:12:39:82:44:5B:ED:16:26:9D:BB:D6:AA:44:0D:0A:08
            X509v3 Authority Key Identifier:
                keyid:B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ae:9b:58:e3:1b:fd:5a:63:a8:f8:f9:45:24:f9:14:7b:bd:
         9a:38:29:d6:9a:0e:83:ad:e9:fa:cf:a3:af:e0:28:ec:c3:af:
         22:e2:be:a6:cd:19:74:f4:ae:83:8f:9f:15:9c:59:15:3a:dd:
         4a:82:a9:0a:1e:67:ab:ea:e4:2e:80:34:6b:a6:33:57:3c:ef:
         44:d4:7a:45:b4:29:41:cb:7b:8e:53:81:76:92:e8:4a:6a:78:
         0a:8e:72:57:da:65:23:1d:17:16:54:f1:d5:57:f1:bf:ea:94:
         ab:2a:de:0a:d2:a7:6d:d7:74:9e:48:e0:e3:8e:be:5c:ad:34:
         fe:1a:9d:d2:c3:92:a7:1a:43:b6:5a:29:e7:8e:e2:cb:dc:f2:
         b4:19:6c:61:70:f7:f7:85:49:7d:35:ed:0a:84:32:cb:69:5f:
         ef:c0:19:7f:c5:0b:78:52:d5:13:c3:f7:e6:1a:6c:1d:d6:e9:
         f1:da:69:31:9c:98:43:8f:c4:41:d7:20:61:65:b6:aa:52:dd:
         10:ea:24:51:61:3f:0c:da:2b:e5:53:73:e4:4b:93:40:72:b1:
         86:6e:5a:76:81:5d:81:79:38:af:f6:50:4c:93:9e:99:08:58:
         43:c6:4d:19:3b:38:6f:00:a0:37:b3:6b:1a:a6:df:c1:93:67:
         9d:10:f6:31
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG2Jd+rXUlgI9q3OWI5oW9UWzLyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjMyNTEyMUU4MDRCMEZDOTVCMTA2M0MxMTAyQ0E5MDA3
N0M5N0Q5NzAeFw0yNTAyMDEyMzU3NTJaFw0yNjAyMDEwMDAyNTJaMDMxMTAvBgNV
BAMTKDI2MThFRDg4MTIzOTgyNDQ1QkVEMTYyNjlEQkJENkFBNDQwRDBBMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqb/JCI9PZtJazJ20bFfFFLFV
gYcRIYEo7ob1LxifOFYiOxW+UmZcwyfibWdx/xA/36laYV9zlm089mivHVGWUboG
gJo96a52hxOJLhJhArBhzKrtrc74Dy/ulg7JBu0hW8RFjirM4UPzXdecoVCvJeS3
yAm82UhQ6d4lmsPGpRe1IqrkD0eL1laPBiZ0DsZcVYG417xAGh1QxZeDA2cPz8ts
3i4ESMSI5WdU0M1tiaYqCnOmXuIdThyiDdFO6p82BO3Wu8nER1Rk32G4SYfe/u3E
w4RnHytginx1+DgorvkIKfc/OWOekhrS4WY4o8rEUXsGBXbw2fftVjQzaHpRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJhjtiBI5gkRb7RYmnbvWqkQNCggwHwYDVR0j
BBgwFoAUsyUSHoBLD8lbEGPBECypAHfJfZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU5kcUp0Q2RKNUFVSEV0b1Bna0tNelpkeUtBOXRaWXNVeExXczhLM2E2
MUYvMC9CMzI1MTIxRTgwNEIwRkM5NUIxMDYzQzExMDJDQTkwMDc3Qzk3RDk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzMjUxMjFFODA0QjBGQzk1
QjEwNjNDMTEwMkNBOTAwNzdDOTdEOTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOZHFKdENkSjVBVUhFdG9QZ2tLTXpaZHlLQTl0WllzVXhMV3M4SzNhNjFGLzAv
MzQzNTJlMzEzNzM2MmUzMjMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtsN8wDQYJKoZIhvcNAQELBQADggEBAHCum1jj
G/1aY6j4+UUk+RR7vZo4KdaaDoOt6frPo6/gKOzDryLivqbNGXT0roOPnxWcWRU6
3UqCqQoeZ6vq5C6ANGumM1c870TUekW0KUHLe45TgXaS6EpqeAqOclfaZSMdFxZU
8dVX8b/qlKsq3grSp23XdJ5I4OOOvlytNP4andLDkqcaQ7ZaKeeO4svc8rQZbGFw
9/eFSX017QqEMstpX+/AGX/FC3hS1RPD9+YabB3W6fHaaTGcmEOPxEHXIGFltqpS
3RDqJFFhPwzaK+VTc+RLk0BysYZuWnaBXYF5OK/2UEyTnpkIWEPGTRk7OG8AoDez
axqm38GTZ50Q9jE=
-----END CERTIFICATE-----
Generated at Wed Apr 23 11:44:44 2025 by rpki-client