Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa
File:                     34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa (raw, json)
Hash identifier:          WjRnzcBOy1vik2xXIStT703l1NHlIN8mp8OS8Vki8ns=
Subject key identifier:   56:1A:68:B1:05:67:01:12:8F:99:AF:19:A9:D1:99:DC:77:0A:94:0E
Certificate issuer:       /CN=E9874D754A4F2E9B8149C3B894251362FDD83E90
Certificate serial:       0C25A49A8B52235CB524FA572E025ECB941B612F
Authority key identifier: E9:87:4D:75:4A:4F:2E:9B:81:49:C3:B8:94:25:13:62:FD:D8:3E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa
Signing time:             Wed 19 Mar 2025 00:10:57 +0000
ROA not before:           Wed 19 Mar 2025 00:05:57 +0000
ROA not after:            Wed 18 Mar 2026 00:10:57 +0000
asID:                     269014
IP address blocks:        45.176.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:25:a4:9a:8b:52:23:5c:b5:24:fa:57:2e:02:5e:cb:94:1b:61:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9874D754A4F2E9B8149C3B894251362FDD83E90
        Validity
            Not Before: Mar 19 00:05:57 2025 GMT
            Not After : Mar 18 00:10:57 2026 GMT
        Subject: CN=561A68B1056701128F99AF19A9D199DC770A940E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:ad:94:82:5c:c6:84:c3:47:68:8c:08:38:
                    ae:b7:9b:84:e1:65:f2:97:0a:c5:4d:c6:6c:0a:9b:
                    c4:07:f7:01:4b:66:77:01:3f:3d:52:c1:55:ca:16:
                    c2:cf:ef:ed:eb:bb:90:c0:ed:c7:69:48:7e:c1:29:
                    b8:3f:c1:a7:f4:ed:87:54:a4:1f:da:17:9b:5f:68:
                    05:e3:a6:fa:dd:09:3d:b0:ab:62:64:96:49:4a:fd:
                    4d:cc:84:cd:b0:e7:d6:3b:10:11:e7:99:76:63:9c:
                    67:e8:63:f5:f3:35:16:c3:70:f3:ad:2b:12:ff:76:
                    9d:0a:98:bb:fe:c6:ea:4f:99:f7:12:86:74:99:57:
                    00:cb:27:8f:37:a7:63:49:4d:c1:95:42:93:97:30:
                    eb:bc:0e:d0:e2:2d:0b:ee:71:ca:c7:56:e9:e5:7a:
                    2c:25:e9:e8:be:6b:f2:02:63:ee:28:83:4f:7d:76:
                    48:f7:31:7c:b0:a7:76:25:a6:5e:f9:9d:f8:2d:7c:
                    ee:0b:56:dd:80:9b:2b:9e:cc:29:72:8d:7d:82:d1:
                    e0:94:7f:de:62:72:5d:45:6e:b7:9f:c2:3c:7a:78:
                    57:df:9d:0d:9c:90:2a:bc:09:40:af:d4:ac:5a:01:
                    42:2c:2c:3a:7d:ca:de:6a:d0:31:93:d6:12:fc:4f:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1A:68:B1:05:67:01:12:8F:99:AF:19:A9:D1:99:DC:77:0A:94:0E
            X509v3 Authority Key Identifier:
                keyid:E9:87:4D:75:4A:4F:2E:9B:81:49:C3:B8:94:25:13:62:FD:D8:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:c0:a9:12:1d:fb:bb:8f:5c:9a:72:c4:9f:da:8c:7c:ff:0a:
         7c:5f:bf:6e:e1:ab:aa:95:a4:7d:b4:02:7c:1d:fa:67:41:7b:
         04:e2:22:b1:29:3c:b5:36:52:cb:14:ad:bc:92:99:2e:65:5c:
         f6:f4:d9:ae:22:72:02:de:ea:bc:27:9f:79:81:98:ff:5d:29:
         a7:24:35:38:41:65:c0:ae:2c:18:69:04:d7:74:71:b2:eb:43:
         39:1e:29:62:11:0e:c1:65:58:40:6e:cd:1e:ee:78:d2:c4:bc:
         2f:0f:fd:c1:11:9e:6f:75:ab:67:00:26:df:a8:a9:d2:0a:e8:
         18:75:c3:72:03:10:67:b6:84:39:08:6f:4b:f9:09:ac:3f:84:
         09:b0:fa:dc:82:07:df:77:58:9d:85:4b:32:64:4d:37:ce:41:
         9d:20:b1:aa:6f:0a:73:f7:67:81:b1:55:7f:96:2f:d3:0f:d5:
         b9:aa:5a:1d:09:e7:dc:ed:60:46:f5:b5:09:65:c5:5e:85:9d:
         9d:fb:b2:ac:b1:b3:71:c0:de:d3:8e:46:50:1e:e8:70:92:63:
         16:22:5c:8b:c8:c9:9d:ff:36:2b:3d:65:27:35:03:12:87:12:
         6c:32:86:13:af:63:93:71:a5:11:30:05:c3:ca:58:31:4b:27:
         a1:37:8a:41
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDCWkmotSI1y1JPpXLgJey5QbYS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk4NzRENzU0QTRGMkU5QjgxNDlDM0I4OTQyNTEzNjJG
REQ4M0U5MDAeFw0yNTAzMTkwMDA1NTdaFw0yNjAzMTgwMDEwNTdaMDMxMTAvBgNV
BAMTKDU2MUE2OEIxMDU2NzAxMTI4Rjk5QUYxOUE5RDE5OURDNzcwQTk0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8qK2UglzGhMNHaIwIOK63m4Th
ZfKXCsVNxmwKm8QH9wFLZncBPz1SwVXKFsLP7+3ru5DA7cdpSH7BKbg/waf07YdU
pB/aF5tfaAXjpvrdCT2wq2JklklK/U3MhM2w59Y7EBHnmXZjnGfoY/XzNRbDcPOt
KxL/dp0KmLv+xupPmfcShnSZVwDLJ483p2NJTcGVQpOXMOu8DtDiLQvuccrHVunl
eiwl6ei+a/ICY+4og099dkj3MXywp3Ylpl75nfgtfO4LVt2AmyuezClyjX2C0eCU
f95icl1Fbrefwjx6eFffnQ2ckCq8CUCv1KxaAUIsLDp9yt5q0DGT1hL8TymNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVhposQVnARKPma8ZqdGZ3HcKlA4wHwYDVR0j
BBgwFoAU6YdNdUpPLpuBScO4lCUTYv3YPpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU5kcUp0Q2RKNUFVSEV0b1Bna0tNelpkeUtBOXRaWXNVeExXczhLM2E2
MUYvMS9FOTg3NEQ3NTRBNEYyRTlCODE0OUMzQjg5NDI1MTM2MkZERDgzRTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5ODc0RDc1NEE0RjJFOUI4
MTQ5QzNCODk0MjUxMzYyRkREODNFOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOZHFKdENkSjVBVUhFdG9QZ2tLTXpaZHlLQTl0WllzVXhMV3M4SzNhNjFGLzEv
MzQzNTJlMzEzNzM2MmUzMjMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtsNwwDQYJKoZIhvcNAQELBQADggEBAGfAqRId
+7uPXJpyxJ/ajHz/Cnxfv27hq6qVpH20Anwd+mdBewTiIrEpPLU2UssUrbySmS5l
XPb02a4icgLe6rwnn3mBmP9dKackNThBZcCuLBhpBNd0cbLrQzkeKWIRDsFlWEBu
zR7ueNLEvC8P/cERnm91q2cAJt+oqdIK6Bh1w3IDEGe2hDkIb0v5Caw/hAmw+tyC
B993WJ2FSzJkTTfOQZ0gsapvCnP3Z4GxVX+WL9MP1bmqWh0J59ztYEb1tQllxV6F
nZ37sqyxs3HA3tOORlAe6HCSYxYiXIvIyZ3/Nis9ZSc1AxKHEmwyhhOvY5NxpREw
BcPKWDFLJ6E3ikE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:36 2025 by rpki-client