Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa
File:                     34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa (raw, json)
Hash identifier:          bHeajkq341bNVFOXiE11ZlKVe4HwX6yveCnNrGVrGx0=
Subject key identifier:   29:41:78:83:34:48:3C:05:3D:1A:E7:79:7D:96:3B:DF:CF:2B:9E:CA
Certificate issuer:       /CN=26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE
Certificate serial:       55B40DC234980291C9B53180BA8C02AB2350B6E4
Authority key identifier: 26:DC:2A:50:C0:A1:39:F3:B6:37:BF:EA:63:C5:A4:72:E4:CA:B4:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa
Signing time:             Tue 04 Mar 2025 21:39:03 +0000
ROA not before:           Tue 04 Mar 2025 21:34:03 +0000
ROA not after:            Tue 03 Mar 2026 21:39:03 +0000
asID:                     269419
IP address blocks:        45.186.112.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b4:0d:c2:34:98:02:91:c9:b5:31:80:ba:8c:02:ab:23:50:b6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE
        Validity
            Not Before: Mar  4 21:34:03 2025 GMT
            Not After : Mar  3 21:39:03 2026 GMT
        Subject: CN=2941788334483C053D1AE7797D963BDFCF2B9ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:55:84:a3:4f:72:2f:1f:c3:81:04:3c:07:
                    12:a6:fe:d8:76:77:0c:40:dd:ed:b1:c5:25:d5:63:
                    54:8c:87:da:c7:fb:98:af:c0:9d:05:d5:24:56:6b:
                    9c:db:37:49:fd:dc:d4:52:00:a5:4d:de:51:c1:f1:
                    e9:66:9a:ce:82:fa:e5:1c:a1:36:80:c5:d8:14:d8:
                    09:1e:af:5f:ad:2e:a4:a7:99:3a:59:ae:de:29:7d:
                    2e:ab:3b:06:97:78:59:2e:65:44:3c:02:5e:07:8a:
                    f7:f6:8e:c9:c6:8a:01:29:f0:b1:9e:e4:86:f9:47:
                    2e:e9:98:b9:d6:4a:a6:25:66:58:86:33:c1:36:7a:
                    fb:cc:a8:f0:83:ae:97:66:b9:cc:7d:03:e8:78:ed:
                    b4:8f:94:c2:d9:e6:99:b6:21:6e:96:06:32:fd:a0:
                    e6:06:8a:3c:e3:5b:bf:b6:16:98:ef:30:6c:81:6d:
                    a4:c2:13:ac:05:05:3e:b7:1f:71:1e:15:3e:22:70:
                    6b:5b:3d:ae:7f:89:85:d6:d0:46:bd:81:61:37:c5:
                    3d:d7:da:f8:df:00:d6:55:c1:90:ec:34:9d:06:37:
                    1e:0f:bd:bf:b2:18:4e:1c:92:a1:05:a2:cc:fe:ef:
                    62:eb:7b:fb:f9:15:47:05:0f:c3:89:3c:77:82:73:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:41:78:83:34:48:3C:05:3D:1A:E7:79:7D:96:3B:DF:CF:2B:9E:CA
            X509v3 Authority Key Identifier:
                keyid:26:DC:2A:50:C0:A1:39:F3:B6:37:BF:EA:63:C5:A4:72:E4:CA:B4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:aa:a9:b2:18:aa:a7:6d:9c:73:2b:29:2a:4c:76:7b:57:60:
         7b:4c:72:ab:fe:46:af:e3:a0:64:87:66:58:1b:12:66:eb:19:
         63:be:ae:de:8a:01:16:8f:76:bc:39:27:58:ed:4a:73:76:ab:
         3a:ba:5d:95:43:eb:ba:ed:f9:ca:be:f1:d5:c6:bb:48:8f:fd:
         b2:fe:5e:9a:57:07:47:9d:8a:ef:b3:cf:07:d7:f6:30:63:72:
         8a:05:46:a5:6b:2e:ef:a5:ad:a4:96:d0:94:3e:14:7b:0a:9b:
         6e:7a:72:56:36:2a:6a:56:80:6d:f4:5e:ba:62:5b:73:5e:ea:
         d8:e8:fa:07:e8:2a:3f:fe:e6:43:78:a3:56:e9:44:c4:9d:8e:
         5a:6d:40:08:62:f8:91:c9:be:1c:dd:a5:0b:82:4e:73:bf:d4:
         3d:4c:87:32:35:1e:a9:c6:84:00:d0:a3:b4:09:ae:0b:25:6e:
         d1:f0:59:c2:23:41:09:d0:48:1b:bc:cc:a3:ac:2e:af:a9:9f:
         28:1e:3a:17:3b:73:52:3a:6f:1a:01:d4:1a:2b:3a:62:6f:4d:
         a0:7b:b8:03:a8:6b:eb:34:67:2a:fe:f5:a2:bf:67:04:1e:2a:
         90:7d:86:8b:f5:62:ce:54:07:56:91:b7:c2:ea:7f:c6:e3:ce:
         6d:86:0c:e0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVbQNwjSYApHJtTGAuowCqyNQtuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZEQzJBNTBDMEExMzlGM0I2MzdCRkVBNjNDNUE0NzJF
NENBQjRGRTAeFw0yNTAzMDQyMTM0MDNaFw0yNjAzMDMyMTM5MDNaMDMxMTAvBgNV
BAMTKDI5NDE3ODgzMzQ0ODNDMDUzRDFBRTc3OTdEOTYzQkRGQ0YyQjlFQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC561WEo09yLx/DgQQ8BxKm/th2
dwxA3e2xxSXVY1SMh9rH+5ivwJ0F1SRWa5zbN0n93NRSAKVN3lHB8elmms6C+uUc
oTaAxdgU2Aker1+tLqSnmTpZrt4pfS6rOwaXeFkuZUQ8Al4Hivf2jsnGigEp8LGe
5Ib5Ry7pmLnWSqYlZliGM8E2evvMqPCDrpdmucx9A+h47bSPlMLZ5pm2IW6WBjL9
oOYGijzjW7+2FpjvMGyBbaTCE6wFBT63H3EeFT4icGtbPa5/iYXW0Ea9gWE3xT3X
2vjfANZVwZDsNJ0GNx4Pvb+yGE4ckqEFosz+72Lre/v5FUcFD8OJPHeCc1mrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKUF4gzRIPAU9Gud5fZY7388rnsowHwYDVR0j
BBgwFoAUJtwqUMChOfO2N7/qY8WkcuTKtP4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVJ3WllZVmtmbUtXWm9BdUN4SGdCTm12RmZjemNLV0JHRWpHZzRIYU5T
N2MvMC8yNkRDMkE1MEMwQTEzOUYzQjYzN0JGRUE2M0M1QTQ3MkU0Q0FCNEZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2REMyQTUwQzBBMTM5RjNC
NjM3QkZFQTYzQzVBNDcyRTRDQUI0RkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FSd1pZWVZrZm1LV1pvQXVDeEhnQk5tdkZmY3pjS1dCR0VqR2c0SGFOUzdjLzAv
MzQzNTJlMzEzODM2MmUzMTMxMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzNDMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItunAwDQYJKoZIhvcNAQELBQADggEBAJSqqbIY
qqdtnHMrKSpMdntXYHtMcqv+Rq/joGSHZlgbEmbrGWO+rt6KARaPdrw5J1jtSnN2
qzq6XZVD67rt+cq+8dXGu0iP/bL+XppXB0ediu+zzwfX9jBjcooFRqVrLu+lraSW
0JQ+FHsKm256clY2KmpWgG30XrpiW3Ne6tjo+gfoKj/+5kN4o1bpRMSdjlptQAhi
+JHJvhzdpQuCTnO/1D1MhzI1HqnGhADQo7QJrgslbtHwWcIjQQnQSBu8zKOsLq+p
nygeOhc7c1I6bxoB1BorOmJvTaB7uAOoa+s0Zyr+9aK/ZwQeKpB9hov1Ys5UB1aR
t8Lqf8bjzm2GDOA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:11 2025 by rpki-client