Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132362e302f32332d3233203d3e20323639363731.roa
File:                     34352e3139312e3132362e302f32332d3233203d3e20323639363731.roa (raw, json)
Hash identifier:          VT0heoxNDqR0pwlnkPBnOfPz5ahmkqcpAQpBNMXWqBk=
Subject key identifier:   CD:2F:82:B6:6A:D8:AC:DE:79:7C:1A:2F:94:55:38:96:11:8E:CE:BA
Certificate issuer:       /CN=A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6
Certificate serial:       54D2DC2DF5E7E5A783BF862E648210C052E854DA
Authority key identifier: A8:FC:27:8A:9D:F8:FB:85:83:D4:E2:45:CE:C5:08:39:A8:C8:9E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132362e302f32332d3233203d3e20323639363731.roa
Signing time:             Fri 20 Dec 2024 14:12:55 +0000
ROA not before:           Fri 20 Dec 2024 14:07:55 +0000
ROA not after:            Fri 19 Dec 2025 14:12:55 +0000
asID:                     269671
IP address blocks:        45.191.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d2:dc:2d:f5:e7:e5:a7:83:bf:86:2e:64:82:10:c0:52:e8:54:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6
        Validity
            Not Before: Dec 20 14:07:55 2024 GMT
            Not After : Dec 19 14:12:55 2025 GMT
        Subject: CN=CD2F82B66AD8ACDE797C1A2F94553896118ECEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:b2:45:b3:fb:2e:e1:68:a3:b0:6c:01:18:
                    a9:45:81:3a:ca:b2:9a:a3:a7:c1:b1:a4:71:56:b4:
                    58:87:65:3f:0b:f9:bc:43:1e:f4:f3:0d:43:08:45:
                    73:67:d1:27:7e:da:63:da:27:26:83:f7:0c:6a:25:
                    e7:31:f5:30:ea:e4:ed:a8:fd:a0:3c:e0:f5:52:f2:
                    1b:59:69:21:29:6f:95:ab:fb:c4:d6:95:29:fc:07:
                    e2:f7:c6:1b:09:02:78:13:0c:7d:7f:08:84:15:2d:
                    0c:ce:3c:66:4c:82:63:e1:b1:9d:46:58:4f:4d:29:
                    33:8b:c0:55:0a:85:58:9a:6d:4d:db:c6:70:8f:23:
                    19:68:d8:64:74:0b:84:f9:8d:1f:b9:1f:e7:0b:51:
                    ef:91:3a:c0:af:8b:87:4a:8a:0f:52:da:03:2b:7c:
                    fc:52:c5:7e:10:aa:b7:2b:41:a6:98:b2:78:aa:d6:
                    e4:40:28:92:fd:81:80:a0:48:0b:a4:9e:a9:f8:25:
                    2e:94:8c:56:83:75:05:1b:d3:3f:90:49:f7:b1:2a:
                    91:f7:7d:63:57:10:a2:af:49:57:a2:12:ac:ec:53:
                    01:d3:6a:af:83:64:23:82:fc:ae:5d:c4:ee:b9:41:
                    6f:17:81:49:27:93:57:e4:9d:b1:4f:1a:59:ab:7a:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2F:82:B6:6A:D8:AC:DE:79:7C:1A:2F:94:55:38:96:11:8E:CE:BA
            X509v3 Authority Key Identifier:
                keyid:A8:FC:27:8A:9D:F8:FB:85:83:D4:E2:45:CE:C5:08:39:A8:C8:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132362e302f32332d3233203d3e20323639363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:81:5f:4e:88:9a:75:9f:00:22:97:2a:44:3f:61:53:a4:
         1f:96:03:c7:52:d3:e0:09:9c:17:0d:00:9e:5f:31:7d:22:f1:
         0d:79:c8:4c:45:b1:d2:73:2a:50:65:77:b3:e8:b6:67:12:40:
         70:1d:0c:56:ec:f4:19:4b:60:f1:dc:da:fd:1c:5b:a9:19:79:
         89:3b:15:4a:cc:ab:98:30:0c:89:27:de:c3:c5:8a:4b:9d:34:
         92:d6:b7:73:e9:28:f0:f1:82:b2:83:ad:af:c1:07:af:8c:f1:
         07:83:f5:b4:27:5f:83:16:78:77:f7:b2:f2:99:74:bf:9f:16:
         f5:56:f4:f1:da:e0:e9:84:97:ce:5c:df:e9:a1:d2:a5:e0:dc:
         a2:ba:8f:1f:73:9e:0f:53:1c:02:14:9b:95:03:d6:80:83:72:
         cd:a7:cc:de:10:62:f1:23:1f:d2:4c:03:89:25:20:45:af:88:
         60:12:54:49:a4:b0:8b:b4:b8:0a:f5:38:2f:48:8a:f2:2c:c3:
         b0:21:03:ae:e6:6c:1c:16:6f:9d:0a:30:fb:81:34:83:f2:18:
         2e:cb:ea:f7:21:58:b1:10:56:03:b0:31:f2:fb:b4:f2:7d:aa:
         8d:df:45:8b:39:b8:c8:60:06:24:f4:8f:49:59:c0:80:e1:d7:
         8b:b2:11:d8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVNLcLfXn5aeDv4YuZIIQwFLoVNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGQzI3OEE5REY4RkI4NTgzRDRFMjQ1Q0VDNTA4MzlB
OEM4OUVFNjAeFw0yNDEyMjAxNDA3NTVaFw0yNTEyMTkxNDEyNTVaMDMxMTAvBgNV
BAMTKENEMkY4MkI2NkFEOEFDREU3OTdDMUEyRjk0NTUzODk2MTE4RUNFQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhbJFs/su4WijsGwBGKlFgTrK
spqjp8GxpHFWtFiHZT8L+bxDHvTzDUMIRXNn0Sd+2mPaJyaD9wxqJecx9TDq5O2o
/aA84PVS8htZaSEpb5Wr+8TWlSn8B+L3xhsJAngTDH1/CIQVLQzOPGZMgmPhsZ1G
WE9NKTOLwFUKhViabU3bxnCPIxlo2GR0C4T5jR+5H+cLUe+ROsCvi4dKig9S2gMr
fPxSxX4QqrcrQaaYsniq1uRAKJL9gYCgSAuknqn4JS6UjFaDdQUb0z+QSfexKpH3
fWNXEKKvSVeiEqzsUwHTaq+DZCOC/K5dxO65QW8XgUknk1fknbFPGlmreul7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzS+CtmrYrN55fBovlFU4lhGOzrowHwYDVR0j
BBgwFoAUqPwnip34+4WD1OJFzsUIOajInuYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlD
TFkvMC9BOEZDMjc4QTlERjhGQjg1ODNENEUyNDVDRUM1MDgzOUE4Qzg5RUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4RkMyNzhBOURGOEZCODU4
M0Q0RTI0NUNFQzUwODM5QThDODlFRTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZSllSY1JUa2NOQmlDRGpBNDJOblNUZzQzbnBFclc0aFdCWmtvcGlpQ0xZLzAv
MzQzNTJlMzEzOTMxMmUzMTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtv34wDQYJKoZIhvcNAQELBQADggEBAAxSgV9O
iJp1nwAilypEP2FTpB+WA8dS0+AJnBcNAJ5fMX0i8Q15yExFsdJzKlBld7PotmcS
QHAdDFbs9BlLYPHc2v0cW6kZeYk7FUrMq5gwDIkn3sPFikudNJLWt3PpKPDxgrKD
ra/BB6+M8QeD9bQnX4MWeHf3svKZdL+fFvVW9PHa4OmEl85c3+mh0qXg3KK6jx9z
ng9THAIUm5UD1oCDcs2nzN4QYvEjH9JMA4klIEWviGASVEmksIu0uAr1OC9IivIs
w7AhA67mbBwWb50KMPuBNIPyGC7L6vchWLEQVgOwMfL7tPJ9qo3fRYs5uMhgBiT0
j0lZwIDh14uyEdg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:48:38 2025 by rpki-client