Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230392e302f32342d3234203d3e20323637333339.roa
File:                     34352e3233332e3230392e302f32342d3234203d3e20323637333339.roa (raw, json)
Hash identifier:          c22RgF+QnRZsBTZJQ7mo3x+H9ybrE/II8a3A4/0pX6Q=
Subject key identifier:   D3:6E:81:EE:43:C0:8F:B1:1C:2D:7B:09:84:C8:02:99:63:21:07:6D
Certificate issuer:       /CN=A09087E55846274477AB0E4597FD754DB0509203
Certificate serial:       4C409BEDE9CFFF4640F8A60804FE0BF8347DC8D0
Authority key identifier: A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230392e302f32342d3234203d3e20323637333339.roa
Signing time:             Sun 09 Jul 2023 04:08:53 +0000
ROA not before:           Sun 09 Jul 2023 04:03:53 +0000
ROA not after:            Sun 07 Jul 2024 04:08:53 +0000
asID:                     267339
IP address blocks:        45.233.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:40:9b:ed:e9:cf:ff:46:40:f8:a6:08:04:fe:0b:f8:34:7d:c8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09087E55846274477AB0E4597FD754DB0509203
        Validity
            Not Before: Jul  9 04:03:53 2023 GMT
            Not After : Jul  7 04:08:53 2024 GMT
        Subject: CN=D36E81EE43C08FB11C2D7B0984C802996321076D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:41:df:2a:b7:20:86:2d:aa:0f:8f:9f:af:
                    94:6c:f5:97:a5:d3:18:54:70:de:65:7d:c8:c6:b7:
                    10:27:00:af:2f:a7:5c:e7:b4:7e:46:df:e3:97:d2:
                    16:71:ef:51:17:95:9b:bf:0e:4a:3b:e9:10:ce:59:
                    51:82:51:da:50:46:6f:55:a2:b9:b9:a8:18:6b:f5:
                    e4:27:73:14:21:1d:ed:49:86:0e:b7:06:1d:a7:7b:
                    52:36:8c:23:6f:6c:8d:f6:25:fc:e2:eb:fd:37:70:
                    90:a8:70:6b:d7:e9:06:73:1b:d8:bd:5c:0c:b5:89:
                    72:73:ad:fd:c0:bf:9e:c2:10:99:bc:c9:b7:4c:85:
                    68:85:bb:1e:7f:68:84:c5:15:36:39:46:ab:89:97:
                    b9:ac:b1:92:ed:e9:aa:94:5d:92:e3:d2:c5:61:d7:
                    fa:b3:37:71:51:e2:0f:e0:89:7d:88:a2:6a:e8:d1:
                    97:4d:f3:07:ee:05:76:34:2e:5d:4f:4d:8f:c4:7c:
                    57:8a:18:fd:e0:65:c6:50:11:fe:49:94:48:81:d5:
                    50:1f:47:48:ce:7d:37:61:40:9c:12:91:73:b9:0b:
                    b2:6f:e5:58:f0:8d:9d:34:d6:74:68:f5:a5:e4:0c:
                    26:d4:bd:9a:da:77:e9:1b:b7:59:e2:a7:c5:fa:2d:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:81:EE:43:C0:8F:B1:1C:2D:7B:09:84:C8:02:99:63:21:07:6D
            X509v3 Authority Key Identifier:
                keyid:A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/A09087E55846274477AB0E4597FD754DB0509203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230392e302f32342d3234203d3e20323637333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:8f:b5:18:b5:84:aa:9b:e5:ef:7d:fe:df:a9:a0:38:b8:44:
         87:0c:82:b9:00:94:fb:1f:50:e3:d6:77:ab:77:ce:bb:bc:b3:
         38:9f:b1:ce:1c:55:e7:eb:95:52:b7:dd:d5:13:43:4d:52:44:
         76:eb:a8:97:b2:0a:a9:f2:69:96:a9:cd:81:d3:11:db:3e:df:
         26:ac:d6:90:b1:74:a4:8c:3f:37:b6:86:87:18:b9:b9:e6:6e:
         6d:65:11:71:30:22:4c:35:f6:f3:21:77:38:d1:e2:cc:0b:56:
         4a:a0:15:0f:02:f7:49:f7:41:82:4c:a8:f7:42:6a:08:45:a6:
         fe:7b:73:ec:bf:e1:1c:3b:9a:b6:b2:4c:85:eb:63:e8:be:83:
         9e:03:4a:ea:d1:e4:a7:4d:a7:d4:96:9f:7c:d9:1d:83:bb:36:
         80:3c:28:03:a8:e3:d2:54:29:c9:8f:9a:c6:34:e1:2f:23:3f:
         dc:f7:6a:ea:a7:43:cb:45:37:13:0f:e7:30:52:3b:67:74:d3:
         b9:9e:99:fe:d9:06:7b:14:7f:70:97:3e:2a:23:9d:17:e7:7f:
         06:50:41:9b:a8:2c:1a:d9:2f:0c:9c:19:d1:3a:d5:b3:28:01:
         d0:68:76:c4:70:d4:d2:2a:03:8a:6e:a1:d6:ec:94:42:6b:df:
         74:9d:48:34
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTECb7enP/0ZA+KYIBP4L+DR9yNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5MDg3RTU1ODQ2Mjc0NDc3QUIwRTQ1OTdGRDc1NERC
MDUwOTIwMzAeFw0yMzA3MDkwNDAzNTNaFw0yNDA3MDcwNDA4NTNaMDMxMTAvBgNV
BAMTKEQzNkU4MUVFNDNDMDhGQjExQzJEN0IwOTg0QzgwMjk5NjMyMTA3NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QEHfKrcghi2qD4+fr5Rs9Zel
0xhUcN5lfcjGtxAnAK8vp1zntH5G3+OX0hZx71EXlZu/Dko76RDOWVGCUdpQRm9V
orm5qBhr9eQncxQhHe1Jhg63Bh2ne1I2jCNvbI32Jfzi6/03cJCocGvX6QZzG9i9
XAy1iXJzrf3Av57CEJm8ybdMhWiFux5/aITFFTY5RquJl7mssZLt6aqUXZLj0sVh
1/qzN3FR4g/giX2Iomro0ZdN8wfuBXY0Ll1PTY/EfFeKGP3gZcZQEf5JlEiB1VAf
R0jOfTdhQJwSkXO5C7Jv5VjwjZ001nRo9aXkDCbUvZrad+kbt1nip8X6LWazAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU026B7kPAj7EcLXsJhMgCmWMhB20wHwYDVR0j
BBgwFoAUoJCH5VhGJ0R3qw5Fl/11TbBQkgMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9CYndxeFg5MURleGgxVFRxeng5WDlab0ZDNFQ1VEw0OGIycVJTcm9E
WVcvMC9BMDkwODdFNTU4NDYyNzQ0NzdBQjBFNDU5N0ZENzU0REIwNTA5MjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOTA4N0U1NTg0NjI3NDQ3
N0FCMEU0NTk3RkQ3NTREQjA1MDkyMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FvQmJ3cXhYOTFEZXhoMVRUcXp4OVg5Wm9GQzRUNVRMNDhiMnFSU3JvRFlXLzAv
MzQzNTJlMzIzMzMzMmUzMjMwMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6dEwDQYJKoZIhvcNAQELBQADggEBAHWPtRi1
hKqb5e99/t+poDi4RIcMgrkAlPsfUOPWd6t3zru8szifsc4cVefrlVK33dUTQ01S
RHbrqJeyCqnyaZapzYHTEds+3yas1pCxdKSMPze2hocYubnmbm1lEXEwIkw19vMh
dzjR4swLVkqgFQ8C90n3QYJMqPdCaghFpv57c+y/4Rw7mrayTIXrY+i+g54DSurR
5KdNp9SWn3zZHYO7NoA8KAOo49JUKcmPmsY04S8jP9z3auqnQ8tFNxMP5zBSO2d0
07memf7ZBnsUf3CXPiojnRfnfwZQQZuoLBrZLwycGdE61bMoAdBodsRw1NIqA4pu
odbslEJr33SdSDQ=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:05 2025 by rpki-client