Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132312e302f32342d3234203d3e20323637303132.roa
File:                     34352e3232372e3132312e302f32342d3234203d3e20323637303132.roa (raw, json)
Hash identifier:          WUPaKA9OPh8OGI7ty1D4CfmLna8jrifpQmDbseZ8K34=
Subject key identifier:   B4:3A:F0:5E:C2:12:A1:EF:43:03:65:C4:13:B0:84:60:9E:FB:82:B6
Certificate issuer:       /CN=524903D80649F057B87931C5F6D861489C4593B7
Certificate serial:       347900A07179161AA5D46035705142CCB73E7BBC
Authority key identifier: 52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132312e302f32342d3234203d3e20323637303132.roa
Signing time:             Mon 24 Jan 2022 16:10:01 +0000
ROA not before:           Mon 24 Jan 2022 16:05:01 +0000
ROA not after:            Mon 23 Jan 2023 16:10:01 +0000
asID:                     267012
IP address blocks:        45.227.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:79:00:a0:71:79:16:1a:a5:d4:60:35:70:51:42:cc:b7:3e:7b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524903D80649F057B87931C5F6D861489C4593B7
        Validity
            Not Before: Jan 24 16:05:01 2022 GMT
            Not After : Jan 23 16:10:01 2023 GMT
        Subject: CN=B43AF05EC212A1EF430365C413B084609EFB82B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:ef:8c:bd:b9:b9:08:bf:f8:c2:ae:b4:aa:
                    30:32:3c:79:d6:40:97:83:65:97:f9:ab:d6:f7:88:
                    3c:cc:ad:46:0d:b3:24:ab:88:26:95:3d:5d:6d:12:
                    f9:32:20:eb:e0:11:d7:79:de:36:49:f9:ec:95:94:
                    fc:4a:14:4c:c5:b0:3c:3a:7b:87:57:c6:f8:ff:51:
                    d8:ce:fc:21:24:02:bb:33:a1:6b:50:31:58:23:5a:
                    7e:d2:db:65:51:b0:9c:d8:42:bd:9b:06:82:ec:42:
                    da:02:8c:d1:e1:8a:84:af:aa:c9:38:6f:4b:45:9f:
                    d2:38:70:86:ca:43:53:de:30:a1:e6:7c:4f:c5:49:
                    0a:ed:16:1a:f0:55:20:2a:53:2e:66:65:25:74:59:
                    5a:d8:0e:d1:be:23:1a:49:d6:b7:bb:57:09:37:b2:
                    8e:cc:20:36:a4:31:b4:0c:f9:74:8f:c5:db:07:2c:
                    1a:1a:dc:68:98:03:0b:12:41:44:61:8b:0c:11:f2:
                    25:d3:13:df:ac:f6:5b:43:98:df:4d:3b:37:21:15:
                    54:ee:ee:d2:8b:b4:9e:46:e0:40:10:a8:75:46:70:
                    cd:ae:ce:c5:5a:16:79:d4:1f:98:98:25:d1:10:3c:
                    d5:04:31:92:ac:bb:bc:35:30:0b:84:0a:c8:1f:79:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3A:F0:5E:C2:12:A1:EF:43:03:65:C4:13:B0:84:60:9E:FB:82:B6
            X509v3 Authority Key Identifier:
                keyid:52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/524903D80649F057B87931C5F6D861489C4593B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132312e302f32342d3234203d3e20323637303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:ff:2a:ab:18:a7:d1:e4:c3:ec:36:74:43:7a:9a:4f:57:e3:
         72:ab:46:1c:0d:10:ae:cb:3f:93:3a:a0:1b:09:ca:59:ac:b2:
         11:e9:b1:01:be:98:31:8a:a1:0c:74:76:3e:cb:0c:3a:a2:dd:
         22:36:fa:5e:d9:46:a6:d8:3c:70:13:44:8a:7c:52:a4:22:5f:
         ac:8f:1c:8a:41:d7:05:d1:be:73:f2:19:a9:34:cf:8a:24:88:
         8d:84:d1:2a:43:31:8d:e4:e6:0d:f0:81:b6:6d:29:df:ee:08:
         6a:1f:b7:2e:2a:ed:0d:d3:6d:75:b4:6f:3d:23:b9:97:56:1c:
         1c:53:38:d9:93:5b:54:18:4a:e9:07:30:e0:46:04:b3:7d:05:
         5b:37:59:7f:69:7f:b4:0e:5b:7f:66:76:87:ec:ea:98:bd:b9:
         31:09:ca:38:d9:48:86:9d:a4:06:13:62:30:d6:2e:60:c9:99:
         9a:d0:f7:d0:17:5b:bc:92:32:65:31:55:ef:06:90:1b:df:2f:
         6b:bb:ae:9e:54:e8:7b:bc:8e:77:cb:2d:8e:e0:77:10:b9:22:
         ee:03:35:c4:fe:ad:41:fa:d9:c7:4b:d2:f0:62:8f:be:ab:a7:
         a2:6b:a8:b7:0e:48:3b:e9:88:2e:a9:eb:8a:26:71:a7:f0:6b:
         cd:8d:e3:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNHkAoHF5Fhql1GA1cFFCzLc+e7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI0OTAzRDgwNjQ5RjA1N0I4NzkzMUM1RjZEODYxNDg5
QzQ1OTNCNzAeFw0yMjAxMjQxNjA1MDFaFw0yMzAxMjMxNjEwMDFaMDMxMTAvBgNV
BAMTKEI0M0FGMDVFQzIxMkExRUY0MzAzNjVDNDEzQjA4NDYwOUVGQjgyQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJuO+Mvbm5CL/4wq60qjAyPHnW
QJeDZZf5q9b3iDzMrUYNsySriCaVPV1tEvkyIOvgEdd53jZJ+eyVlPxKFEzFsDw6
e4dXxvj/UdjO/CEkArszoWtQMVgjWn7S22VRsJzYQr2bBoLsQtoCjNHhioSvqsk4
b0tFn9I4cIbKQ1PeMKHmfE/FSQrtFhrwVSAqUy5mZSV0WVrYDtG+IxpJ1re7Vwk3
so7MIDakMbQM+XSPxdsHLBoa3GiYAwsSQURhiwwR8iXTE9+s9ltDmN9NOzchFVTu
7tKLtJ5G4EAQqHVGcM2uzsVaFnnUH5iYJdEQPNUEMZKsu7w1MAuECsgfeUyjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtDrwXsISoe9DA2XEE7CEYJ77grYwHwYDVR0j
BBgwFoAUUkkD2AZJ8Fe4eTHF9thhSJxFk7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjl6aW9uVERNSlJkTmdCUG9CUUFzenhwQVlCUlBLU2dOdUJoZ1BwVWF0
aXcvMC81MjQ5MDNEODA2NDlGMDU3Qjg3OTMxQzVGNkQ4NjE0ODlDNDU5M0I3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUyNDkwM0Q4MDY0OUYwNTdC
ODc5MzFDNUY2RDg2MTQ4OUM0NTkzQjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I5emlvblRETUpSZE5nQlBvQlFBc3p4cEFZQlJQS1NnTnVCaGdQcFVhdGl3LzAv
MzQzNTJlMzIzMjM3MmUzMTMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt43kwDQYJKoZIhvcNAQELBQADggEBAFb/KqsY
p9Hkw+w2dEN6mk9X43KrRhwNEK7LP5M6oBsJylmsshHpsQG+mDGKoQx0dj7LDDqi
3SI2+l7ZRqbYPHATRIp8UqQiX6yPHIpB1wXRvnPyGak0z4okiI2E0SpDMY3k5g3w
gbZtKd/uCGofty4q7Q3TbXW0bz0juZdWHBxTONmTW1QYSukHMOBGBLN9BVs3WX9p
f7QOW39mdofs6pi9uTEJyjjZSIadpAYTYjDWLmDJmZrQ99AXW7ySMmUxVe8GkBvf
L2u7rp5U6Hu8jnfLLY7gdxC5Iu4DNcT+rUH62cdL0vBij76rp6JrqLcOSDvpiC6p
64omcafwa82N46M=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:12 2025 by rpki-client