Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32322d3232203d3e20323637343039.roa
File:                     34352e3233352e37322e302f32322d3232203d3e20323637343039.roa (raw, json)
Hash identifier:          +6yUgGsEvidpH2y0atP/Yxkwh9pcLe87M21MATZFUV8=
Subject key identifier:   0D:4A:2E:26:33:F8:31:E7:5F:4F:CE:6B:36:0D:8E:0F:1D:57:6D:4D
Certificate issuer:       /CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
Certificate serial:       391D328F3E01F5D0DE74F13495B0D8B67EA8415D
Authority key identifier: 52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32322d3232203d3e20323637343039.roa
Signing time:             Mon 17 Feb 2025 18:19:09 +0000
ROA not before:           Mon 17 Feb 2025 18:14:09 +0000
ROA not after:            Mon 16 Feb 2026 18:19:09 +0000
asID:                     267409
IP address blocks:        45.235.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1d:32:8f:3e:01:f5:d0:de:74:f1:34:95:b0:d8:b6:7e:a8:41:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
        Validity
            Not Before: Feb 17 18:14:09 2025 GMT
            Not After : Feb 16 18:19:09 2026 GMT
        Subject: CN=0D4A2E2633F831E75F4FCE6B360D8E0F1D576D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:a6:05:8b:e4:d3:fe:57:7d:8b:35:39:37:
                    45:00:e0:b1:1e:c2:f1:0a:11:62:38:2d:a1:9f:7b:
                    91:61:bc:98:8d:83:c9:d4:51:30:a7:11:83:dd:a5:
                    b3:79:f0:c2:b9:a5:0c:8b:19:f4:19:48:c2:9f:02:
                    24:99:84:a5:1a:19:e1:4a:42:a8:39:b1:e9:cd:4a:
                    4c:cf:fa:7a:46:03:ad:4a:63:f1:c0:32:4e:19:d1:
                    c8:8c:6f:e2:11:76:fd:4b:3e:aa:1a:64:2b:31:86:
                    50:22:8d:60:96:0b:41:1c:32:4a:3a:ed:1e:2f:2d:
                    3d:8d:16:52:c2:0b:aa:40:76:dd:df:b7:1f:02:5a:
                    11:db:ef:19:30:53:8c:ca:9d:74:cb:29:31:11:e8:
                    08:bf:3f:fc:3e:9c:79:a9:d9:ea:a3:60:af:3d:ad:
                    43:27:27:ac:67:5d:a0:95:d1:20:a5:3b:23:4c:21:
                    64:d3:4b:b0:6d:a7:33:d0:15:1b:eb:31:3d:ee:17:
                    19:c3:97:d5:4c:56:4b:22:6f:aa:89:7c:e5:ab:57:
                    b5:bf:39:83:3f:eb:cd:c1:26:29:6f:2d:c4:93:13:
                    dd:4f:cf:48:59:2f:17:dd:b1:65:eb:79:be:56:71:
                    38:7e:eb:31:d4:5d:54:82:34:93:f0:49:fc:d2:2c:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4A:2E:26:33:F8:31:E7:5F:4F:CE:6B:36:0D:8E:0F:1D:57:6D:4D
            X509v3 Authority Key Identifier:
                keyid:52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32322d3232203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:4d:a1:69:d9:34:bb:94:96:5d:35:c2:84:03:8d:9b:a9:6b:
         0e:82:13:b6:20:a8:ff:85:e2:3a:f9:04:db:73:3e:86:49:ca:
         1e:1a:da:41:09:79:bf:0e:46:75:24:a9:ce:21:54:0e:89:83:
         b6:96:62:fc:6a:7c:ee:e0:f6:56:ff:b3:89:46:c6:35:fb:f4:
         41:97:4a:0f:4f:4f:56:36:be:2b:86:9c:12:77:bc:9a:d9:52:
         cc:ec:72:64:f9:a8:2d:68:2e:08:34:3b:a7:2c:e7:5c:5c:f0:
         61:c5:e6:7e:28:72:8a:22:17:7e:e5:35:1e:69:f1:09:fd:1e:
         1b:a2:29:ab:65:48:41:6f:fb:9c:45:d3:69:3a:9c:93:56:cb:
         96:0f:3e:fe:0e:92:6b:6e:cf:c2:31:26:33:91:52:de:8e:6e:
         e3:2c:d7:60:c7:8c:60:06:fb:ee:ff:04:b2:73:45:b6:de:4a:
         d3:e1:11:0c:af:89:de:7e:80:ff:62:35:33:d4:6c:ff:32:59:
         8f:72:6e:c8:9a:0b:0e:f6:9a:54:b8:fa:19:b0:23:24:b3:c6:
         ea:5e:88:7e:9a:ea:df:7d:f4:f9:df:59:e8:f1:eb:1f:49:31:
         c3:6e:99:f9:83:5a:e6:6f:a3:d4:45:90:04:0f:46:77:8f:e0:
         c8:79:65:da
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOR0yjz4B9dDedPE0lbDYtn6oQV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJFM0E3MjhBRTZDQ0ExQ0VCNjg2QUZEMjgxNjY2MjRC
MTUyOUNGNTAeFw0yNTAyMTcxODE0MDlaFw0yNjAyMTYxODE5MDlaMDMxMTAvBgNV
BAMTKDBENEEyRTI2MzNGODMxRTc1RjRGQ0U2QjM2MEQ4RTBGMUQ1NzZENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCaYFi+TT/ld9izU5N0UA4LEe
wvEKEWI4LaGfe5FhvJiNg8nUUTCnEYPdpbN58MK5pQyLGfQZSMKfAiSZhKUaGeFK
Qqg5senNSkzP+npGA61KY/HAMk4Z0ciMb+IRdv1LPqoaZCsxhlAijWCWC0EcMko6
7R4vLT2NFlLCC6pAdt3ftx8CWhHb7xkwU4zKnXTLKTER6Ai/P/w+nHmp2eqjYK89
rUMnJ6xnXaCV0SClOyNMIWTTS7BtpzPQFRvrMT3uFxnDl9VMVksib6qJfOWrV7W/
OYM/683BJilvLcSTE91Pz0hZLxfdsWXreb5WcTh+6zHUXVSCNJPwSfzSLFADAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDUouJjP4MedfT85rNg2ODx1XbU0wHwYDVR0j
BBgwFoAUUuOnKK5syhzraGr9KBZmJLFSnPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkpDNGRmaVNKVURoR0hWc2tYb2tWMXZ4U0toQ1V4Y1c1U25mSmhEaFZT
SFAvMC81MkUzQTcyOEFFNkNDQTFDRUI2ODZBRkQyODE2NjYyNEIxNTI5Q0Y1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRTNBNzI4QUU2Q0NBMUNF
QjY4NkFGRDI4MTY2NjI0QjE1MjlDRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JKQzRkZmlTSlVEaEdIVnNrWG9rVjF2eFNLaENVeGNXNVNuZkpoRGhWU0hQLzAv
MzQzNTJlMzIzMzM1MmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzQzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLetIMA0GCSqGSIb3DQEBCwUAA4IBAQAoTaFp2TS7
lJZdNcKEA42bqWsOghO2IKj/heI6+QTbcz6GScoeGtpBCXm/DkZ1JKnOIVQOiYO2
lmL8anzu4PZW/7OJRsY1+/RBl0oPT09WNr4rhpwSd7ya2VLM7HJk+agtaC4INDun
LOdcXPBhxeZ+KHKKIhd+5TUeafEJ/R4boimrZUhBb/ucRdNpOpyTVsuWDz7+DpJr
bs/CMSYzkVLejm7jLNdgx4xgBvvu/wSyc0W23krT4REMr4nefoD/YjUz1Gz/MlmP
cm7ImgsO9ppUuPoZsCMks8bqXoh+murfffT531no8esfSTHDbpn5g1rmb6PURZAE
D0Z3j+DIeWXa
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:48:10 2025 by rpki-client