Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37342e302f32342d3234203d3e20323637343039.roa
File:                     34352e3233352e37342e302f32342d3234203d3e20323637343039.roa (raw, json)
Hash identifier:          aCFwq4FCFkApjwfTU+M1EoSZgbMY5D9GXL3mGcTeWTI=
Subject key identifier:   B7:88:28:3E:7A:ED:9D:4B:6C:9E:EF:4D:A0:A1:08:0E:0B:A0:4E:18
Certificate issuer:       /CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
Certificate serial:       7610937B9EFC4645A99D82798A3602FA868B2747
Authority key identifier: 52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37342e302f32342d3234203d3e20323637343039.roa
Signing time:             Mon 17 Feb 2025 18:19:31 +0000
ROA not before:           Mon 17 Feb 2025 18:14:31 +0000
ROA not after:            Mon 16 Feb 2026 18:19:31 +0000
asID:                     267409
IP address blocks:        45.235.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:10:93:7b:9e:fc:46:45:a9:9d:82:79:8a:36:02:fa:86:8b:27:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
        Validity
            Not Before: Feb 17 18:14:31 2025 GMT
            Not After : Feb 16 18:19:31 2026 GMT
        Subject: CN=B788283E7AED9D4B6C9EEF4DA0A1080E0BA04E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:c7:01:a4:37:f9:bc:d2:fd:12:58:c0:8b:
                    50:35:ca:a5:fe:6c:d3:29:a4:f6:23:da:16:9d:0e:
                    4f:98:ce:1f:2e:fe:12:5c:5a:e1:fb:ec:c4:f9:b7:
                    a0:5e:f9:ca:ac:35:99:ae:c3:02:e8:30:3c:55:b8:
                    13:c9:3b:4c:86:b7:0d:7c:a2:02:3f:d4:34:da:1b:
                    bb:b4:fa:0c:10:2c:13:08:28:62:74:45:45:a4:20:
                    fb:54:1c:07:7a:01:55:18:67:e4:36:f9:2c:37:78:
                    c6:f7:b0:da:b0:78:8b:99:52:8f:a1:01:29:25:af:
                    55:85:31:d8:b4:3f:6e:90:12:66:71:77:89:56:a2:
                    eb:9f:43:3f:9a:70:6d:a5:80:cd:a5:5c:b8:0a:9a:
                    3c:5d:e0:01:1a:4b:f5:88:2f:46:94:93:dc:36:ad:
                    4b:22:a1:f2:89:84:10:f5:01:59:8e:13:0b:a0:3a:
                    fc:bc:75:a4:97:ef:aa:7e:30:48:ab:98:49:4c:c9:
                    9c:39:00:68:a6:a6:7b:6b:20:86:71:39:5f:53:4a:
                    39:44:16:48:9c:66:c1:2b:f4:e2:e2:88:83:ef:5c:
                    31:a1:11:d2:53:94:2f:97:c9:38:d3:47:1c:b9:ab:
                    1b:2d:e0:97:72:55:64:d4:14:52:be:95:a4:a3:37:
                    c3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:88:28:3E:7A:ED:9D:4B:6C:9E:EF:4D:A0:A1:08:0E:0B:A0:4E:18
            X509v3 Authority Key Identifier:
                keyid:52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37342e302f32342d3234203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:df:44:f6:c7:2f:68:3c:7a:6a:96:ee:fd:88:00:cb:0e:6f:
         68:1a:75:48:8d:bf:08:e4:6c:38:cc:f4:39:86:75:93:b1:7f:
         be:53:1e:fb:ed:5b:97:33:df:09:7a:5f:84:c7:89:97:c6:d4:
         08:db:6d:91:44:fd:20:44:39:96:0c:3c:7f:c8:bb:30:5f:ec:
         41:80:1f:2f:20:16:f8:f6:38:c4:f5:c0:fe:cc:d6:1f:4e:8e:
         e4:5b:03:e3:1f:64:b6:a4:a4:ae:32:e0:07:ff:52:bb:33:f5:
         ab:b1:e4:f0:6d:8f:d1:8a:f5:e1:5f:74:1f:9c:18:29:15:29:
         6b:25:d3:e5:03:cc:90:cf:80:ca:5f:40:1c:9b:4f:0c:b5:a9:
         81:2c:45:2b:89:a1:c6:43:1e:4f:e2:63:b0:ab:4c:5b:76:14:
         a6:f2:1d:18:ec:6d:19:38:ea:56:5c:d5:40:de:22:2c:13:79:
         8a:ad:6c:c6:94:3a:8e:98:00:39:f1:0e:e4:25:5a:97:99:64:
         b1:ae:55:10:6c:78:b5:ac:67:83:1a:97:ba:7a:99:60:67:66:
         a8:1a:fa:e1:b2:c7:34:81:2f:3e:f2:a0:c7:ba:76:dd:31:df:
         d6:c6:0a:68:f0:89:da:bd:9d:34:2b:8c:3f:cc:1f:66:86:ce:
         a6:99:a3:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdhCTe578RkWpnYJ5ijYC+oaLJ0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJFM0E3MjhBRTZDQ0ExQ0VCNjg2QUZEMjgxNjY2MjRC
MTUyOUNGNTAeFw0yNTAyMTcxODE0MzFaFw0yNjAyMTYxODE5MzFaMDMxMTAvBgNV
BAMTKEI3ODgyODNFN0FFRDlENEI2QzlFRUY0REEwQTEwODBFMEJBMDRFMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80McBpDf5vNL9EljAi1A1yqX+
bNMppPYj2hadDk+Yzh8u/hJcWuH77MT5t6Be+cqsNZmuwwLoMDxVuBPJO0yGtw18
ogI/1DTaG7u0+gwQLBMIKGJ0RUWkIPtUHAd6AVUYZ+Q2+Sw3eMb3sNqweIuZUo+h
ASklr1WFMdi0P26QEmZxd4lWouufQz+acG2lgM2lXLgKmjxd4AEaS/WIL0aUk9w2
rUsiofKJhBD1AVmOEwugOvy8daSX76p+MEirmElMyZw5AGimpntrIIZxOV9TSjlE
FkicZsEr9OLiiIPvXDGhEdJTlC+XyTjTRxy5qxst4JdyVWTUFFK+laSjN8MBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUt4goPnrtnUtsnu9NoKEIDgugThgwHwYDVR0j
BBgwFoAUUuOnKK5syhzraGr9KBZmJLFSnPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkpDNGRmaVNKVURoR0hWc2tYb2tWMXZ4U0toQ1V4Y1c1U25mSmhEaFZT
SFAvMC81MkUzQTcyOEFFNkNDQTFDRUI2ODZBRkQyODE2NjYyNEIxNTI5Q0Y1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRTNBNzI4QUU2Q0NBMUNF
QjY4NkFGRDI4MTY2NjI0QjE1MjlDRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JKQzRkZmlTSlVEaEdIVnNrWG9rVjF2eFNLaENVeGNXNVNuZkpoRGhWU0hQLzAv
MzQzNTJlMzIzMzM1MmUzNzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzQzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALetKMA0GCSqGSIb3DQEBCwUAA4IBAQAp30T2xy9o
PHpqlu79iADLDm9oGnVIjb8I5Gw4zPQ5hnWTsX++Ux777VuXM98Jel+Ex4mXxtQI
222RRP0gRDmWDDx/yLswX+xBgB8vIBb49jjE9cD+zNYfTo7kWwPjH2S2pKSuMuAH
/1K7M/WrseTwbY/RivXhX3QfnBgpFSlrJdPlA8yQz4DKX0Acm08MtamBLEUriaHG
Qx5P4mOwq0xbdhSm8h0Y7G0ZOOpWXNVA3iIsE3mKrWzGlDqOmAA58Q7kJVqXmWSx
rlUQbHi1rGeDGpe6eplgZ2aoGvrhssc0gS8+8qDHunbdMd/Wxgpo8InavZ00K4w/
zB9mhs6mmaP5
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:23:18 2025 by rpki-client