Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134342e302f32332d3233203d3e20323638313937.roa
File:                     34352e3233352e3134342e302f32332d3233203d3e20323638313937.roa (raw, json)
Hash identifier:          FXFYS+lfRFklVxr9UhXwLWk85sMr61y43OL9mSjkOZo=
Subject key identifier:   15:CA:0F:7C:20:9D:0F:6E:06:54:E1:78:D8:6F:EC:58:F4:1E:47:86
Certificate issuer:       /CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
Certificate serial:       597B98BAEB7B2C6637392A2DB7331E352984841F
Authority key identifier: BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134342e302f32332d3233203d3e20323638313937.roa
Signing time:             Mon 02 Dec 2024 22:55:59 +0000
ROA not before:           Mon 02 Dec 2024 22:50:59 +0000
ROA not after:            Mon 01 Dec 2025 22:55:59 +0000
asID:                     268197
IP address blocks:        45.235.144.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7b:98:ba:eb:7b:2c:66:37:39:2a:2d:b7:33:1e:35:29:84:84:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
        Validity
            Not Before: Dec  2 22:50:59 2024 GMT
            Not After : Dec  1 22:55:59 2025 GMT
        Subject: CN=15CA0F7C209D0F6E0654E178D86FEC58F41E4786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:02:b4:5d:3a:45:e4:60:de:b3:05:2b:e7:
                    0d:d8:b7:39:23:24:e0:7e:ef:d4:2c:8c:ee:f3:b9:
                    ce:68:56:9d:a5:ce:85:a9:cc:c7:8a:2d:90:be:93:
                    0a:bc:1c:9e:f8:92:68:6e:5f:84:37:c6:9e:9a:56:
                    a7:1c:eb:e4:cc:96:c8:d8:38:48:ed:f9:73:30:b7:
                    e9:24:e2:5a:c0:ae:54:66:33:e5:a7:ab:2f:bc:f5:
                    25:ba:c9:7c:26:89:cf:68:7d:e6:ff:82:90:bc:9e:
                    58:e9:ed:9e:fe:5e:f5:7e:9a:bd:9e:c3:8a:3c:7e:
                    d4:d4:e7:98:84:a6:43:bf:d1:41:1e:dc:04:ee:93:
                    2e:30:56:4a:c3:9c:b2:48:d6:85:af:46:e0:42:f0:
                    0f:c6:0b:96:0a:93:f7:e2:ee:62:91:53:6c:00:3b:
                    19:fd:de:d9:5f:67:db:90:a9:5c:26:c6:b5:4f:f3:
                    f7:02:43:35:11:63:b0:bd:b1:d0:4f:48:4a:3b:f6:
                    d3:6d:29:54:c3:0b:cb:a9:a0:6c:85:48:de:9e:3d:
                    85:53:74:32:e0:4a:8b:f0:fe:0c:e4:41:76:eb:d2:
                    18:2f:1b:f2:2b:b0:c5:1e:a8:04:14:ed:d1:77:4d:
                    58:5a:9b:5d:90:22:75:6a:c6:e5:5d:61:0b:45:91:
                    3e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CA:0F:7C:20:9D:0F:6E:06:54:E1:78:D8:6F:EC:58:F4:1E:47:86
            X509v3 Authority Key Identifier:
                keyid:BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/BDFF256F0AD0E81FD186456828CFF572637DF2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134342e302f32332d3233203d3e20323638313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:dd:3c:20:fb:b9:c5:b7:9b:5c:b4:9b:c2:b3:8c:7c:1f:4f:
         95:53:20:12:6a:7e:f6:b3:e0:ea:b1:b0:b6:6b:c6:86:43:d5:
         d8:a9:fe:ee:ab:22:a9:d2:4f:03:cb:9c:d8:15:eb:fe:c8:7d:
         b7:29:44:cd:6c:68:11:35:a5:6f:78:35:49:86:bc:30:ff:d6:
         04:48:c1:6d:86:fa:0a:fd:4f:7a:d3:2b:75:f0:79:24:fb:1d:
         5a:ea:b8:32:8d:53:d4:55:40:a2:02:91:df:58:3e:36:0a:96:
         34:8a:8b:78:cb:04:2f:7c:1b:1c:cc:56:53:8b:9c:c4:d2:80:
         ae:c2:26:e8:8f:8f:cb:86:53:34:a0:ef:b7:e6:bf:fb:88:c8:
         14:14:68:59:6b:a7:7e:33:fc:a2:04:8f:a4:a7:57:8a:b7:25:
         c8:60:3e:4a:f8:6c:0f:e0:71:59:9d:f6:64:20:4b:80:75:c8:
         e8:3c:06:e9:c3:63:ac:51:56:36:01:f8:7b:2a:8d:d4:87:ce:
         e7:ab:5b:42:32:22:2b:73:df:ff:78:b5:1f:09:b0:d2:cb:da:
         93:2c:d9:77:7d:94:a1:54:09:41:4f:c3:c8:89:f6:7e:6c:f9:
         a5:0f:59:36:a2:b6:56:5e:7e:92:38:f7:67:9f:17:89:c7:ba:
         d5:ce:22:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWXuYuut7LGY3OSottzMeNSmEhB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGRjI1NkYwQUQwRTgxRkQxODY0NTY4MjhDRkY1NzI2
MzdERjJFNTAeFw0yNDEyMDIyMjUwNTlaFw0yNTEyMDEyMjU1NTlaMDMxMTAvBgNV
BAMTKDE1Q0EwRjdDMjA5RDBGNkUwNjU0RTE3OEQ4NkZFQzU4RjQxRTQ3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92gK0XTpF5GDeswUr5w3Ytzkj
JOB+79QsjO7zuc5oVp2lzoWpzMeKLZC+kwq8HJ74kmhuX4Q3xp6aVqcc6+TMlsjY
OEjt+XMwt+kk4lrArlRmM+Wnqy+89SW6yXwmic9ofeb/gpC8nljp7Z7+XvV+mr2e
w4o8ftTU55iEpkO/0UEe3ATuky4wVkrDnLJI1oWvRuBC8A/GC5YKk/fi7mKRU2wA
Oxn93tlfZ9uQqVwmxrVP8/cCQzURY7C9sdBPSEo79tNtKVTDC8upoGyFSN6ePYVT
dDLgSovw/gzkQXbr0hgvG/IrsMUeqAQU7dF3TVham12QInVqxuVdYQtFkT59AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFcoPfCCdD24GVOF42G/sWPQeR4YwHwYDVR0j
BBgwFoAUvf8lbwrQ6B/RhkVoKM/1cmN98uUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlAyb2Vac0NiZnpmTW1nYTVmeDRUZlNWMVJBd0FrVEhVUGZvZXJtSjYy
bjYvMC9CREZGMjU2RjBBRDBFODFGRDE4NjQ1NjgyOENGRjU3MjYzN0RGMkU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERkYyNTZGMEFEMEU4MUZE
MTg2NDU2ODI4Q0ZGNTcyNjM3REYyRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JQMm9lWnNDYmZ6Zk1tZ2E1Zng0VGZTVjFSQXdBa1RIVVBmb2VybUo2Mm42LzAv
MzQzNTJlMzIzMzM1MmUzMTM0MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt65AwDQYJKoZIhvcNAQELBQADggEBABzdPCD7
ucW3m1y0m8KzjHwfT5VTIBJqfvaz4OqxsLZrxoZD1dip/u6rIqnSTwPLnNgV6/7I
fbcpRM1saBE1pW94NUmGvDD/1gRIwW2G+gr9T3rTK3XweST7HVrquDKNU9RVQKIC
kd9YPjYKljSKi3jLBC98GxzMVlOLnMTSgK7CJuiPj8uGUzSg77fmv/uIyBQUaFlr
p34z/KIEj6SnV4q3JchgPkr4bA/gcVmd9mQgS4B1yOg8BunDY6xRVjYB+HsqjdSH
zuerW0IyIitz3/94tR8JsNLL2pMs2Xd9lKFUCUFPw8iJ9n5s+aUPWTaitlZefpI4
92efF4nHutXOIrw=
-----END CERTIFICATE-----
Generated at Wed Apr 16 08:30:49 2025 by rpki-client