Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa
File:                     34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (raw, json)
Hash identifier:          FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=
Subject key identifier:   63:93:3E:54:62:7C:92:58:A5:4A:AA:AB:8B:12:8F:91:9C:5A:3C:04
Certificate issuer:       /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial:       6AAF3EFB5F0B008E65260BE22664F8AD8E233531
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa
Signing time:             Thu 06 Mar 2025 04:00:17 +0000
ROA not before:           Thu 06 Mar 2025 03:55:17 +0000
ROA not after:            Thu 05 Mar 2026 04:00:17 +0000
asID:                     267102
IP address blocks:        45.228.140.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:af:3e:fb:5f:0b:00:8e:65:26:0b:e2:26:64:f8:ad:8e:23:35:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
        Validity
            Not Before: Mar  6 03:55:17 2025 GMT
            Not After : Mar  5 04:00:17 2026 GMT
        Subject: CN=63933E54627C9258A54AAAAB8B128F919C5A3C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:05:1f:aa:9b:e7:5e:b7:39:34:45:e9:2f:44:
                    3b:48:30:1c:24:78:45:c9:53:3d:50:3a:47:75:79:
                    f8:2b:86:18:0a:cb:a5:ec:b5:ff:1c:f4:66:99:da:
                    40:0b:5c:ca:d9:5e:e4:d7:d8:b2:5e:c8:3e:52:e2:
                    a2:dd:ba:6a:5c:8a:11:32:e5:6d:e2:00:f4:8c:de:
                    78:02:ec:9e:1b:ef:97:20:e4:77:db:df:12:a9:60:
                    7f:82:91:71:0b:6f:92:5d:e1:68:01:95:0c:32:2d:
                    69:bd:e2:de:73:10:4a:69:ca:6d:af:f2:ed:f4:77:
                    de:5c:c9:cc:77:61:7c:b7:e8:a8:ca:35:e8:3e:b1:
                    4f:dd:89:95:b4:d8:44:85:9d:47:2b:08:27:67:2d:
                    17:b8:c7:d1:f0:11:b0:bc:3a:36:d3:a1:2e:ff:ca:
                    85:f0:6d:e1:8d:9a:0c:c0:29:17:73:6d:92:52:ac:
                    20:e1:05:bb:85:49:e5:f0:58:e8:bf:4a:79:08:9a:
                    55:2f:e8:c8:8d:bf:f0:8b:53:a0:de:bc:25:70:3c:
                    c7:fd:f5:97:79:b0:af:8f:51:d8:4b:06:1d:22:b7:
                    e2:3c:c2:23:44:ff:85:1c:df:b5:f6:74:93:4d:80:
                    f1:6b:54:b7:57:b6:7b:df:2d:bd:04:01:8f:30:4f:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:93:3E:54:62:7C:92:58:A5:4A:AA:AB:8B:12:8F:91:9C:5A:3C:04
            X509v3 Authority Key Identifier:
                keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:8b:a0:3c:09:9b:92:74:66:f4:56:ed:af:88:08:51:3d:52:
         bd:c4:35:e3:86:87:43:b1:5e:21:e4:4a:15:f1:66:81:1a:0e:
         85:9e:4a:cb:54:8a:f0:95:7f:85:72:58:1e:77:25:2f:fa:d0:
         0d:b7:dc:5a:b0:56:9e:3a:eb:fe:8b:ea:24:de:4e:19:58:6e:
         44:42:9c:6a:1e:17:ba:09:61:72:c7:cb:38:33:b2:7a:b7:64:
         bf:4e:73:8e:c1:f5:08:72:09:d0:b2:23:83:7d:3a:d7:09:08:
         62:77:82:8c:ed:e9:06:b9:f6:e0:7d:22:d8:56:43:7e:b3:e1:
         c4:46:55:a1:5f:ef:e9:8f:50:22:5e:8e:9d:11:fe:2c:b0:39:
         f5:e9:b8:61:ea:67:73:27:fa:46:b7:e0:3a:f4:eb:dc:88:aa:
         70:d4:b7:27:3e:30:1a:e5:ce:5a:f3:bf:83:32:61:5b:31:e3:
         fb:8d:cc:13:a6:f6:54:ab:cd:17:51:e7:71:69:d0:63:29:02:
         c8:3b:03:f6:05:16:d6:e3:3d:f3:21:0f:70:a6:2a:10:e2:98:
         4f:0b:85:a7:d6:70:f0:f4:f8:88:3c:60:5c:f9:d2:ee:29:3b:
         44:3b:e1:12:a8:13:cf:cf:c5:a3:e1:e4:26:b9:e2:a3:4f:86:
         69:1c:3b:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaq8++18LAI5lJgviJmT4rY4jNTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx
Nzc5OUVENzAeFw0yNTAzMDYwMzU1MTdaFw0yNjAzMDUwNDAwMTdaMDMxMTAvBgNV
BAMTKDYzOTMzRTU0NjI3QzkyNThBNTRBQUFBQjhCMTI4RjkxOUM1QTNDMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoBR+qm+detzk0RekvRDtIMBwk
eEXJUz1QOkd1efgrhhgKy6Xstf8c9GaZ2kALXMrZXuTX2LJeyD5S4qLdumpcihEy
5W3iAPSM3ngC7J4b75cg5Hfb3xKpYH+CkXELb5Jd4WgBlQwyLWm94t5zEEppym2v
8u30d95cycx3YXy36KjKNeg+sU/diZW02ESFnUcrCCdnLRe4x9HwEbC8OjbToS7/
yoXwbeGNmgzAKRdzbZJSrCDhBbuFSeXwWOi/SnkImlUv6MiNv/CLU6DevCVwPMf9
9Zd5sK+PUdhLBh0it+I8wiNE/4Uc37X2dJNNgPFrVLdXtnvfLb0EAY8wT6bLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUY5M+VGJ8klilSqqrixKPkZxaPAQwHwYDVR0j
BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT
M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5
NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R0YTNXSFg1Y3dxODhnZkxFY3JQZWFqdFJYdkFQdVBYWEx6MXNzTjczUzNULzEv
MzQzNTJlMzIzMjM4MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMTMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5IwwDQYJKoZIhvcNAQELBQADggEBAEOLoDwJ
m5J0ZvRW7a+ICFE9Ur3ENeOGh0OxXiHkShXxZoEaDoWeSstUivCVf4VyWB53JS/6
0A233FqwVp466/6L6iTeThlYbkRCnGoeF7oJYXLHyzgzsnq3ZL9Oc47B9QhyCdCy
I4N9OtcJCGJ3gozt6Qa59uB9IthWQ36z4cRGVaFf7+mPUCJejp0R/iywOfXpuGHq
Z3Mn+ka34Dr069yIqnDUtyc+MBrlzlrzv4MyYVsx4/uNzBOm9lSrzRdR53Fp0GMp
Asg7A/YFFtbjPfMhD3CmKhDimE8LhafWcPD0+Ig8YFz50u4pO0Q74RKoE8/PxaPh
5Ca54qNPhmkcO4k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:12 2025 by rpki-client