Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/34352e3233312e3233322e302f32322d3234203d3e20323637323430.roa
File:                     34352e3233312e3233322e302f32322d3234203d3e20323637323430.roa (raw, json)
Hash identifier:          EgGY1PnLIDHokEkxZGP+7eLbyrI67LYLULtnN+W77yQ=
Subject key identifier:   8D:56:12:1B:BE:68:62:33:E1:2D:61:81:B5:F5:7D:5A:52:29:50:7E
Certificate issuer:       /CN=D0A7B6545E75499D1FEFA32D015932E50FC824C6
Certificate serial:       2C2798E4F0CA489562FA81B63EC488FDD3D85B8E
Authority key identifier: D0:A7:B6:54:5E:75:49:9D:1F:EF:A3:2D:01:59:32:E5:0F:C8:24:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/34352e3233312e3233322e302f32322d3234203d3e20323637323430.roa
Signing time:             Tue 14 Jun 2022 20:15:20 +0000
ROA not before:           Tue 14 Jun 2022 20:10:20 +0000
ROA not after:            Tue 13 Jun 2023 20:15:20 +0000
asID:                     267240
IP address blocks:        45.231.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:27:98:e4:f0:ca:48:95:62:fa:81:b6:3e:c4:88:fd:d3:d8:5b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A7B6545E75499D1FEFA32D015932E50FC824C6
        Validity
            Not Before: Jun 14 20:10:20 2022 GMT
            Not After : Jun 13 20:15:20 2023 GMT
        Subject: CN=8D56121BBE686233E12D6181B5F57D5A5229507E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:dd:3e:33:d0:48:69:62:2c:b3:6e:47:9f:
                    4b:b0:d5:41:b4:d3:ee:af:38:d5:1b:99:d6:45:99:
                    61:1c:77:b9:1c:09:00:5a:2c:c0:fe:c1:b7:c9:e3:
                    ee:d9:69:1c:25:40:8a:67:78:fd:bb:d0:3f:99:3a:
                    31:65:a8:dd:ca:79:d4:6e:c9:72:2d:c7:a3:2d:33:
                    a3:d5:b5:9d:1d:38:27:98:c9:3f:de:88:95:aa:96:
                    33:68:09:bd:2e:bf:93:18:95:cb:1b:6b:7c:94:b8:
                    da:e0:59:14:57:5e:6e:2e:e4:1b:3c:43:75:52:83:
                    76:f6:0f:a4:38:57:99:1c:47:0e:6c:fd:14:e0:32:
                    02:fd:36:a1:71:09:f4:c7:08:22:3c:00:6a:8e:5c:
                    7b:74:fb:b6:26:fb:11:0c:52:f6:17:b1:ab:69:f2:
                    ca:99:2e:07:14:b9:0f:17:e4:6a:db:57:b3:04:28:
                    68:c6:97:7c:c1:5a:5f:3f:a8:d7:81:a0:79:26:58:
                    89:30:f3:48:b5:b9:c0:b7:a0:ed:e9:90:73:07:c7:
                    24:1b:2a:96:ff:12:00:a7:6f:13:bd:fb:41:78:62:
                    c1:9f:c8:e4:fc:82:5f:d3:21:34:72:44:5f:9e:79:
                    bf:8a:38:6d:b7:1d:f3:30:12:04:6f:e2:0a:0a:d9:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:56:12:1B:BE:68:62:33:E1:2D:61:81:B5:F5:7D:5A:52:29:50:7E
            X509v3 Authority Key Identifier:
                keyid:D0:A7:B6:54:5E:75:49:9D:1F:EF:A3:2D:01:59:32:E5:0F:C8:24:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/34352e3233312e3233322e302f32322d3234203d3e20323637323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:c2:ae:22:a8:f9:a9:85:0c:44:37:3c:43:20:55:c8:e9:6b:
         69:a3:93:48:7b:3c:b8:30:43:35:71:ef:d7:7d:2a:33:3b:0e:
         b0:0b:42:7d:da:ea:a1:62:ad:93:bd:f3:11:9e:6d:92:aa:97:
         82:e0:39:ee:61:7b:7b:fb:d5:60:b9:8b:49:bb:c7:96:a3:31:
         71:79:37:c9:98:f5:10:f5:83:10:50:5b:8f:17:d1:e2:6e:a5:
         c6:7f:a8:36:01:f0:88:2e:a9:8e:58:d6:31:15:b2:0a:d9:75:
         3a:05:c8:1f:83:40:e0:07:4e:82:35:68:aa:25:ab:75:1f:84:
         64:f8:12:2f:da:ad:56:a7:fe:ac:7d:11:f2:15:89:51:ac:f3:
         d4:b1:de:00:54:5c:2f:b6:71:c9:ab:d0:2f:c3:2c:1c:77:7e:
         1e:56:b7:2d:4e:9c:7c:dd:fa:23:6d:21:61:92:b9:46:6b:d3:
         c4:d6:e2:3b:0d:61:a5:e0:fb:38:24:e4:75:80:d6:b4:e2:5b:
         06:97:f7:4c:07:70:93:51:ca:fb:bd:5c:c1:00:af:98:7c:3b:
         bd:40:d9:96:eb:3e:3b:4e:17:6f:91:49:b4:1b:c5:d9:ad:20:
         53:60:3c:fa:9f:80:2e:04:d7:36:63:d6:d8:09:de:95:b6:4d:
         b7:a0:c4:f9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULCeY5PDKSJVi+oG2PsSI/dPYW44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBBN0I2NTQ1RTc1NDk5RDFGRUZBMzJEMDE1OTMyRTUw
RkM4MjRDNjAeFw0yMjA2MTQyMDEwMjBaFw0yMzA2MTMyMDE1MjBaMDMxMTAvBgNV
BAMTKDhENTYxMjFCQkU2ODYyMzNFMTJENjE4MUI1RjU3RDVBNTIyOTUwN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KN0+M9BIaWIss25Hn0uw1UG0
0+6vONUbmdZFmWEcd7kcCQBaLMD+wbfJ4+7ZaRwlQIpneP270D+ZOjFlqN3KedRu
yXItx6MtM6PVtZ0dOCeYyT/eiJWqljNoCb0uv5MYlcsba3yUuNrgWRRXXm4u5Bs8
Q3VSg3b2D6Q4V5kcRw5s/RTgMgL9NqFxCfTHCCI8AGqOXHt0+7Ym+xEMUvYXsatp
8sqZLgcUuQ8X5GrbV7MEKGjGl3zBWl8/qNeBoHkmWIkw80i1ucC3oO3pkHMHxyQb
Kpb/EgCnbxO9+0F4YsGfyOT8gl/TITRyRF+eeb+KOG23HfMwEgRv4goK2SyVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjVYSG75oYjPhLWGBtfV9WlIpUH4wHwYDVR0j
BBgwFoAU0Ke2VF51SZ0f76MtAVky5Q/IJMYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNYNE1uRnY2QVlzbU5TV3M2eDFRNGFHN2ZLbThFV2hLVW1WeGFlblp4
bjgvMC9EMEE3QjY1NDVFNzU0OTlEMUZFRkEzMkQwMTU5MzJFNTBGQzgyNEM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwQTdCNjU0NUU3NTQ5OUQx
RkVGQTMyRDAxNTkzMkU1MEZDODI0QzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VDWDRNbkZ2NkFZc21OU1dzNngxUTRhRzdmS204RVdoS1VtVnhhZW5aeG44LzAv
MzQzNTJlMzIzMzMxMmUzMjMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMjM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5+gwDQYJKoZIhvcNAQELBQADggEBAG7CriKo
+amFDEQ3PEMgVcjpa2mjk0h7PLgwQzVx79d9KjM7DrALQn3a6qFirZO98xGebZKq
l4LgOe5he3v71WC5i0m7x5ajMXF5N8mY9RD1gxBQW48X0eJupcZ/qDYB8IguqY5Y
1jEVsgrZdToFyB+DQOAHToI1aKolq3UfhGT4Ei/arVan/qx9EfIViVGs89Sx3gBU
XC+2ccmr0C/DLBx3fh5Wty1OnHzd+iNtIWGSuUZr08TW4jsNYaXg+zgk5HWA1rTi
WwaX90wHcJNRyvu9XMEAr5h8O71A2ZbrPjtOF2+RSbQbxdmtIFNgPPqfgC4E1zZj
1tgJ3pW2TbegxPk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:49:39 2025 by rpki-client