Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32332d3233203d3e20323638303830.roa
File:                     34352e3136392e342e302f32332d3233203d3e20323638303830.roa (raw, json)
Hash identifier:          b6N7mTQ3XNznHhxjn2S2H+76nTzJW3R7ARDx4jMHRX4=
Subject key identifier:   0F:DB:F3:F0:83:F0:F8:BC:C9:EF:7F:0A:9F:12:C8:D2:FD:FD:F2:5A
Certificate issuer:       /CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Certificate serial:       7F7DF3B6C4F49F98DE54502AEB8DF815E5397799
Authority key identifier: 84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32332d3233203d3e20323638303830.roa
Signing time:             Wed 19 Feb 2025 11:44:00 +0000
ROA not before:           Wed 19 Feb 2025 11:39:00 +0000
ROA not after:            Wed 18 Feb 2026 11:44:00 +0000
asID:                     268080
IP address blocks:        45.169.4.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7d:f3:b6:c4:f4:9f:98:de:54:50:2a:eb:8d:f8:15:e5:39:77:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
        Validity
            Not Before: Feb 19 11:39:00 2025 GMT
            Not After : Feb 18 11:44:00 2026 GMT
        Subject: CN=0FDBF3F083F0F8BCC9EF7F0A9F12C8D2FDFDF25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:55:33:da:a0:b3:5a:67:f8:58:57:bd:e2:
                    d6:f8:a3:c2:77:8f:f8:47:e7:db:86:e9:26:f2:54:
                    11:a1:f1:9c:b1:e8:c5:29:f3:f3:c1:5b:92:e2:0a:
                    94:9f:f7:61:29:a8:2d:fd:be:17:40:18:0a:f6:34:
                    f3:14:76:12:c4:6a:16:82:cd:0d:6f:eb:42:e6:5e:
                    00:47:98:04:2b:6f:04:54:f8:a0:ae:b5:7c:a2:1c:
                    4a:8a:f2:df:73:9c:79:c8:37:7a:63:44:cb:22:9c:
                    72:c3:68:18:fb:55:fe:29:d6:7e:9b:64:97:16:68:
                    1d:41:1a:66:d7:9f:d8:5f:fb:a0:0a:4b:c6:19:c6:
                    dc:af:6c:07:de:df:23:2b:dd:59:f1:76:79:c7:82:
                    8f:28:9a:d5:ea:40:f5:98:5b:13:03:bd:ee:96:93:
                    2f:72:42:ce:27:f0:80:5d:d2:ec:93:43:a8:92:bf:
                    86:62:65:eb:5f:56:7a:cd:88:4a:b9:89:43:0a:19:
                    87:7f:65:42:9b:82:aa:f8:e5:b9:b3:6f:03:56:12:
                    1e:92:6b:d8:e7:73:a8:f8:d0:7c:ec:49:a4:bf:c1:
                    46:03:01:93:41:28:1a:41:56:19:df:4e:a6:5d:4a:
                    7a:c5:5e:93:18:82:a7:36:87:4e:ce:c7:86:3c:bc:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DB:F3:F0:83:F0:F8:BC:C9:EF:7F:0A:9F:12:C8:D2:FD:FD:F2:5A
            X509v3 Authority Key Identifier:
                keyid:84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32332d3233203d3e20323638303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:25:5d:94:10:21:2c:bb:0f:9f:60:bd:69:a9:b7:47:a8:d4:
         06:b6:bd:e4:f2:44:74:c5:67:38:d8:ba:ab:ce:43:1e:1c:24:
         9e:ff:dd:1b:ec:a0:2e:45:1f:89:d1:8a:9b:61:68:d0:a4:ad:
         49:5b:f8:70:28:2a:2e:4d:ad:ae:79:eb:59:60:ce:65:fc:74:
         dc:87:a6:c8:ac:50:6e:12:3e:b3:52:3a:78:eb:a8:0b:a8:8f:
         f7:43:b1:e4:f7:12:5a:34:bc:37:83:c5:58:39:99:00:44:8c:
         7a:32:7e:27:50:ed:12:55:3b:76:7b:95:a8:c2:91:23:ac:83:
         1c:de:27:6c:7d:1b:fe:9e:ef:fc:b1:04:ed:b4:40:73:fa:03:
         c6:f2:4f:32:6d:03:f2:0b:31:92:d1:dc:f9:d0:c3:a3:67:c6:
         f3:5f:51:31:9a:8c:70:e6:4d:b1:99:84:33:70:92:3c:0d:06:
         63:3a:00:2b:5e:a0:e7:42:7d:21:84:d2:0f:d7:ea:c5:34:6d:
         78:e4:3e:d6:43:b2:f9:2f:17:44:ba:1d:66:6d:4e:86:55:9b:
         04:c7:8f:2a:63:45:bc:c9:10:e4:27:b2:6a:68:9f:79:3f:30:
         30:72:ef:ba:3c:b6:ed:4a:1e:9c:65:d0:27:8b:f0:ef:24:9f:
         8e:92:4d:99
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUf33ztsT0n5jeVFAq6434FeU5d5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ3MkVENTRCNzg4MTYyQTFDODYyNEI5NERCMjdENzVG
OTNGQzFFRTAeFw0yNTAyMTkxMTM5MDBaFw0yNjAyMTgxMTQ0MDBaMDMxMTAvBgNV
BAMTKDBGREJGM0YwODNGMEY4QkNDOUVGN0YwQTlGMTJDOEQyRkRGREYyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJVUz2qCzWmf4WFe94tb4o8J3
j/hH59uG6SbyVBGh8Zyx6MUp8/PBW5LiCpSf92EpqC39vhdAGAr2NPMUdhLEahaC
zQ1v60LmXgBHmAQrbwRU+KCutXyiHEqK8t9znHnIN3pjRMsinHLDaBj7Vf4p1n6b
ZJcWaB1BGmbXn9hf+6AKS8YZxtyvbAfe3yMr3VnxdnnHgo8omtXqQPWYWxMDve6W
ky9yQs4n8IBd0uyTQ6iSv4ZiZetfVnrNiEq5iUMKGYd/ZUKbgqr45bmzbwNWEh6S
a9jnc6j40HzsSaS/wUYDAZNBKBpBVhnfTqZdSnrFXpMYgqc2h07Ox4Y8vNZRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUD9vz8IPw+LzJ738KnxLI0v398lowHwYDVR0j
BBgwFoAUhHLtVLeIFiochiS5TbJ9dfk/we4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXo2dUpuQTJCampKQkYyUFZOVkZrSnlWRG9pVmIxU05hR3pHeG5iWmRX
ODcvMC84NDcyRUQ1NEI3ODgxNjJBMUM4NjI0Qjk0REIyN0Q3NUY5M0ZDMUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0NzJFRDU0Qjc4ODE2MkEx
Qzg2MjRCOTREQjI3RDc1RjkzRkMxRUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V6NnVKbkEyQmpqSkJGMlBWTlZGa0p5VkRvaVZiMVNOYUd6R3huYlpkVzg3LzAv
MzQzNTJlMzEzNjM5MmUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzODMw
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS2pBDANBgkqhkiG9w0BAQsFAAOCAQEAjyVdlBAhLLsP
n2C9aam3R6jUBra95PJEdMVnONi6q85DHhwknv/dG+ygLkUfidGKm2Fo0KStSVv4
cCgqLk2trnnrWWDOZfx03IemyKxQbhI+s1I6eOuoC6iP90Ox5PcSWjS8N4PFWDmZ
AESMejJ+J1DtElU7dnuVqMKRI6yDHN4nbH0b/p7v/LEE7bRAc/oDxvJPMm0D8gsx
ktHc+dDDo2fG819RMZqMcOZNsZmEM3CSPA0GYzoAK16g50J9IYTSD9fqxTRteOQ+
1kOy+S8XRLodZm1OhlWbBMePKmNFvMkQ5CeyamifeT8wMHLvujy27UoenGXQJ4vw
7ySfjpJNmQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:36:05 2025 by rpki-client