Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3138382e302f32322d3332203d3e20323639333437.roa
File:                     34352e3138342e3138382e302f32322d3332203d3e20323639333437.roa (raw, json)
Hash identifier:          4ImmHCSd1s8n9HPa3yXySLNlqA9ftiUu0M6RDyD9PSw=
Subject key identifier:   25:FD:E6:E8:74:57:D1:F9:C6:3B:D2:23:C0:FE:DF:5B:7C:5A:E3:D5
Certificate issuer:       /CN=6DD53C4867079833703A1EDF2B50AADA5DE39710
Certificate serial:       7B8D2721834F0966B53DE6B248A2F3788225CA94
Authority key identifier: 6D:D5:3C:48:67:07:98:33:70:3A:1E:DF:2B:50:AA:DA:5D:E3:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3138382e302f32322d3332203d3e20323639333437.roa
Signing time:             Sat 22 Feb 2025 19:12:43 +0000
ROA not before:           Sat 22 Feb 2025 19:07:43 +0000
ROA not after:            Sat 21 Feb 2026 19:12:43 +0000
asID:                     269347
IP address blocks:        45.184.188.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8d:27:21:83:4f:09:66:b5:3d:e6:b2:48:a2:f3:78:82:25:ca:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD53C4867079833703A1EDF2B50AADA5DE39710
        Validity
            Not Before: Feb 22 19:07:43 2025 GMT
            Not After : Feb 21 19:12:43 2026 GMT
        Subject: CN=25FDE6E87457D1F9C63BD223C0FEDF5B7C5AE3D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:37:0c:5c:a0:ff:02:b9:b3:2e:35:26:48:
                    19:71:45:18:a5:45:a0:70:81:cf:53:b7:50:fc:aa:
                    82:a0:90:30:9f:e6:81:21:80:5e:83:4c:c1:bc:e0:
                    62:71:8e:24:2e:f8:c1:c2:57:70:2d:a2:de:9c:4e:
                    ef:d2:e4:61:b0:c4:ee:7b:ea:b6:a5:3a:a0:8d:b9:
                    8c:06:e2:a5:c3:1c:6c:9b:ce:68:e3:2d:24:ea:c2:
                    5c:02:d0:d4:e6:5b:64:cb:de:09:cf:f3:c5:46:ee:
                    5e:e9:26:9d:f2:fc:fc:a4:1f:58:49:1d:1c:4d:c3:
                    00:20:9a:d5:d2:18:2a:8e:2b:70:c8:01:b0:bd:7d:
                    d9:ce:2c:f5:58:60:17:af:ce:23:90:94:74:be:ce:
                    b3:01:65:92:d7:b1:13:da:3a:5e:40:2f:8d:36:f1:
                    18:46:8f:88:66:e4:99:14:b9:e5:8f:3f:02:1c:3b:
                    24:79:5a:58:ce:d6:4a:a6:18:6e:50:51:6f:33:38:
                    de:e5:17:48:31:ab:96:15:c6:38:89:40:13:24:80:
                    79:f3:3a:2f:86:9a:b9:9c:44:78:c3:86:cf:53:ee:
                    78:84:bc:b2:35:6a:44:2c:c0:91:74:34:41:1a:d7:
                    22:88:8b:39:21:e7:65:75:4d:fa:25:ac:fa:54:e2:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FD:E6:E8:74:57:D1:F9:C6:3B:D2:23:C0:FE:DF:5B:7C:5A:E3:D5
            X509v3 Authority Key Identifier:
                keyid:6D:D5:3C:48:67:07:98:33:70:3A:1E:DF:2B:50:AA:DA:5D:E3:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/6DD53C4867079833703A1EDF2B50AADA5DE39710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3138382e302f32322d3332203d3e20323639333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:65:d7:7d:32:64:0b:54:48:11:93:02:c2:2d:13:58:af:4f:
         a0:f6:d5:dd:6c:00:bc:b3:32:c1:89:ed:22:b5:07:d5:52:7f:
         b5:dd:9b:a8:af:c3:f6:5b:a1:cc:94:42:2e:d6:d2:1d:1d:6b:
         34:9b:cf:99:c1:eb:95:3a:2a:60:27:fc:d8:ec:e0:fc:dc:5d:
         a1:32:ef:0e:37:51:56:43:d7:64:c0:46:c7:83:f2:15:10:ec:
         2f:a0:a4:0c:a6:7a:1b:d8:a8:01:74:9c:01:85:4b:6b:d6:9c:
         88:fa:4a:88:61:26:5f:e2:ad:02:ff:32:27:1b:04:02:9d:d1:
         a2:14:8a:b7:14:f6:28:0c:63:0d:b7:f5:cb:8d:24:ab:2d:a5:
         2e:7a:25:08:8d:aa:d2:79:bc:d5:97:ac:14:ff:37:28:26:17:
         46:af:5c:e4:b7:e9:4c:9c:82:d5:24:ff:8e:b8:5d:69:9c:08:
         d6:36:e0:44:1b:ee:95:dc:4d:b7:ea:a5:13:4b:00:fd:63:d9:
         22:5a:7f:6a:50:d3:af:27:1e:7d:22:8c:f2:8c:46:f9:66:e0:
         c3:0c:a9:27:c1:d4:24:48:7d:e4:9b:be:03:1b:6d:83:3d:a4:
         27:cd:03:63:a6:3c:d7:0e:71:e3:7b:2b:3d:b3:33:08:58:92:
         97:c0:3d:f9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe40nIYNPCWa1PeaySKLzeIIlypQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRENTNDNDg2NzA3OTgzMzcwM0ExRURGMkI1MEFBREE1
REUzOTcxMDAeFw0yNTAyMjIxOTA3NDNaFw0yNjAyMjExOTEyNDNaMDMxMTAvBgNV
BAMTKDI1RkRFNkU4NzQ1N0QxRjlDNjNCRDIyM0MwRkVERjVCN0M1QUUzRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFyTcMXKD/ArmzLjUmSBlxRRil
RaBwgc9Tt1D8qoKgkDCf5oEhgF6DTMG84GJxjiQu+MHCV3Atot6cTu/S5GGwxO57
6ralOqCNuYwG4qXDHGybzmjjLSTqwlwC0NTmW2TL3gnP88VG7l7pJp3y/PykH1hJ
HRxNwwAgmtXSGCqOK3DIAbC9fdnOLPVYYBevziOQlHS+zrMBZZLXsRPaOl5AL402
8RhGj4hm5JkUueWPPwIcOyR5WljO1kqmGG5QUW8zON7lF0gxq5YVxjiJQBMkgHnz
Oi+GmrmcRHjDhs9T7niEvLI1akQswJF0NEEa1yKIizkh52V1TfolrPpU4pDDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJf3m6HRX0fnGO9IjwP7fW3xa49UwHwYDVR0j
BBgwFoAUbdU8SGcHmDNwOh7fK1Cq2l3jlxAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmFoZWNMbk5OcmlYQ1RmSmlnM3pvQXppN0JyZ01ubVBMWjY4NDU0a2kz
RHEvMC82REQ1M0M0ODY3MDc5ODMzNzAzQTFFREYyQjUwQUFEQTVERTM5NzEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZERDUzQzQ4NjcwNzk4MzM3
MDNBMUVERjJCNTBBQURBNURFMzk3MTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZhaGVjTG5OTnJpWENUZkppZzN6b0F6aTdCcmdNbm1QTFo2ODQ1NGtpM0RxLzAv
MzQzNTJlMzEzODM0MmUzMTM4MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuLwwDQYJKoZIhvcNAQELBQADggEBAHhl130y
ZAtUSBGTAsItE1ivT6D21d1sALyzMsGJ7SK1B9VSf7Xdm6ivw/ZbocyUQi7W0h0d
azSbz5nB65U6KmAn/Njs4PzcXaEy7w43UVZD12TARseD8hUQ7C+gpAymehvYqAF0
nAGFS2vWnIj6SohhJl/irQL/MicbBAKd0aIUircU9igMYw239cuNJKstpS56JQiN
qtJ5vNWXrBT/NygmF0avXOS36UycgtUk/464XWmcCNY24EQb7pXcTbfqpRNLAP1j
2SJaf2pQ068nHn0ijPKMRvlm4MMMqSfB1CRIfeSbvgMbbYM9pCfNA2OmPNcOceN7
Kz2zMwhYkpfAPfk=
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:14:14 2025 by rpki-client