Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/34352e3233362e36362e302f32342d3234203d3e20323638323234.roa
File:                     34352e3233362e36362e302f32342d3234203d3e20323638323234.roa (raw, json)
Hash identifier:          rv9W/eN5hGIy3GMhoDy1BJv4QCgZ3B99SkDyCmpD3C0=
Subject key identifier:   CB:98:73:9B:87:36:B4:DE:59:B9:6A:53:E3:57:E7:4A:80:1D:BD:30
Certificate issuer:       /CN=A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E
Certificate serial:       413050DEB87848281A22DA36C0E9B7D08855AB67
Authority key identifier: A1:6A:1A:DA:A6:EB:B4:CA:76:94:34:68:F8:AB:79:D0:3B:C7:AE:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/34352e3233362e36362e302f32342d3234203d3e20323638323234.roa
Signing time:             Thu 13 Feb 2025 19:09:48 +0000
ROA not before:           Thu 13 Feb 2025 19:04:48 +0000
ROA not after:            Thu 12 Feb 2026 19:09:48 +0000
asID:                     268224
IP address blocks:        45.236.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:30:50:de:b8:78:48:28:1a:22:da:36:c0:e9:b7:d0:88:55:ab:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E
        Validity
            Not Before: Feb 13 19:04:48 2025 GMT
            Not After : Feb 12 19:09:48 2026 GMT
        Subject: CN=CB98739B8736B4DE59B96A53E357E74A801DBD30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:16:2a:4b:ca:64:48:57:8d:e6:6a:fe:b9:
                    c8:b9:e8:ac:51:8e:c4:b7:68:7e:7b:38:e1:ff:02:
                    42:3c:f5:23:27:4e:09:41:4e:5b:5b:1a:63:01:f3:
                    4e:b6:a0:63:d1:24:45:31:d1:ad:a2:72:c8:69:f5:
                    82:4e:fa:fa:bb:a3:2a:87:d7:c5:c1:b1:40:6c:0a:
                    a8:07:3e:cb:10:73:46:ec:78:5a:62:f2:68:3b:a6:
                    65:93:92:bc:bc:a0:cd:aa:3d:c8:1a:19:57:e1:d3:
                    ab:44:fb:eb:e4:ca:d2:fe:ef:30:59:d1:67:77:12:
                    65:f6:7e:78:a1:65:d9:4b:30:f5:11:50:1c:5a:2b:
                    96:a9:ce:5a:a1:89:e0:b5:0f:29:5f:03:db:46:cf:
                    bf:17:73:8e:82:db:de:bc:a8:b6:cd:d3:ab:0c:46:
                    f0:1c:4b:a7:f2:3d:3f:32:2d:7e:14:d6:08:89:31:
                    98:e6:29:6f:e5:7e:13:af:88:60:f0:02:2b:97:84:
                    4b:59:68:c0:be:27:3f:53:95:49:30:c1:7d:29:3c:
                    a8:40:98:be:58:16:2b:31:8f:5c:00:03:08:f8:d5:
                    75:f7:c9:cf:3b:be:47:42:a2:cd:15:c7:5e:28:b0:
                    f8:83:2a:7a:d2:0d:96:03:47:c3:fa:a0:39:38:96:
                    ad:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:98:73:9B:87:36:B4:DE:59:B9:6A:53:E3:57:E7:4A:80:1D:BD:30
            X509v3 Authority Key Identifier:
                keyid:A1:6A:1A:DA:A6:EB:B4:CA:76:94:34:68:F8:AB:79:D0:3B:C7:AE:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/34352e3233362e36362e302f32342d3234203d3e20323638323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:1d:99:ce:ce:60:20:58:e0:f6:99:fc:f7:ca:f4:ff:a6:2f:
         92:3f:62:95:cd:3a:28:1c:41:14:de:80:d6:d0:41:a4:bb:4f:
         5c:c3:07:4e:aa:be:4f:d4:d2:f9:e6:9e:8d:36:c7:b1:cc:36:
         8a:87:09:ac:d0:c3:b2:e5:ad:c1:13:fa:c9:d5:1c:dd:58:2f:
         2a:50:83:87:0d:5b:e7:2d:f7:5f:49:65:19:b2:6b:83:08:53:
         9d:6d:33:56:0a:71:03:64:c7:30:1f:2c:19:2b:2d:9f:82:e3:
         7c:3f:73:a7:3e:ce:16:6a:33:63:00:fb:58:9f:8a:1f:4d:b5:
         51:f5:43:c9:94:ba:4d:c8:db:21:31:d2:e8:7e:49:6a:e5:d0:
         24:ee:16:f0:9e:6c:d2:fc:09:6a:42:51:5d:8a:32:41:84:cd:
         5c:d2:ed:7b:84:3f:49:5a:bb:03:bc:5a:42:92:00:e1:1f:2a:
         e0:19:41:f4:45:21:38:ae:f4:46:25:01:de:93:91:43:f9:f1:
         56:1b:d3:e3:6e:dc:82:91:ee:7e:0b:7c:25:67:93:69:0c:79:
         cc:3e:13:42:92:15:2d:71:5f:b7:91:d4:92:e4:cb:1c:4c:34:
         25:d3:2c:d3:48:c5:9d:87:b3:12:76:e7:f4:db:3c:df:f4:ff:
         9c:9c:83:64
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQTBQ3rh4SCgaIto2wOm30IhVq2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2QTFBREFBNkVCQjRDQTc2OTQzNDY4RjhBQjc5RDAz
QkM3QUU0RTAeFw0yNTAyMTMxOTA0NDhaFw0yNjAyMTIxOTA5NDhaMDMxMTAvBgNV
BAMTKENCOTg3MzlCODczNkI0REU1OUI5NkE1M0UzNTdFNzRBODAxREJEMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulBYqS8pkSFeN5mr+uci56KxR
jsS3aH57OOH/AkI89SMnTglBTltbGmMB8062oGPRJEUx0a2icshp9YJO+vq7oyqH
18XBsUBsCqgHPssQc0bseFpi8mg7pmWTkry8oM2qPcgaGVfh06tE++vkytL+7zBZ
0Wd3EmX2fnihZdlLMPURUBxaK5apzlqhieC1DylfA9tGz78Xc46C2968qLbN06sM
RvAcS6fyPT8yLX4U1giJMZjmKW/lfhOviGDwAiuXhEtZaMC+Jz9TlUkwwX0pPKhA
mL5YFisxj1wAAwj41XX3yc87vkdCos0Vx14osPiDKnrSDZYDR8P6oDk4lq3fAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUy5hzm4c2tN5ZuWpT41fnSoAdvTAwHwYDVR0j
BBgwFoAUoWoa2qbrtMp2lDRo+Kt50DvHrk4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnluQVZYTnJSODVmS0JiNGhKWWNaSlBLOFB5SGR4V3JzbW9GUUFZYkxH
REsvMC9BMTZBMUFEQUE2RUJCNENBNzY5NDM0NjhGOEFCNzlEMDNCQzdBRTRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExNkExQURBQTZFQkI0Q0E3
Njk0MzQ2OEY4QUI3OUQwM0JDN0FFNEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z5bkFWWE5yUjg1ZktCYjRoSlljWkpQSzhQeUhkeFdyc21vRlFBWWJMR0RLLzAv
MzQzNTJlMzIzMzM2MmUzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzIzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALexCMA0GCSqGSIb3DQEBCwUAA4IBAQAwHZnOzmAg
WOD2mfz3yvT/pi+SP2KVzTooHEEU3oDW0EGku09cwwdOqr5P1NL55p6NNsexzDaK
hwms0MOy5a3BE/rJ1RzdWC8qUIOHDVvnLfdfSWUZsmuDCFOdbTNWCnEDZMcwHywZ
Ky2fguN8P3OnPs4WajNjAPtYn4ofTbVR9UPJlLpNyNshMdLofklq5dAk7hbwnmzS
/AlqQlFdijJBhM1c0u17hD9JWrsDvFpCkgDhHyrgGUH0RSE4rvRGJQHek5FD+fFW
G9PjbtyCke5+C3wlZ5NpDHnMPhNCkhUtcV+3kdSS5MscTDQl0yzTSMWdh7MSduf0
2zzf9P+cnINk
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:30 2025 by rpki-client