Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/34352e3137392e3231302e302f32342d3234203d3e20323639313136.roa
File:                     34352e3137392e3231302e302f32342d3234203d3e20323639313136.roa (raw, json)
Hash identifier:          k65m0VW1mKrioc6Yldo8CBLRH3pbV7KT4eO96FAdFgM=
Subject key identifier:   7C:E5:20:66:D0:C7:51:D9:17:1B:56:A7:8E:48:15:6C:B1:FD:0F:60
Certificate issuer:       /CN=9309FE707145E46FE4C086068E4C9D77076BEB2B
Certificate serial:       7C3A28923C9FAC3F194EBF997DF29B0A98C3AB47
Authority key identifier: 93:09:FE:70:71:45:E4:6F:E4:C0:86:06:8E:4C:9D:77:07:6B:EB:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/34352e3137392e3231302e302f32342d3234203d3e20323639313136.roa
Signing time:             Tue 05 Mar 2024 16:19:17 +0000
ROA not before:           Tue 05 Mar 2024 16:14:17 +0000
ROA not after:            Tue 04 Mar 2025 16:19:17 +0000
asID:                     269116
IP address blocks:        45.179.210.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3a:28:92:3c:9f:ac:3f:19:4e:bf:99:7d:f2:9b:0a:98:c3:ab:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9309FE707145E46FE4C086068E4C9D77076BEB2B
        Validity
            Not Before: Mar  5 16:14:17 2024 GMT
            Not After : Mar  4 16:19:17 2025 GMT
        Subject: CN=7CE52066D0C751D9171B56A78E48156CB1FD0F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bf:30:c5:c8:d4:dd:96:6e:ac:7d:6b:f9:a4:
                    f3:7b:92:4a:38:0f:fd:96:42:20:a6:42:50:a8:d0:
                    dd:68:bb:f5:7a:8c:4f:54:e4:50:4b:40:73:6a:67:
                    81:79:86:dc:39:f0:bd:4c:27:eb:2b:06:a6:81:8a:
                    b1:b9:80:60:86:47:15:6e:d1:80:d1:f2:1b:88:40:
                    55:67:b7:c8:e8:6f:73:b4:ab:ab:e8:5c:94:58:77:
                    b0:78:0e:ca:8f:37:81:50:25:13:05:bd:f4:0c:83:
                    e3:d2:16:34:f0:80:f7:74:fc:65:63:54:20:1d:b1:
                    0c:2d:8a:d6:5a:ec:71:24:56:03:d5:0a:da:7f:2f:
                    59:e3:58:ad:b1:59:44:04:a3:5f:8f:34:0f:17:7c:
                    d9:a2:b7:c1:42:a8:27:65:74:4d:1e:cf:27:90:25:
                    14:f3:69:84:2a:b1:4f:2e:3f:77:dd:54:db:69:42:
                    81:3b:1b:8f:9a:7e:7a:7c:6a:eb:04:c4:eb:dc:52:
                    76:f9:be:0c:e7:bf:c3:a5:7c:31:e3:33:bd:05:85:
                    34:1b:fe:1f:9c:75:ca:7c:cf:ae:99:6b:9e:90:e4:
                    15:f3:c3:50:f3:f9:76:ed:7c:fb:91:55:ea:c6:68:
                    88:a8:8e:87:18:67:39:3d:ff:5c:a9:90:91:c3:5f:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:20:66:D0:C7:51:D9:17:1B:56:A7:8E:48:15:6C:B1:FD:0F:60
            X509v3 Authority Key Identifier:
                keyid:93:09:FE:70:71:45:E4:6F:E4:C0:86:06:8E:4C:9D:77:07:6B:EB:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/34352e3137392e3231302e302f32342d3234203d3e20323639313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:5a:f5:3c:1b:3a:80:27:7a:7f:cf:87:1c:20:9f:a1:44:a4:
         5a:dc:fb:0a:96:f1:10:34:01:5b:5c:57:74:35:ec:e0:ca:42:
         77:22:a7:eb:14:2b:ee:9b:c4:1b:a4:71:4a:38:ad:84:ed:5f:
         7d:ec:aa:da:a8:d1:26:14:4d:a6:26:78:93:48:d4:d4:b2:e5:
         6e:64:11:0b:0d:e7:c2:33:e1:4c:cb:0f:03:64:23:17:1e:f3:
         98:83:1e:8f:6d:96:51:e1:04:b1:b1:b2:4f:9c:70:47:96:28:
         b8:30:6e:09:aa:0a:25:1a:18:2a:b8:5f:3e:9e:6c:a9:70:5f:
         97:9a:ab:92:81:49:47:7f:b4:c1:db:8a:54:3e:3a:68:d8:de:
         27:1c:a5:51:35:b1:7d:85:40:90:dd:8c:b8:68:47:47:0d:35:
         6c:9d:d8:e9:f2:e3:67:c7:a2:36:e2:3e:29:bb:31:f9:57:6c:
         5b:45:f3:36:ea:a0:ac:24:3b:2f:f9:21:57:6d:5c:cf:92:2b:
         de:e1:69:b7:af:1f:73:51:3c:38:ed:82:d9:17:61:50:58:9d:
         e8:7c:4c:0f:17:19:51:5f:2a:64:a6:33:31:0e:47:10:6e:0c:
         13:c4:11:0e:49:a2:3c:68:4d:66:0e:ca:6c:09:7d:6a:f1:cd:
         ba:d8:20:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfDookjyfrD8ZTr+ZffKbCpjDq0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwOUZFNzA3MTQ1RTQ2RkU0QzA4NjA2OEU0QzlENzcw
NzZCRUIyQjAeFw0yNDAzMDUxNjE0MTdaFw0yNTAzMDQxNjE5MTdaMDMxMTAvBgNV
BAMTKDdDRTUyMDY2RDBDNzUxRDkxNzFCNTZBNzhFNDgxNTZDQjFGRDBGNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDovzDFyNTdlm6sfWv5pPN7kko4
D/2WQiCmQlCo0N1ou/V6jE9U5FBLQHNqZ4F5htw58L1MJ+srBqaBirG5gGCGRxVu
0YDR8huIQFVnt8job3O0q6voXJRYd7B4DsqPN4FQJRMFvfQMg+PSFjTwgPd0/GVj
VCAdsQwtitZa7HEkVgPVCtp/L1njWK2xWUQEo1+PNA8XfNmit8FCqCdldE0ezyeQ
JRTzaYQqsU8uP3fdVNtpQoE7G4+afnp8ausExOvcUnb5vgznv8OlfDHjM70FhTQb
/h+cdcp8z66Za56Q5BXzw1Dz+XbtfPuRVerGaIiojocYZzk9/1ypkJHDXwiDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfOUgZtDHUdkXG1anjkgVbLH9D2AwHwYDVR0j
BBgwFoAUkwn+cHFF5G/kwIYGjkyddwdr6yswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0ttVkN4R0FaUFlUelNaa0pjMjZqSlh5MUVlYjR2bm12MlRibngyZzZU
RWIvMC85MzA5RkU3MDcxNDVFNDZGRTRDMDg2MDY4RTRDOUQ3NzA3NkJFQjJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkzMDlGRTcwNzE0NUU0NkZF
NEMwODYwNjhFNEM5RDc3MDc2QkVCMkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLbVZDeEdBWlBZVHpTWmtKYzI2akpYeTFFZWI0dm5tdjJUYm54Mmc2VEViLzAv
MzQzNTJlMzEzNzM5MmUzMjMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAts9IwDQYJKoZIhvcNAQELBQADggEBAMFa9Twb
OoAnen/Phxwgn6FEpFrc+wqW8RA0AVtcV3Q17ODKQncip+sUK+6bxBukcUo4rYTt
X33sqtqo0SYUTaYmeJNI1NSy5W5kEQsN58Iz4UzLDwNkIxce85iDHo9tllHhBLGx
sk+ccEeWKLgwbgmqCiUaGCq4Xz6ebKlwX5eaq5KBSUd/tMHbilQ+OmjY3iccpVE1
sX2FQJDdjLhoR0cNNWyd2Ony42fHojbiPim7MflXbFtF8zbqoKwkOy/5IVdtXM+S
K97habevH3NRPDjtgtkXYVBYneh8TA8XGVFfKmSmMzEORxBuDBPEEQ5JojxoTWYO
ymwJfWrxzbrYIE4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:26 2025 by rpki-client