Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/34352e3138332e37322e302f32322d3332203d3e20323639333231.roa
File:                     34352e3138332e37322e302f32322d3332203d3e20323639333231.roa (raw, json)
Hash identifier:          Tc1IDQmCEITyTdeQPI7r39c38ISBf/sDuPTMx7yquro=
Subject key identifier:   58:5E:57:69:A4:6D:86:F7:06:BD:51:B7:9C:E9:C0:B1:73:79:EB:F6
Certificate issuer:       /CN=841C90889EF2740616BDCD520B31777D63885648
Certificate serial:       50B5443F4CD86D5DEE600029ACBD3FF0D456D645
Authority key identifier: 84:1C:90:88:9E:F2:74:06:16:BD:CD:52:0B:31:77:7D:63:88:56:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/841C90889EF2740616BDCD520B31777D63885648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/34352e3138332e37322e302f32322d3332203d3e20323639333231.roa
Signing time:             Tue 07 Jan 2025 18:13:25 +0000
ROA not before:           Tue 07 Jan 2025 18:08:25 +0000
ROA not after:            Tue 06 Jan 2026 18:13:25 +0000
asID:                     269321
IP address blocks:        45.183.72.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b5:44:3f:4c:d8:6d:5d:ee:60:00:29:ac:bd:3f:f0:d4:56:d6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841C90889EF2740616BDCD520B31777D63885648
        Validity
            Not Before: Jan  7 18:08:25 2025 GMT
            Not After : Jan  6 18:13:25 2026 GMT
        Subject: CN=585E5769A46D86F706BD51B79CE9C0B17379EBF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:ab:84:ac:0f:81:1e:bb:cf:9e:e9:50:64:
                    7c:ea:d3:ad:5f:de:bf:09:67:b1:65:d2:d2:38:31:
                    e8:14:75:43:90:31:03:02:9c:64:88:fe:5f:53:19:
                    9b:fa:a1:2a:05:99:1c:0e:b2:ce:c3:14:9d:91:66:
                    35:03:b4:2e:dd:98:f9:cc:c8:56:e9:28:66:fd:ae:
                    06:b7:d4:62:f6:7d:1d:70:81:1e:9a:24:d4:ff:b4:
                    d8:a4:b7:fe:dc:ae:90:db:fa:17:71:3a:06:20:51:
                    6f:b8:09:12:45:c6:47:89:c5:36:4b:fc:11:40:0b:
                    6f:db:75:9c:c3:16:4f:a9:a1:70:94:ba:9f:98:99:
                    cb:7d:ee:a1:20:32:c1:e3:6d:3b:81:25:91:24:80:
                    57:40:6a:8a:36:fb:3b:77:54:44:56:ba:d9:84:2f:
                    ee:70:71:18:75:2e:fc:a9:40:dd:d4:14:44:6f:c0:
                    be:eb:f8:56:76:e5:b6:c6:cc:c9:98:c5:73:50:14:
                    e3:ca:b1:b8:08:11:4f:9d:d6:bf:4a:dd:59:a3:5e:
                    06:cd:33:e3:18:02:9e:23:ec:a2:f3:d2:f8:ed:b7:
                    a6:f1:32:5c:c8:b6:f1:69:2a:e4:1b:67:51:01:ff:
                    73:7a:14:24:8e:78:74:67:da:1b:7a:94:a5:ac:19:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5E:57:69:A4:6D:86:F7:06:BD:51:B7:9C:E9:C0:B1:73:79:EB:F6
            X509v3 Authority Key Identifier:
                keyid:84:1C:90:88:9E:F2:74:06:16:BD:CD:52:0B:31:77:7D:63:88:56:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/841C90889EF2740616BDCD520B31777D63885648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/841C90889EF2740616BDCD520B31777D63885648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/34352e3138332e37322e302f32322d3332203d3e20323639333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:eb:3e:af:ce:78:3a:12:8a:64:05:c7:6a:22:62:98:f9:96:
         28:b6:75:f9:a5:e0:41:ee:e6:95:92:29:4c:97:63:e4:d2:2e:
         eb:fe:6e:e5:90:94:92:40:d2:4f:fa:c6:08:d7:9a:6e:46:ab:
         b8:06:d4:25:03:6e:b2:bc:66:92:49:4a:85:47:3c:5f:7d:54:
         5e:de:93:5f:c4:15:f0:8e:f3:fb:e7:44:20:82:2d:4a:11:d4:
         87:56:db:8f:bc:db:1c:e4:11:21:ca:2f:6d:5b:93:44:fd:ae:
         f4:b7:cb:8d:57:f5:c4:ac:91:ae:b8:2a:00:b5:3c:10:d6:4f:
         0d:27:e7:41:c5:54:4c:fd:0a:94:41:83:4d:04:8c:f5:ab:34:
         3a:97:67:3e:3d:c4:2d:6c:57:8c:79:d8:2e:96:2b:a7:eb:f2:
         70:58:37:2d:0c:64:e2:d1:58:83:37:a4:d4:30:a1:11:f8:5c:
         4f:03:b3:04:62:e0:ff:01:96:d8:c1:79:61:b6:a0:c8:32:1b:
         b4:30:fa:24:39:36:90:e3:e5:a3:6d:04:2e:26:35:de:bb:dd:
         83:ac:80:b9:4f:63:6f:4b:88:36:59:c6:b1:c6:13:c3:28:43:
         17:24:43:08:91:0f:78:2f:a9:30:95:d1:23:ee:92:11:58:66:
         0d:f5:59:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUULVEP0zYbV3uYAAprL0/8NRW1kUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxQzkwODg5RUYyNzQwNjE2QkRDRDUyMEIzMTc3N0Q2
Mzg4NTY0ODAeFw0yNTAxMDcxODA4MjVaFw0yNjAxMDYxODEzMjVaMDMxMTAvBgNV
BAMTKDU4NUU1NzY5QTQ2RDg2RjcwNkJENTFCNzlDRTlDMEIxNzM3OUVCRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCav6uErA+BHrvPnulQZHzq061f
3r8JZ7Fl0tI4MegUdUOQMQMCnGSI/l9TGZv6oSoFmRwOss7DFJ2RZjUDtC7dmPnM
yFbpKGb9rga31GL2fR1wgR6aJNT/tNikt/7crpDb+hdxOgYgUW+4CRJFxkeJxTZL
/BFAC2/bdZzDFk+poXCUup+Ymct97qEgMsHjbTuBJZEkgFdAaoo2+zt3VERWutmE
L+5wcRh1LvypQN3UFERvwL7r+FZ25bbGzMmYxXNQFOPKsbgIEU+d1r9K3VmjXgbN
M+MYAp4j7KLz0vjtt6bxMlzItvFpKuQbZ1EB/3N6FCSOeHRn2ht6lKWsGc3JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWF5XaaRthvcGvVG3nOnAsXN56/YwHwYDVR0j
BBgwFoAUhByQiJ7ydAYWvc1SCzF3fWOIVkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1lzcURvMnd4eHh2alRKR3VkQXFoSzFOM05ZaUNaR3NlblVtTXhLZG1z
dlovMC84NDFDOTA4ODlFRjI3NDA2MTZCRENENTIwQjMxNzc3RDYzODg1NjQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MUM5MDg4OUVGMjc0MDYx
NkJEQ0Q1MjBCMzE3NzdENjM4ODU2NDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dZc3FEbzJ3eHh4dmpUSkd1ZEFxaEsxTjNOWWlDWkdzZW5VbU14S2Rtc3ZaLzAv
MzQzNTJlMzEzODMzMmUzNzMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzMzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbdIMA0GCSqGSIb3DQEBCwUAA4IBAQBy6z6vzng6
EopkBcdqImKY+ZYotnX5peBB7uaVkilMl2Pk0i7r/m7lkJSSQNJP+sYI15puRqu4
BtQlA26yvGaSSUqFRzxffVRe3pNfxBXwjvP750Qggi1KEdSHVtuPvNsc5BEhyi9t
W5NE/a70t8uNV/XErJGuuCoAtTwQ1k8NJ+dBxVRM/QqUQYNNBIz1qzQ6l2c+PcQt
bFeMedguliun6/JwWDctDGTi0ViDN6TUMKER+FxPA7MEYuD/AZbYwXlhtqDIMhu0
MPokOTaQ4+WjbQQuJjXeu92DrIC5T2NvS4g2WcaxxhPDKEMXJEMIkQ94L6kwldEj
7pIRWGYN9Vl4
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:05:50 2025 by rpki-client