Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/34352e3233392e3232342e302f32322d3232203d3e20323638333836.roa
File:                     34352e3233392e3232342e302f32322d3232203d3e20323638333836.roa (raw, json)
Hash identifier:          BdEDP4v6WOaq6eHE+oNwQkE7X7hR7hWr/zjGr10GSrw=
Subject key identifier:   B9:22:5A:A0:9C:41:62:60:F3:AD:AC:1D:13:6A:33:98:F5:E3:AE:39
Certificate issuer:       /CN=B09DCED142BB7E79D10526DD0A21AC6C61E65A9E
Certificate serial:       7F715443EC1A594990EDB762A3CC2B231E6E6B55
Authority key identifier: B0:9D:CE:D1:42:BB:7E:79:D1:05:26:DD:0A:21:AC:6C:61:E6:5A:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/34352e3233392e3232342e302f32322d3232203d3e20323638333836.roa
Signing time:             Thu 25 Apr 2024 19:58:31 +0000
ROA not before:           Thu 25 Apr 2024 19:53:31 +0000
ROA not after:            Thu 24 Apr 2025 19:58:31 +0000
asID:                     268386
IP address blocks:        45.239.224.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:71:54:43:ec:1a:59:49:90:ed:b7:62:a3:cc:2b:23:1e:6e:6b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09DCED142BB7E79D10526DD0A21AC6C61E65A9E
        Validity
            Not Before: Apr 25 19:53:31 2024 GMT
            Not After : Apr 24 19:58:31 2025 GMT
        Subject: CN=B9225AA09C416260F3ADAC1D136A3398F5E3AE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:1f:1e:7a:c4:f2:7d:f3:9c:9e:89:0c:0c:
                    d2:9a:80:0c:8d:06:d4:87:3b:fd:6d:22:34:37:19:
                    2c:9a:de:1f:aa:70:1a:50:46:a9:df:aa:03:0a:9b:
                    c4:40:29:55:ee:76:7e:4f:04:14:be:7c:2b:59:2b:
                    18:16:a0:92:e2:15:7c:9c:1e:a7:74:57:03:4c:4c:
                    86:70:78:47:f0:3f:6b:67:b8:5a:10:3f:d1:56:10:
                    03:5a:23:e4:8b:48:ba:a9:8b:f8:9c:f7:72:cc:c2:
                    4d:d7:90:15:d8:63:e1:fd:0e:2b:6f:17:0a:78:38:
                    07:94:a7:b8:fe:53:43:d4:69:4f:f5:0b:e4:b9:ff:
                    b9:ec:c8:0b:19:c5:44:7e:44:53:6d:06:b9:2b:a1:
                    8c:78:77:13:3d:b4:4a:3b:76:86:91:0c:e0:b9:29:
                    42:a1:e8:82:03:38:de:51:a6:83:ab:15:58:58:61:
                    fb:aa:86:71:31:75:2b:ce:50:73:29:e5:ea:95:20:
                    15:a4:6f:de:9a:61:96:84:f2:97:24:2f:e6:d3:1e:
                    45:7f:64:bd:43:bb:ae:ed:f6:fe:6f:eb:32:05:a7:
                    35:ae:3a:df:3b:5d:28:f7:3d:49:74:6b:35:d2:04:
                    45:dd:1f:cb:66:87:cf:49:59:59:b2:28:d3:df:c8:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:22:5A:A0:9C:41:62:60:F3:AD:AC:1D:13:6A:33:98:F5:E3:AE:39
            X509v3 Authority Key Identifier:
                keyid:B0:9D:CE:D1:42:BB:7E:79:D1:05:26:DD:0A:21:AC:6C:61:E6:5A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09DCED142BB7E79D10526DD0A21AC6C61E65A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiTpvpYDQYjH6HeWaZDHvrVLTSRXPcyu5GmtEn1y1Hd/0/34352e3233392e3232342e302f32322d3232203d3e20323638333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:2b:02:e5:9d:97:23:92:6e:bd:7a:e5:f9:96:83:76:6d:4a:
         fe:55:d2:28:d2:41:c7:84:79:bd:e2:cb:47:97:5c:9d:4a:9e:
         9a:67:ea:df:a9:69:a0:cf:51:69:df:41:e6:2a:15:af:ca:fb:
         2e:8e:2e:91:a7:e8:26:7c:fd:54:3f:41:91:7d:f5:21:09:53:
         95:99:4f:18:09:07:a1:cf:45:6e:b7:fd:07:ec:70:1d:9d:df:
         64:64:94:21:78:7f:83:25:86:3f:83:ec:21:32:b4:d8:14:9e:
         45:01:04:2a:f2:76:8b:c3:3c:3d:db:30:0f:da:cb:66:ce:e5:
         c6:35:ff:7d:93:3b:24:24:5a:2b:27:1a:4f:7c:6b:c1:df:d5:
         42:0d:d8:27:00:5e:b5:6a:b3:27:6e:36:f6:2e:2d:49:e9:77:
         bd:f9:55:f1:d1:7f:f8:00:46:79:67:d4:91:2d:f3:1a:e4:b0:
         ae:99:34:2d:da:fa:da:cd:c6:04:a7:38:72:26:b1:ec:bd:3e:
         b7:22:d9:3b:80:0c:cf:7b:c3:84:07:32:71:61:2f:27:0e:23:
         6f:f0:0a:f9:c8:11:2c:93:05:88:2a:34:e8:53:ca:f8:5a:a8:
         9f:e6:31:e2:ae:bd:cc:ed:33:20:91:46:aa:b9:d2:49:1f:d1:
         3b:4f:d5:7c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf3FUQ+waWUmQ7bdio8wrIx5ua1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA5RENFRDE0MkJCN0U3OUQxMDUyNkREMEEyMUFDNkM2
MUU2NUE5RTAeFw0yNDA0MjUxOTUzMzFaFw0yNTA0MjQxOTU4MzFaMDMxMTAvBgNV
BAMTKEI5MjI1QUEwOUM0MTYyNjBGM0FEQUMxRDEzNkEzMzk4RjVFM0FFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXh8eesTyffOcnokMDNKagAyN
BtSHO/1tIjQ3GSya3h+qcBpQRqnfqgMKm8RAKVXudn5PBBS+fCtZKxgWoJLiFXyc
Hqd0VwNMTIZweEfwP2tnuFoQP9FWEANaI+SLSLqpi/ic93LMwk3XkBXYY+H9Ditv
Fwp4OAeUp7j+U0PUaU/1C+S5/7nsyAsZxUR+RFNtBrkroYx4dxM9tEo7doaRDOC5
KUKh6IIDON5RpoOrFVhYYfuqhnExdSvOUHMp5eqVIBWkb96aYZaE8pckL+bTHkV/
ZL1Du67t9v5v6zIFpzWuOt87XSj3PUl0azXSBEXdH8tmh89JWVmyKNPfyPj/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuSJaoJxBYmDzrawdE2ozmPXjrjkwHwYDVR0j
BBgwFoAUsJ3O0UK7fnnRBSbdCiGsbGHmWp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tpVHB2cFlEUVlqSDZIZVdhWkRIdnJWTFRTUlhQY3l1NUdtdEVuMXkx
SGQvMC9CMDlEQ0VEMTQyQkI3RTc5RDEwNTI2REQwQTIxQUM2QzYxRTY1QTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwOURDRUQxNDJCQjdFNzlE
MTA1MjZERDBBMjFBQzZDNjFFNjVBOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0draVRwdnBZRFFZakg2SGVXYVpESHZyVkxUU1JYUGN5dTVHbXRFbjF5MUhkLzAv
MzQzNTJlMzIzMzM5MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7+AwDQYJKoZIhvcNAQELBQADggEBAAorAuWd
lyOSbr165fmWg3ZtSv5V0ijSQceEeb3iy0eXXJ1Knppn6t+paaDPUWnfQeYqFa/K
+y6OLpGn6CZ8/VQ/QZF99SEJU5WZTxgJB6HPRW63/QfscB2d32RklCF4f4Mlhj+D
7CEytNgUnkUBBCrydovDPD3bMA/ay2bO5cY1/32TOyQkWisnGk98a8Hf1UIN2CcA
XrVqsyduNvYuLUnpd735VfHRf/gARnln1JEt8xrksK6ZNC3a+trNxgSnOHImsey9
Prci2TuADM97w4QHMnFhLycOI2/wCvnIESyTBYgqNOhTyvhaqJ/mMeKuvcztMyCR
Rqq50kkf0TtP1Xw=
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:29:38 2025 by rpki-client