Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136322e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3136322e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          exLJCAG1ANn5l591aVr/oMEm68N4g/jf8vyNaKS+tM4=
Subject key identifier:   FA:22:03:11:3D:F3:8B:E7:E2:25:34:6D:7D:81:90:3C:BB:2C:14:0B
Certificate issuer:       /CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
Certificate serial:       68B5D89400FF603650C79A3CB86CDC01CB106ED8
Authority key identifier: 35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136322e302f32342d3234203d3e20323632353835.roa
Signing time:             Mon 28 Oct 2024 12:46:31 +0000
ROA not before:           Mon 28 Oct 2024 12:41:31 +0000
ROA not after:            Mon 27 Oct 2025 12:46:31 +0000
asID:                     262585
IP address blocks:        201.55.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b5:d8:94:00:ff:60:36:50:c7:9a:3c:b8:6c:dc:01:cb:10:6e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
        Validity
            Not Before: Oct 28 12:41:31 2024 GMT
            Not After : Oct 27 12:46:31 2025 GMT
        Subject: CN=FA2203113DF38BE7E225346D7D81903CBB2C140B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:80:29:80:8c:c3:85:db:f8:18:24:3e:99:
                    76:c7:a5:d5:b3:0d:a2:6c:cf:92:1b:c1:ee:ce:e7:
                    3e:6d:34:be:cf:47:92:fd:18:8e:7a:8e:3f:b7:d7:
                    80:f9:95:35:66:59:7c:18:54:b9:50:97:86:24:f6:
                    fa:d5:0a:d8:9a:38:d4:d6:b6:39:27:40:a6:80:11:
                    64:64:98:fe:ca:1a:29:a0:f0:20:e7:db:76:65:31:
                    8e:01:9d:75:3a:cf:cd:04:ab:57:b0:de:bc:04:7a:
                    64:25:3e:72:04:0b:cd:f6:23:7c:0d:1b:89:1b:30:
                    36:cf:88:59:69:5d:7a:c6:aa:d1:4c:65:15:60:b9:
                    b4:7c:e8:e6:66:83:77:fb:0a:92:1e:31:11:c7:60:
                    0d:49:f7:10:e0:26:a4:51:05:83:ea:32:9c:02:8b:
                    ed:d4:f1:33:3c:b0:9f:70:32:12:1e:bb:4d:98:29:
                    b0:ae:cf:f7:4f:95:44:79:f9:35:e3:1d:8a:2c:e0:
                    87:86:d2:e1:79:5f:28:a2:86:1d:76:63:24:7f:b9:
                    35:f4:41:df:e9:39:e6:68:b9:da:36:b2:c4:6e:b5:
                    22:ee:70:99:cf:5c:39:18:bc:76:48:ff:6a:36:41:
                    5a:15:f5:ad:6f:f8:d5:ed:c9:3f:54:d2:3c:aa:05:
                    7f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:22:03:11:3D:F3:8B:E7:E2:25:34:6D:7D:81:90:3C:BB:2C:14:0B
            X509v3 Authority Key Identifier:
                keyid:35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136322e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:70:cb:b2:ae:d2:19:0d:2a:06:d8:76:81:de:22:e8:c1:9e:
         c5:c6:7c:36:a1:35:05:c4:08:6b:d0:98:c7:64:06:71:fb:4a:
         14:59:4d:03:42:06:68:a0:02:74:b5:3f:14:20:44:d8:b2:58:
         94:35:36:36:46:98:c6:3c:ea:4d:d1:5e:16:51:21:4d:05:b9:
         7f:9d:bb:75:12:16:8f:03:e4:8d:97:2d:ee:be:eb:27:83:e5:
         d8:42:36:7e:bb:e2:00:60:f1:1a:e7:d3:41:af:31:e6:d6:b1:
         cd:72:07:8b:b6:96:cf:da:13:af:f8:f3:ed:79:3f:51:23:05:
         6a:06:41:0c:37:84:87:0a:e7:9a:40:c4:e2:79:21:a5:4f:49:
         2f:9f:cc:0d:92:8f:dd:93:a8:ab:81:9f:8e:41:58:d1:42:b5:
         98:24:d4:73:c5:d5:2c:19:d3:d6:a2:0d:7d:f4:0a:0c:1f:c1:
         bc:28:8b:c7:0a:b8:e5:33:dd:c8:11:aa:d7:b7:9d:8c:bf:e2:
         29:60:4c:36:b1:44:f5:ab:51:46:8f:8a:6d:ca:60:3b:e0:42:
         0d:7d:ef:94:80:43:0d:5b:54:c2:c3:72:54:9d:31:c7:d2:0b:
         89:e8:ae:51:7d:92:ab:be:8a:e3:05:bb:43:2d:1d:5b:8c:02:
         8b:c3:49:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaLXYlAD/YDZQx5o8uGzcAcsQbtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVDRDRGOTQyM0M4NURDQ0Y3QTQxRUQ1QjU5REZGQ0FC
OEZEMzI5MzAeFw0yNDEwMjgxMjQxMzFaFw0yNTEwMjcxMjQ2MzFaMDMxMTAvBgNV
BAMTKEZBMjIwMzExM0RGMzhCRTdFMjI1MzQ2RDdEODE5MDNDQkIyQzE0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpV4ApgIzDhdv4GCQ+mXbHpdWz
DaJsz5Ibwe7O5z5tNL7PR5L9GI56jj+314D5lTVmWXwYVLlQl4Yk9vrVCtiaONTW
tjknQKaAEWRkmP7KGimg8CDn23ZlMY4BnXU6z80Eq1ew3rwEemQlPnIEC832I3wN
G4kbMDbPiFlpXXrGqtFMZRVgubR86OZmg3f7CpIeMRHHYA1J9xDgJqRRBYPqMpwC
i+3U8TM8sJ9wMhIeu02YKbCuz/dPlUR5+TXjHYos4IeG0uF5Xyiihh12YyR/uTX0
Qd/pOeZoudo2ssRutSLucJnPXDkYvHZI/2o2QVoV9a1v+NXtyT9U0jyqBX8VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+iIDET3zi+fiJTRtfYGQPLssFAswHwYDVR0j
BBgwFoAUNc1PlCPIXcz3pB7VtZ3/yrj9MpMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR21uUmM2Q1BwSkxDeEdORGUxeEFybmVIelpvRDJYMlA4NE1HVHZwRWta
ZnQvMC8zNUNENEY5NDIzQzg1RENDRjdBNDFFRDVCNTlERkZDQUI4RkQzMjkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1Q0Q0Rjk0MjNDODVEQ0NG
N0E0MUVENUI1OURGRkNBQjhGRDMyOTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dtblJjNkNQcEpMQ3hHTkRlMXhBcm5lSHpab0QyWDJQODRNR1R2cEVrWmZ0LzAv
MzIzMDMxMmUzNTM1MmUzMTM2MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJN6IwDQYJKoZIhvcNAQELBQADggEBABNwy7Ku
0hkNKgbYdoHeIujBnsXGfDahNQXECGvQmMdkBnH7ShRZTQNCBmigAnS1PxQgRNiy
WJQ1NjZGmMY86k3RXhZRIU0FuX+du3USFo8D5I2XLe6+6yeD5dhCNn674gBg8Rrn
00GvMebWsc1yB4u2ls/aE6/48+15P1EjBWoGQQw3hIcK55pAxOJ5IaVPSS+fzA2S
j92TqKuBn45BWNFCtZgk1HPF1SwZ09aiDX30Cgwfwbwoi8cKuOUz3cgRqte3nYy/
4ilgTDaxRPWrUUaPim3KYDvgQg1975SAQw1bVMLDclSdMcfSC4norlF9kqu+iuMF
u0MtHVuMAovDSew=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:07 2025 by rpki-client