Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3234203d3e20323636303430.roa
File:                     34352e342e35322e302f32322d3234203d3e20323636303430.roa (raw, json)
Hash identifier:          OUxju3A0i/uTYPVFlEi3cgCZJNGKidQR/CbYwXHA7dY=
Subject key identifier:   22:49:11:4A:4A:61:84:45:70:19:0F:E2:08:C1:9A:76:DC:55:A0:29
Certificate issuer:       /CN=4EAEA4860A9C24CC747D00D453DD1C54366841FB
Certificate serial:       5114CC70A7E705E4E759B51B5EF649E9D458B41C
Authority key identifier: 4E:AE:A4:86:0A:9C:24:CC:74:7D:00:D4:53:DD:1C:54:36:68:41:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EAEA4860A9C24CC747D00D453DD1C54366841FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3234203d3e20323636303430.roa
Signing time:             Tue 04 Feb 2025 14:55:08 +0000
ROA not before:           Tue 04 Feb 2025 14:50:08 +0000
ROA not after:            Tue 03 Feb 2026 14:55:08 +0000
asID:                     266040
IP address blocks:        45.4.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:14:cc:70:a7:e7:05:e4:e7:59:b5:1b:5e:f6:49:e9:d4:58:b4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EAEA4860A9C24CC747D00D453DD1C54366841FB
        Validity
            Not Before: Feb  4 14:50:08 2025 GMT
            Not After : Feb  3 14:55:08 2026 GMT
        Subject: CN=2249114A4A61844570190FE208C19A76DC55A029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:cf:d7:15:15:13:83:e8:d0:88:47:af:5c:
                    c5:b3:20:ae:49:2b:2d:04:2c:d4:60:a1:49:39:14:
                    d5:7e:8b:8a:f6:84:8b:56:2a:35:9e:c9:ea:5a:53:
                    1d:6e:98:91:81:d8:b2:c6:32:4f:68:42:1e:6b:d3:
                    76:32:18:b8:a6:a6:8b:fb:9c:e0:7c:af:21:7e:95:
                    7c:85:5d:38:47:72:cc:95:47:fd:95:4a:13:d3:08:
                    97:30:f9:28:2e:19:7a:e3:c4:50:07:d1:d5:8f:17:
                    09:7b:bb:ef:4b:19:fb:91:6c:a8:ad:bb:49:57:56:
                    bf:57:a8:69:17:d0:0a:b1:13:97:44:b4:26:d0:46:
                    0f:6a:f6:44:d6:17:26:4b:64:24:95:fe:c9:20:5b:
                    e4:e3:47:72:d2:07:ce:31:07:74:f9:8c:a7:13:de:
                    d3:aa:08:8c:97:90:2b:16:3b:28:fd:b2:21:07:70:
                    6e:f7:16:bc:9b:9c:03:3e:9b:21:09:92:ef:9c:7d:
                    4d:23:62:ce:b5:3c:9c:12:96:39:ac:50:f2:d9:28:
                    53:34:23:fe:9d:e4:17:78:c8:9e:f1:f8:2b:5c:b2:
                    89:00:d2:29:37:5a:ae:9b:b3:e9:72:40:e6:cc:57:
                    b1:1e:66:bf:e2:55:3e:cc:18:86:ce:c8:a9:ab:dc:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:49:11:4A:4A:61:84:45:70:19:0F:E2:08:C1:9A:76:DC:55:A0:29
            X509v3 Authority Key Identifier:
                keyid:4E:AE:A4:86:0A:9C:24:CC:74:7D:00:D4:53:DD:1C:54:36:68:41:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/4EAEA4860A9C24CC747D00D453DD1C54366841FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EAEA4860A9C24CC747D00D453DD1C54366841FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3234203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:39:5e:fc:cb:12:6c:24:0f:c0:b0:8c:3f:6a:19:7f:c1:d6:
         9e:52:02:51:c3:1d:fc:51:9b:7b:a8:c7:af:0c:f9:a0:7f:8a:
         8c:0d:95:b7:2d:f0:a8:95:cf:cd:db:62:27:a6:a0:76:56:40:
         77:28:01:65:ac:40:29:27:ec:16:70:b6:d8:27:a8:4f:5f:c8:
         e1:ba:bd:7d:b6:cc:5e:10:62:63:cd:12:35:69:cb:03:bc:ac:
         90:6d:4e:28:0c:fb:3c:62:67:f1:a7:46:a0:72:ec:fd:ac:e0:
         3e:bd:c3:3d:06:85:68:0f:5f:31:49:f5:8e:b5:f1:1f:90:c8:
         2f:19:93:de:2e:d1:31:c1:f0:0a:40:f5:be:47:86:82:9e:f4:
         17:64:61:88:00:e7:f4:cf:5a:0d:c8:27:a4:71:18:78:c4:36:
         e8:9c:95:31:8c:20:25:3f:18:f5:38:f1:62:19:63:20:ba:a0:
         a4:c0:75:74:dc:48:2a:f4:4c:a3:3d:33:49:c5:02:ab:97:e4:
         fe:e7:06:05:ea:4e:40:b0:eb:6a:f5:c0:92:6f:a1:c1:eb:09:
         6a:ac:ad:33:9d:d2:f4:9c:27:78:a3:30:a1:49:29:29:f3:15:
         06:b5:2e:1f:22:18:fe:16:df:fb:0d:fd:e2:ce:64:6a:15:52:
         9a:dd:63:e4
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUURTMcKfnBeTnWbUbXvZJ6dRYtBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVBRUE0ODYwQTlDMjRDQzc0N0QwMEQ0NTNERDFDNTQz
NjY4NDFGQjAeFw0yNTAyMDQxNDUwMDhaFw0yNjAyMDMxNDU1MDhaMDMxMTAvBgNV
BAMTKDIyNDkxMTRBNEE2MTg0NDU3MDE5MEZFMjA4QzE5QTc2REM1NUEwMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVJc/XFRUTg+jQiEevXMWzIK5J
Ky0ELNRgoUk5FNV+i4r2hItWKjWeyepaUx1umJGB2LLGMk9oQh5r03YyGLimpov7
nOB8ryF+lXyFXThHcsyVR/2VShPTCJcw+SguGXrjxFAH0dWPFwl7u+9LGfuRbKit
u0lXVr9XqGkX0AqxE5dEtCbQRg9q9kTWFyZLZCSV/skgW+TjR3LSB84xB3T5jKcT
3tOqCIyXkCsWOyj9siEHcG73FrybnAM+myEJku+cfU0jYs61PJwSljmsUPLZKFM0
I/6d5Bd4yJ7x+CtcsokA0ik3Wq6bs+lyQObMV7EeZr/iVT7MGIbOyKmr3Ot9AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUIkkRSkphhEVwGQ/iCMGadtxVoCkwHwYDVR0j
BBgwFoAUTq6khgqcJMx0fQDUU90cVDZoQfswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDR4RjNjU3h1NmM3bW9jdkNaeUpjakM5ZVpHYnkzTXpSd0gxNzJvdVJ3
UlEvMC80RUFFQTQ4NjBBOUMyNENDNzQ3RDAwRDQ1M0REMUM1NDM2Njg0MUZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFQUVBNDg2MEE5QzI0Q0M3
NDdEMDBENDUzREQxQzU0MzY2ODQxRkIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0eEYzY1N4dTZjN21vY3ZDWnlKY2pDOWVaR2J5M016UndIMTcyb3VSd1JRLzAv
MzQzNTJlMzQyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMDM0
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBDQwDQYJKoZIhvcNAQELBQADggEBABc5XvzLEmwkD8Cw
jD9qGX/B1p5SAlHDHfxRm3uox68M+aB/iowNlbct8KiVz83bYiemoHZWQHcoAWWs
QCkn7BZwttgnqE9fyOG6vX22zF4QYmPNEjVpywO8rJBtTigM+zxiZ/GnRqBy7P2s
4D69wz0GhWgPXzFJ9Y618R+QyC8Zk94u0THB8ApA9b5HhoKe9BdkYYgA5/TPWg3I
J6RxGHjENuiclTGMICU/GPU48WIZYyC6oKTAdXTcSCr0TKM9M0nFAquX5P7nBgXq
TkCw62r1wJJvocHrCWqsrTOd0vScJ3ijMKFJKSnzFQa1Lh8iGP4W3/sN/eLOZGoV
UprdY+Q=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:57 2025 by rpki-client