Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3234203d3e20323636303931.roa
File:                     34352e352e39362e302f32322d3234203d3e20323636303931.roa (raw, json)
Hash identifier:          /6iGVAHYIhPWPHHz3993u3r1D5NYjNcPNziE02dN4Kw=
Subject key identifier:   E0:D4:C3:D1:CB:5F:B4:51:11:32:D9:97:21:1B:D6:41:7D:AB:F1:EC
Certificate issuer:       /CN=D272B79940440721190429AABBA45B0BB5589F3E
Certificate serial:       39A114CAFB06BC817F42160A7B052DAE75736AD9
Authority key identifier: D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3234203d3e20323636303931.roa
Signing time:             Mon 27 Jan 2025 12:49:46 +0000
ROA not before:           Mon 27 Jan 2025 12:44:46 +0000
ROA not after:            Mon 26 Jan 2026 12:49:46 +0000
asID:                     266091
IP address blocks:        45.5.96.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a1:14:ca:fb:06:bc:81:7f:42:16:0a:7b:05:2d:ae:75:73:6a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D272B79940440721190429AABBA45B0BB5589F3E
        Validity
            Not Before: Jan 27 12:44:46 2025 GMT
            Not After : Jan 26 12:49:46 2026 GMT
        Subject: CN=E0D4C3D1CB5FB4511132D997211BD6417DABF1EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:11:ff:3d:32:6d:c0:97:48:c9:c8:99:a7:
                    1f:05:fe:5a:b1:44:d4:5f:dd:40:f9:4b:fa:6f:67:
                    10:13:35:87:9e:84:55:e5:b6:ca:07:38:4a:27:a2:
                    bf:3e:d6:da:aa:70:bc:bb:0d:ed:90:52:65:11:01:
                    f3:44:b4:56:80:62:5b:12:63:39:74:86:f4:e8:65:
                    b4:82:04:ab:e4:40:48:09:8b:04:f2:d3:74:11:54:
                    98:a2:74:28:23:d6:53:7c:3f:b3:54:8d:2a:09:1c:
                    4a:26:34:51:2d:49:37:e3:58:6f:f2:6d:7b:58:40:
                    d9:2a:10:67:fe:1c:e8:c2:b8:41:29:1b:6f:92:c0:
                    be:fc:b0:41:ea:23:88:89:10:a3:72:94:93:83:3a:
                    05:20:9d:b6:a7:0c:f2:96:3f:86:f7:c9:da:4f:99:
                    f7:da:60:ce:03:39:db:5b:f0:51:77:2b:31:78:39:
                    13:e3:d4:a4:ec:86:2b:9b:e9:72:49:bc:2c:ec:dc:
                    31:28:7a:60:25:76:a1:ca:b4:ba:cd:1e:23:51:bb:
                    11:d2:d1:22:33:be:32:e0:cf:58:b1:d0:84:f2:6e:
                    d3:86:55:1e:04:32:84:10:ed:6f:a2:02:37:fb:49:
                    32:38:ea:38:65:e9:92:03:66:0c:20:0e:4a:e9:d9:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D4:C3:D1:CB:5F:B4:51:11:32:D9:97:21:1B:D6:41:7D:AB:F1:EC
            X509v3 Authority Key Identifier:
                keyid:D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3234203d3e20323636303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:f1:01:61:f1:4a:1d:27:56:b1:2c:86:af:c8:fe:af:0f:a6:
         5b:d4:0e:59:bb:10:8a:91:86:75:fd:63:75:9a:ae:e3:a7:77:
         ea:99:ed:f2:5f:5b:4c:3d:28:66:7e:40:90:28:be:8f:bc:84:
         d0:f8:f9:c6:98:29:24:82:39:d2:ee:55:a8:0e:a2:ad:93:d6:
         c5:fe:0f:9c:8b:fc:1a:8d:52:d6:4d:3c:70:b0:e0:1f:c7:6c:
         3d:e7:74:bf:5e:6d:ac:2f:eb:a4:0a:3a:ba:32:c0:26:15:55:
         bf:ea:6f:a5:0a:3b:d7:ce:79:fa:05:23:70:be:b3:8f:3a:ef:
         56:27:76:54:e2:21:24:f4:c7:d3:21:e8:42:42:25:54:84:23:
         e2:ab:20:f6:6e:c6:a3:c5:8f:fa:33:a8:ce:b8:44:33:b6:23:
         12:a6:45:fd:e1:14:3c:ff:43:2b:70:67:2a:a1:fb:bf:fb:f1:
         71:07:92:fa:71:14:da:32:3f:a9:ea:3a:97:21:74:8e:ec:85:
         1b:ef:9f:c2:11:ee:6d:52:fd:ad:4e:b6:d1:3a:d7:66:25:96:
         2a:41:12:0b:3d:c0:b5:a0:51:e8:19:76:c1:29:27:68:a7:4b:
         04:0c:c1:bc:dc:df:95:a8:ed:bc:2f:40:68:6e:a6:7c:eb:83:
         26:a1:0a:59
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOaEUyvsGvIF/QhYKewUtrnVzatkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI3MkI3OTk0MDQ0MDcyMTE5MDQyOUFBQkJBNDVCMEJC
NTU4OUYzRTAeFw0yNTAxMjcxMjQ0NDZaFw0yNjAxMjYxMjQ5NDZaMDMxMTAvBgNV
BAMTKEUwRDRDM0QxQ0I1RkI0NTExMTMyRDk5NzIxMUJENjQxN0RBQkYxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVMxH/PTJtwJdIyciZpx8F/lqx
RNRf3UD5S/pvZxATNYeehFXltsoHOEonor8+1tqqcLy7De2QUmURAfNEtFaAYlsS
Yzl0hvToZbSCBKvkQEgJiwTy03QRVJiidCgj1lN8P7NUjSoJHEomNFEtSTfjWG/y
bXtYQNkqEGf+HOjCuEEpG2+SwL78sEHqI4iJEKNylJODOgUgnbanDPKWP4b3ydpP
mffaYM4DOdtb8FF3KzF4ORPj1KTshiub6XJJvCzs3DEoemAldqHKtLrNHiNRuxHS
0SIzvjLgz1ix0ITybtOGVR4EMoQQ7W+iAjf7STI46jhl6ZIDZgwgDkrp2V1tAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU4NTD0ctftFERMtmXIRvWQX2r8ewwHwYDVR0j
BBgwFoAU0nK3mUBEByEZBCmqu6RbC7VYnz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDV2VjdYQjdmandBdk04UnZGRWc3QzR3VHJpUW53NjdXbkF3UFN5OXpW
d1QvMC9EMjcyQjc5OTQwNDQwNzIxMTkwNDI5QUFCQkE0NUIwQkI1NTg5RjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyNzJCNzk5NDA0NDA3MjEx
OTA0MjlBQUJCQTQ1QjBCQjU1ODlGM0UuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1dlY3WEI3Zmp3QXZNOFJ2RkVnN0M0d1RyaVFudzY3V25Bd1BTeTl6VndULzAv
MzQzNTJlMzUyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMDM5
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBWAwDQYJKoZIhvcNAQELBQADggEBAGzxAWHxSh0nVrEs
hq/I/q8PplvUDlm7EIqRhnX9Y3WaruOnd+qZ7fJfW0w9KGZ+QJAovo+8hND4+caY
KSSCOdLuVagOoq2T1sX+D5yL/BqNUtZNPHCw4B/HbD3ndL9ebawv66QKOroywCYV
Vb/qb6UKO9fOefoFI3C+s48671YndlTiIST0x9Mh6EJCJVSEI+KrIPZuxqPFj/oz
qM64RDO2IxKmRf3hFDz/QytwZyqh+7/78XEHkvpxFNoyP6nqOpchdI7shRvvn8IR
7m1S/a1OttE612YllipBEgs9wLWgUegZdsEpJ2inSwQMwbzc35Wo7bwvQGhupnzr
gyahClk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:16:01 2025 by rpki-client