Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323639363834.roa
File:                     34352e3139312e3230342e302f32322d3234203d3e20323639363834.roa (raw, json)
Hash identifier:          AnQ3+Ge3KqAgn+6b8PGW904mWKyZZqNUhkhVpo9hU8c=
Subject key identifier:   BF:5D:26:0D:34:40:B5:CF:A8:4C:C1:17:34:C3:59:6A:A3:62:7E:D8
Certificate issuer:       /CN=EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D
Certificate serial:       4FB05C01843312AE5A3B1F39041CB4412BF0ABAC
Authority key identifier: EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323639363834.roa
Signing time:             Wed 18 Oct 2023 15:38:31 +0000
ROA not before:           Wed 18 Oct 2023 15:33:31 +0000
ROA not after:            Wed 16 Oct 2024 15:38:31 +0000
asID:                     269684
IP address blocks:        45.191.204.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b0:5c:01:84:33:12:ae:5a:3b:1f:39:04:1c:b4:41:2b:f0:ab:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D
        Validity
            Not Before: Oct 18 15:33:31 2023 GMT
            Not After : Oct 16 15:38:31 2024 GMT
        Subject: CN=BF5D260D3440B5CFA84CC11734C3596AA3627ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:aa:4f:71:6e:c6:69:46:44:c1:fd:74:73:
                    62:bc:a9:23:38:51:fc:8a:f4:3f:ce:a0:23:6a:ed:
                    d8:7c:7d:ee:38:f8:03:71:ef:6e:3d:a0:08:9e:40:
                    d4:4f:ae:00:2d:8a:8a:1d:b9:9b:1e:8f:c8:81:4e:
                    8a:e2:e8:d0:55:42:4e:18:97:5e:41:52:07:5e:af:
                    91:29:f6:38:95:60:bc:25:72:35:ed:8e:eb:92:34:
                    3f:e4:36:1d:c5:dc:b6:f8:8c:84:e6:d4:3e:ed:29:
                    95:e9:24:5e:2d:56:ad:e3:7c:cb:c3:cb:92:82:7f:
                    39:53:cf:a9:8b:26:37:36:9a:db:c4:4e:0f:8f:79:
                    ed:fc:40:61:40:b3:5d:d5:d6:c5:82:45:d0:41:4c:
                    d5:6b:ad:37:7e:6a:ef:ff:cd:0b:bc:32:83:85:c2:
                    d1:0b:75:83:03:74:ea:ac:0b:01:84:0a:2f:95:7f:
                    ff:3c:81:2c:48:b5:96:1e:40:c9:2a:47:2e:86:77:
                    fb:e0:51:08:ac:ac:7e:6a:c7:cb:d7:e2:7c:34:f4:
                    40:3a:6e:69:1a:b2:48:56:e1:24:b4:93:df:f3:ae:
                    fa:6f:39:49:ed:fe:c7:e8:7f:b4:00:0b:51:39:c8:
                    3c:a6:28:bc:3f:33:0c:94:1a:71:5e:46:7f:3c:3e:
                    8d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5D:26:0D:34:40:B5:CF:A8:4C:C1:17:34:C3:59:6A:A3:62:7E:D8
            X509v3 Authority Key Identifier:
                keyid:EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e20323639363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:57:2a:04:5f:96:95:22:79:e3:f4:7e:c8:fc:df:68:7a:be:
         07:10:42:94:4a:18:7b:20:5b:6b:a6:23:44:6f:ec:b9:9c:ae:
         bd:db:fa:f0:d4:80:49:5a:af:6c:26:55:0e:c3:c8:e4:7b:0f:
         67:7d:95:df:4c:83:c7:7e:18:85:8b:b6:33:61:1d:91:3b:1b:
         b0:e1:e4:7f:4c:99:36:da:48:bd:e7:dd:97:06:4f:0a:87:7b:
         97:b8:fc:c2:1d:e4:3b:1c:28:07:f0:53:69:41:1b:8c:8a:8e:
         43:3b:bb:9c:81:7d:29:96:3c:a9:df:61:d2:85:30:37:05:c3:
         7d:12:c4:ff:c7:fb:99:ad:75:c6:ae:1c:8b:fd:2a:17:ad:68:
         b6:f9:ad:e6:1e:c5:b0:b3:02:e7:c5:a3:ad:12:50:e5:5b:cd:
         91:c7:f9:c1:cc:14:fc:fd:ef:20:f4:83:a8:ee:10:d6:53:b8:
         b8:9d:c5:7d:70:58:96:27:40:31:a2:84:bb:2f:af:73:0c:d3:
         ae:62:a2:34:35:13:fb:01:4d:45:68:00:87:8b:7f:67:fe:a1:
         8a:80:64:d0:8f:1c:70:9f:95:ae:1e:d2:6b:86:59:fd:56:d0:
         a9:f7:54:c5:6d:1f:ad:9a:24:88:50:a5:c9:6d:ae:f8:e8:60:
         b6:76:17:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT7BcAYQzEq5aOx85BBy0QSvwq6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE3QzlDOEMwMEIyRDRDRUZFMDI1RDkwMDNFOUZGNEIy
MzMxNzA0RDAeFw0yMzEwMTgxNTMzMzFaFw0yNDEwMTYxNTM4MzFaMDMxMTAvBgNV
BAMTKEJGNUQyNjBEMzQ0MEI1Q0ZBODRDQzExNzM0QzM1OTZBQTM2MjdFRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVqpPcW7GaUZEwf10c2K8qSM4
UfyK9D/OoCNq7dh8fe44+ANx7249oAieQNRPrgAtiooduZsej8iBTori6NBVQk4Y
l15BUgder5Ep9jiVYLwlcjXtjuuSND/kNh3F3Lb4jITm1D7tKZXpJF4tVq3jfMvD
y5KCfzlTz6mLJjc2mtvETg+Pee38QGFAs13V1sWCRdBBTNVrrTd+au//zQu8MoOF
wtELdYMDdOqsCwGECi+Vf/88gSxItZYeQMkqRy6Gd/vgUQisrH5qx8vX4nw09EA6
bmkaskhW4SS0k9/zrvpvOUnt/sfof7QAC1E5yDymKLw/MwyUGnFeRn88Po1ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUv10mDTRAtc+oTMEXNMNZaqNiftgwHwYDVR0j
BBgwFoAU6nycjACy1M7+Al2QA+n/SyMxcE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE1hdmZYbzhqZ3Z3c0Z5NTNrNEVMcXhHeVlhQ1hlaHA5SnpuOVFyVDJo
UzgvMC9FQTdDOUM4QzAwQjJENENFRkUwMjVEOTAwM0U5RkY0QjIzMzE3MDRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VBN0M5QzhDMDBCMkQ0Q0VG
RTAyNUQ5MDAzRTlGRjRCMjMzMTcwNEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hNYXZmWG84amd2d3NGeTUzazRFTHF4R3lZYUNYZWhwOUp6bjlRclQyaFM4LzAv
MzQzNTJlMzEzOTMxMmUzMjMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzNjM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItv8wwDQYJKoZIhvcNAQELBQADggEBAE5XKgRf
lpUieeP0fsj832h6vgcQQpRKGHsgW2umI0Rv7Lmcrr3b+vDUgElar2wmVQ7DyOR7
D2d9ld9Mg8d+GIWLtjNhHZE7G7Dh5H9MmTbaSL3n3ZcGTwqHe5e4/MId5DscKAfw
U2lBG4yKjkM7u5yBfSmWPKnfYdKFMDcFw30SxP/H+5mtdcauHIv9KhetaLb5reYe
xbCzAufFo60SUOVbzZHH+cHMFPz97yD0g6juENZTuLidxX1wWJYnQDGihLsvr3MM
065iojQ1E/sBTUVoAIeLf2f+oYqAZNCPHHCfla4e0muGWf1W0Kn3VMVtH62aJIhQ
pcltrvjoYLZ2F5U=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:45 2025 by rpki-client