Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa
File:                     34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa (raw, json)
Hash identifier:          MMicWq9FdcfLnWY+L4EQ4JHSD/G8Pdzc8VwVGamo5g0=
Subject key identifier:   44:7A:7D:0D:87:B7:2A:23:DC:5A:6C:E8:C2:12:CA:59:2E:1D:24:AE
Certificate issuer:       /CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
Certificate serial:       3BD4BD829626B06BB669B77180AAE9033E8851C4
Authority key identifier: B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa
Signing time:             Thu 06 Mar 2025 20:00:33 +0000
ROA not before:           Thu 06 Mar 2025 19:55:33 +0000
ROA not after:            Thu 05 Mar 2026 20:00:33 +0000
asID:                     268269
IP address blocks:        45.237.102.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d4:bd:82:96:26:b0:6b:b6:69:b7:71:80:aa:e9:03:3e:88:51:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
        Validity
            Not Before: Mar  6 19:55:33 2025 GMT
            Not After : Mar  5 20:00:33 2026 GMT
        Subject: CN=447A7D0D87B72A23DC5A6CE8C212CA592E1D24AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:93:49:56:bc:33:c7:e6:18:dd:21:ef:1e:
                    75:4a:1f:84:2c:51:18:d7:2a:25:5a:b2:3b:f9:34:
                    6b:c5:3b:65:61:3e:2e:b9:7e:d4:31:8d:65:1e:51:
                    ac:a2:27:cc:fe:bf:4b:b3:10:b9:0e:1d:c1:ea:ad:
                    41:1a:2d:8c:fa:70:01:e9:57:bc:06:68:0f:a8:14:
                    ea:1d:ea:22:fd:ef:79:c0:18:19:84:55:ef:65:78:
                    3a:af:5a:7f:4f:75:7c:84:05:8d:97:92:65:22:27:
                    22:d2:f0:c5:ba:53:b6:24:67:93:22:ef:9e:7f:f9:
                    5a:15:ea:ff:66:b2:fa:5e:17:83:65:a6:73:13:c6:
                    d8:54:0e:b0:b9:6a:4c:0b:d6:8e:d6:8e:41:c3:c9:
                    10:70:69:88:89:4f:a8:eb:bc:49:f4:84:49:e9:c5:
                    14:40:4c:cd:88:3d:74:a8:d2:30:83:81:91:68:e7:
                    7d:76:a5:c8:2a:df:99:aa:55:0d:a1:6d:e9:49:d8:
                    30:74:6e:fd:25:84:c5:98:2d:a9:b3:68:f4:27:c9:
                    ff:9d:f4:1c:01:53:db:bb:1f:44:91:df:98:54:d6:
                    d6:22:6e:b0:f5:55:9e:79:d1:04:d4:2d:5e:92:b5:
                    a3:33:29:7d:dd:76:ab:5d:73:c8:2f:84:ce:ad:1d:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7A:7D:0D:87:B7:2A:23:DC:5A:6C:E8:C2:12:CA:59:2E:1D:24:AE
            X509v3 Authority Key Identifier:
                keyid:B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:b1:af:9a:ee:e6:a7:eb:d2:61:62:ed:f9:2d:55:4d:4d:
         4c:1e:cc:82:67:32:bf:b9:5f:34:61:a8:60:fb:f3:f5:34:80:
         e9:64:ef:9a:fe:34:a7:19:ac:0a:ca:7e:0a:77:c7:2f:82:e9:
         ab:63:9d:d5:3f:2e:1b:f0:3c:b0:99:9e:25:da:38:7f:28:aa:
         ce:d7:2c:a8:56:75:c6:db:3a:49:d6:05:01:73:92:c0:96:17:
         cd:87:e6:40:51:12:88:2c:3f:4e:d4:76:93:72:5e:94:d4:0f:
         21:e5:55:e5:78:18:bc:25:23:08:2d:0d:70:50:9e:8f:48:bd:
         90:7f:d1:7a:59:01:f6:97:10:d6:55:45:7f:43:31:86:39:d3:
         5d:72:23:e4:ee:da:30:16:c0:23:9f:e2:09:cd:63:62:af:cf:
         ae:cf:a5:53:ae:f8:69:74:cc:99:d7:f6:4c:33:16:e5:b2:2d:
         7c:85:53:69:86:2d:23:29:28:82:a2:08:98:db:b2:92:7e:e3:
         b6:ca:64:64:7c:c4:a6:a1:da:98:4e:73:ab:e2:7d:9e:27:9c:
         c1:f0:39:2f:bd:2b:59:a4:90:b0:d6:75:16:64:d6:9f:23:f9:
         6d:ab:4c:af:f7:02:8c:00:a1:78:6f:a8:f7:97:ea:c7:41:2e:
         ae:d0:ca:c6
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUO9S9gpYmsGu2abdxgKrpAz6IUcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgyNzQyMjJEQUU5RkNBODA5NzUxNzEzMzdEREU0RkYx
OUNFOEUyNDAeFw0yNTAzMDYxOTU1MzNaFw0yNjAzMDUyMDAwMzNaMDMxMTAvBgNV
BAMTKDQ0N0E3RDBEODdCNzJBMjNEQzVBNkNFOEMyMTJDQTU5MkUxRDI0QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk0ZNJVrwzx+YY3SHvHnVKH4Qs
URjXKiVasjv5NGvFO2VhPi65ftQxjWUeUayiJ8z+v0uzELkOHcHqrUEaLYz6cAHp
V7wGaA+oFOod6iL973nAGBmEVe9leDqvWn9PdXyEBY2XkmUiJyLS8MW6U7YkZ5Mi
755/+VoV6v9msvpeF4NlpnMTxthUDrC5akwL1o7WjkHDyRBwaYiJT6jrvEn0hEnp
xRRATM2IPXSo0jCDgZFo5312pcgq35mqVQ2hbelJ2DB0bv0lhMWYLamzaPQnyf+d
9BwBU9u7H0SR35hU1tYibrD1VZ550QTULV6StaMzKX3ddqtdc8gvhM6tHZoxAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQURHp9DYe3KiPcWmzowhLKWS4dJK4wHwYDVR0j
BBgwFoAUuCdCItrp/KgJdRcTN93k/xnOjiQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NY2ZrU1N5SGJBMjVWR0RTZXhpV0NQbUx3WndYRWROTFlZQzdqVTdESzlC
LzEvQjgyNzQyMjJEQUU5RkNBODA5NzUxNzEzMzdEREU0RkYxOUNFOEUyNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CODI3NDIyMkRBRTlGQ0E4MDk3
NTE3MTMzN0RERTRGRjE5Q0U4RTI0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
Y2ZrU1N5SGJBMjVWR0RTZXhpV0NQbUx3WndYRWROTFlZQzdqVTdESzlCLzEvMzQz
NTJlMzIzMzM3MmUzMTMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2Mzgz
MjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAEt7WYwDQYJKoZIhvcNAQELBQADggEBADqWsa+a7uan
69JhYu35LVVNTUwezIJnMr+5XzRhqGD78/U0gOlk75r+NKcZrArKfgp3xy+C6atj
ndU/LhvwPLCZniXaOH8oqs7XLKhWdcbbOknWBQFzksCWF82H5kBREogsP07UdpNy
XpTUDyHlVeV4GLwlIwgtDXBQno9IvZB/0XpZAfaXENZVRX9DMYY5011yI+Tu2jAW
wCOf4gnNY2Kvz67PpVOu+Gl0zJnX9kwzFuWyLXyFU2mGLSMpKIKiCJjbspJ+47bK
ZGR8xKah2phOc6vifZ4nnMHwOS+9K1mkkLDWdRZk1p8j+W2rTK/3AowAoXhvqPeX
6sdBLq7QysY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:29:51 2025 by rpki-client