Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/0/34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa
File:                     34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa (raw, json)
Hash identifier:          nG/vkn3WsmNAJ3shcewtr8PadfcKg4Gb5jQWrtMReHY=
Subject key identifier:   D5:AF:AD:FE:86:A4:BD:CC:30:BC:F7:32:4E:6D:DD:96:74:97:67:D6
Certificate issuer:       /CN=D794301FD5220B9F7109CD5E234483D682B15130
Certificate serial:       0EDC3C9C50B39DFF33F056D966304BB7774780F5
Authority key identifier: D7:94:30:1F:D5:22:0B:9F:71:09:CD:5E:23:44:83:D6:82:B1:51:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D794301FD5220B9F7109CD5E234483D682B15130.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/0/34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa
Signing time:             Thu 28 Dec 2023 18:00:00 +0000
ROA not before:           Thu 28 Dec 2023 17:55:00 +0000
ROA not after:            Thu 26 Dec 2024 18:00:00 +0000
asID:                     266951
IP address blocks:        45.225.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:dc:3c:9c:50:b3:9d:ff:33:f0:56:d9:66:30:4b:b7:77:47:80:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D794301FD5220B9F7109CD5E234483D682B15130
        Validity
            Not Before: Dec 28 17:55:00 2023 GMT
            Not After : Dec 26 18:00:00 2024 GMT
        Subject: CN=D5AFADFE86A4BDCC30BCF7324E6DDD96749767D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:0d:45:b0:0a:18:e4:9b:9c:0f:0a:9c:cd:
                    3c:93:2d:9f:4e:0f:8e:fa:fa:d4:50:34:15:1b:fa:
                    bf:77:ab:84:f8:07:f3:cf:eb:e8:17:4e:e6:a6:e6:
                    fd:c7:59:10:fe:d5:b4:41:b8:fe:12:42:6d:a4:f2:
                    a2:d8:14:84:8d:56:fb:09:ae:e0:80:cd:af:ba:ab:
                    dd:88:e1:37:b0:0c:04:54:df:65:d5:da:a5:4b:e0:
                    bb:1e:f7:71:55:a8:2d:9c:32:d5:bd:5e:6a:06:a3:
                    94:bb:69:86:88:66:69:4f:57:2b:26:bb:11:a8:b9:
                    f5:98:39:f8:af:13:9e:ee:ba:32:b6:65:ab:21:12:
                    74:ba:5c:28:f2:73:d7:25:c3:f7:7e:0b:67:73:ec:
                    6c:8c:1a:58:dc:96:cb:82:ce:81:76:bb:36:b2:e9:
                    70:71:07:71:f2:ae:f7:9e:a5:7a:29:55:95:6c:ff:
                    f0:93:68:bd:fa:d1:4c:e2:81:13:db:d7:eb:35:3a:
                    75:92:18:66:ae:2b:41:d1:8a:9a:04:f8:37:ec:72:
                    8a:ab:b1:cd:d2:b4:08:7e:38:f8:0f:42:6f:0f:c0:
                    da:e4:05:77:f9:8a:23:b3:85:88:91:00:8a:ba:03:
                    05:30:78:41:c5:dc:4c:40:56:ff:3b:60:c0:5d:4a:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AF:AD:FE:86:A4:BD:CC:30:BC:F7:32:4E:6D:DD:96:74:97:67:D6
            X509v3 Authority Key Identifier:
                keyid:D7:94:30:1F:D5:22:0B:9F:71:09:CD:5E:23:44:83:D6:82:B1:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/0/D794301FD5220B9F7109CD5E234483D682B15130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D794301FD5220B9F7109CD5E234483D682B15130.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/0/34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:1c:ce:fe:6f:5f:d5:48:71:f4:01:7f:51:c2:d5:25:52:
         90:26:9d:ed:15:d0:12:95:17:14:9b:96:b8:9c:c7:30:5d:bb:
         a1:cf:2c:db:e5:b7:41:6f:65:3b:7c:15:94:9c:61:05:a9:3a:
         c3:a7:55:2f:6d:59:ab:40:f8:0a:ad:bd:d4:f7:7c:27:99:35:
         c6:92:40:37:dd:ba:a8:ff:f3:ab:6d:0f:cc:ed:47:8f:33:a9:
         74:eb:4b:ac:82:b6:ef:12:b7:38:c4:c7:6b:e8:52:0c:30:e7:
         77:31:3f:fb:41:7b:ff:f0:95:be:c4:c1:b0:40:74:64:89:bb:
         2d:ce:f5:1c:b1:d9:2b:88:75:a9:07:bf:d3:c6:99:7f:17:31:
         67:a4:08:a9:54:00:1f:ee:fb:6a:e3:30:7f:a1:1b:a0:87:4d:
         7a:97:9f:1e:5a:a1:9a:d4:76:5b:44:b1:d2:c6:6a:7b:09:88:
         93:2d:f4:7f:50:5a:85:01:05:e0:84:e5:f1:e9:f4:0e:28:1b:
         0e:ee:a8:ef:5f:91:79:58:bc:b2:86:05:7f:9e:f3:3d:ec:3f:
         f6:f9:ce:c4:0e:bb:83:98:99:0a:f9:01:e2:59:f1:07:0a:e6:
         b1:0a:8a:86:6a:16:77:3e:9b:59:e3:9d:eb:b0:9e:e9:0f:75:
         66:8f:f4:c0
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUDtw8nFCznf8z8FbZZjBLt3dHgPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5NDMwMUZENTIyMEI5RjcxMDlDRDVFMjM0NDgzRDY4
MkIxNTEzMDAeFw0yMzEyMjgxNzU1MDBaFw0yNDEyMjYxODAwMDBaMDMxMTAvBgNV
BAMTKEQ1QUZBREZFODZBNEJEQ0MzMEJDRjczMjRFNkRERDk2NzQ5NzY3RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWA1FsAoY5JucDwqczTyTLZ9O
D476+tRQNBUb+r93q4T4B/PP6+gXTuam5v3HWRD+1bRBuP4SQm2k8qLYFISNVvsJ
ruCAza+6q92I4TewDARU32XV2qVL4Lse93FVqC2cMtW9XmoGo5S7aYaIZmlPVysm
uxGoufWYOfivE57uujK2ZashEnS6XCjyc9clw/d+C2dz7GyMGljclsuCzoF2uzay
6XBxB3HyrveepXopVZVs//CTaL360UzigRPb1+s1OnWSGGauK0HRipoE+Dfscoqr
sc3StAh+OPgPQm8PwNrkBXf5iiOzhYiRAIq6AwUweEHF3ExAVv87YMBdSv3bAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU1a+t/oakvcwwvPcyTm3dlnSXZ9YwHwYDVR0j
BBgwFoAU15QwH9UiC59xCc1eI0SD1oKxUTAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9pUGhRRGRkeEtWRWNjd0drS2o0NlVWSHV6RFRhb1FYRkJiUHhZdXpwSktL
LzAvRDc5NDMwMUZENTIyMEI5RjcxMDlDRDVFMjM0NDgzRDY4MkIxNTEzMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9ENzk0MzAxRkQ1MjIwQjlGNzEw
OUNENUUyMzQ0ODNENjgyQjE1MTMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9p
UGhRRGRkeEtWRWNjd0drS2o0NlVWSHV6RFRhb1FYRkJiUHhZdXpwSktLLzAvMzQz
NTJlMzIzMjM1MmUzMTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYz
OTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAIt4bAwDQYJKoZIhvcNAQELBQADggEBAB/KHM7+b1/V
SHH0AX9RwtUlUpAmne0V0BKVFxSblricxzBdu6HPLNvlt0FvZTt8FZScYQWpOsOn
VS9tWatA+AqtvdT3fCeZNcaSQDfduqj/86ttD8ztR48zqXTrS6yCtu8StzjEx2vo
Ugww53cxP/tBe//wlb7EwbBAdGSJuy3O9Ryx2SuIdakHv9PGmX8XMWekCKlUAB/u
+2rjMH+hG6CHTXqXnx5aoZrUdltEsdLGansJiJMt9H9QWoUBBeCE5fHp9A4oGw7u
qO9fkXlYvLKGBX+e8z3sP/b5zsQOu4OYmQr5AeJZ8QcK5rEKioZqFnc+m1njneuw
nukPdWaP9MA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:37 2025 by rpki-client