Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
File:                     34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          O5QSN1jbLmIGPs7ioqES0lmd/QqWdB/0zeylEL8fbuw=
Subject key identifier:   3D:EF:B3:D5:62:C9:36:EE:61:EF:B7:34:91:7E:3B:7F:3D:B4:97:A7
Certificate issuer:       /CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD
Certificate serial:       22F22589B73F2BACA19FA5A170CF7F09D8C250EB
Authority key identifier: 86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
Signing time:             Thu 06 Mar 2025 00:34:30 +0000
ROA not before:           Thu 06 Mar 2025 00:29:30 +0000
ROA not after:            Thu 05 Mar 2026 00:34:30 +0000
asID:                     53107
IP address blocks:        45.171.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f2:25:89:b7:3f:2b:ac:a1:9f:a5:a1:70:cf:7f:09:d8:c2:50:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD
        Validity
            Not Before: Mar  6 00:29:30 2025 GMT
            Not After : Mar  5 00:34:30 2026 GMT
        Subject: CN=3DEFB3D562C936EE61EFB734917E3B7F3DB497A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:fe:40:9c:b5:bc:43:4b:17:e0:e5:69:a6:
                    97:03:18:2b:27:65:7c:4d:17:0e:0e:53:7c:f5:ad:
                    ee:15:dd:a1:0b:37:57:f6:ff:29:c8:90:5a:0a:29:
                    94:28:fc:cd:9b:cc:28:43:0d:c4:59:f1:b3:bb:86:
                    9a:c1:64:84:6a:b9:98:79:d9:91:1b:1c:1e:c4:4b:
                    e5:32:9d:c7:d7:4e:21:b5:97:f6:6b:80:65:dd:bb:
                    88:ed:cd:fa:e2:14:39:a9:2e:2e:47:6b:6f:e8:9d:
                    86:8f:e7:05:2b:cb:a4:c5:5d:23:9c:44:56:82:1d:
                    49:98:cb:42:fd:87:a3:d6:02:b1:7e:8f:bb:12:c8:
                    9b:cb:2a:30:f3:78:62:9e:3e:c9:62:7b:f1:a8:3f:
                    67:5e:7a:99:da:91:b6:2f:47:02:f1:86:8b:54:cc:
                    f6:01:da:0b:3a:7a:2b:b6:a8:72:fa:d6:66:2e:41:
                    61:33:35:21:a4:57:62:b2:df:27:3a:e1:fb:6e:3e:
                    8f:b5:31:cf:0f:77:f7:db:01:fa:7e:ab:8b:8f:70:
                    00:7a:86:d5:43:4c:c6:a5:87:6f:00:72:b6:e1:ae:
                    2a:88:20:33:60:c8:c0:8b:64:76:c0:52:ac:83:8a:
                    2f:f8:ac:73:eb:6d:3c:35:0e:b8:70:cd:ce:9a:2c:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EF:B3:D5:62:C9:36:EE:61:EF:B7:34:91:7E:3B:7F:3D:B4:97:A7
            X509v3 Authority Key Identifier:
                keyid:86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:db:d7:e2:31:b7:b1:4f:8c:c6:a3:3b:d4:56:da:9f:e1:c8:
         b0:0d:21:af:03:53:53:69:53:1c:98:5a:24:bf:d7:e3:29:bf:
         d3:6d:f9:dc:be:7e:7b:40:9d:45:e4:b5:ef:d1:8d:c0:50:db:
         3c:15:7b:da:85:cb:60:11:6f:3a:38:c9:aa:a1:2b:7f:34:d1:
         c1:bc:44:c8:f7:3f:a6:15:06:4b:e4:54:2b:85:c5:86:50:df:
         74:bb:1a:3e:2d:d7:c7:4d:ae:91:98:e6:33:cf:cf:de:5c:9d:
         ef:52:20:a6:ef:15:2a:ac:cb:30:94:04:c0:90:0f:d5:21:ea:
         90:ed:dc:a6:17:ea:4a:96:52:b4:74:d1:29:c7:2e:39:06:8f:
         cf:3d:a6:a6:16:ab:71:21:bc:c7:59:0e:9c:73:b1:c9:dd:f7:
         a4:fb:2a:ac:ba:16:45:8f:61:7e:0c:71:d4:43:22:17:16:ad:
         8a:ae:6e:78:be:3c:5c:b6:5b:97:90:eb:98:0b:e6:68:84:80:
         a8:14:ac:21:d4:1a:d9:c9:5a:43:f2:58:11:30:3f:ac:f8:e2:
         8a:53:95:bc:e0:eb:f4:0e:20:28:25:0d:78:6e:c9:f1:90:72:
         d2:9d:a6:ee:7a:3b:9b:6b:8c:30:28:9e:a7:f0:46:ab:79:cf:
         21:ae:6c:8d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUIvIlibc/K6yhn6WhcM9/CdjCUOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYxRTg3NDg4QUUzODM1Q0E1MkE0MEZDM0YyNkFCMDgx
NzFGQUZERDAeFw0yNTAzMDYwMDI5MzBaFw0yNjAzMDUwMDM0MzBaMDMxMTAvBgNV
BAMTKDNERUZCM0Q1NjJDOTM2RUU2MUVGQjczNDkxN0UzQjdGM0RCNDk3QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMf5AnLW8Q0sX4OVpppcDGCsn
ZXxNFw4OU3z1re4V3aELN1f2/ynIkFoKKZQo/M2bzChDDcRZ8bO7hprBZIRquZh5
2ZEbHB7ES+UyncfXTiG1l/ZrgGXdu4jtzfriFDmpLi5Ha2/onYaP5wUry6TFXSOc
RFaCHUmYy0L9h6PWArF+j7sSyJvLKjDzeGKePslie/GoP2deepnakbYvRwLxhotU
zPYB2gs6eiu2qHL61mYuQWEzNSGkV2Ky3yc64ftuPo+1Mc8Pd/fbAfp+q4uPcAB6
htVDTMalh28AcrbhriqIIDNgyMCLZHbAUqyDii/4rHPrbTw1Drhwzc6aLCC1AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUPe+z1WLJNu5h77c0kX47fz20l6cwHwYDVR0j
BBgwFoAUhh6HSIrjg1ylKkD8PyarCBcfr90wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3
LzEvODYxRTg3NDg4QUUzODM1Q0E1MkE0MEZDM0YyNkFCMDgxNzFGQUZERC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84NjFFODc0ODhBRTM4MzVDQTUy
QTQwRkMzRjI2QUIwODE3MUZBRkRELmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
eVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3LzEvMzQz
NTJlMzEzNzMxMmUzMTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMzMzEz
MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALau9MA0GCSqGSIb3DQEBCwUAA4IBAQBp29fiMbexT4zG
ozvUVtqf4ciwDSGvA1NTaVMcmFokv9fjKb/Tbfncvn57QJ1F5LXv0Y3AUNs8FXva
hctgEW86OMmqoSt/NNHBvETI9z+mFQZL5FQrhcWGUN90uxo+LdfHTa6RmOYzz8/e
XJ3vUiCm7xUqrMswlATAkA/VIeqQ7dymF+pKllK0dNEpxy45Bo/PPaamFqtxIbzH
WQ6cc7HJ3fek+yqsuhZFj2F+DHHUQyIXFq2Krm54vjxctluXkOuYC+ZohICoFKwh
1BrZyVpD8lgRMD+s+OKKU5W84Ov0DiAoJQ14bsnxkHLSnabuejuba4wwKJ6n8Ear
ec8hrmyN
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:10 2025 by rpki-client