Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138322e302f32332d3233203d3e20323636323332.roa
File:                     34352e362e3138322e302f32332d3233203d3e20323636323332.roa (raw, json)
Hash identifier:          VbazPBgx+eGXbM1xPyRbKgwyIWy01B/0TSA8bowjcWs=
Subject key identifier:   A2:7F:DB:3B:C0:28:E4:D9:56:49:EC:E4:5B:DD:02:52:79:AC:03:3A
Certificate issuer:       /CN=8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F
Certificate serial:       40C1B75288B376A17D6E9CD6844E3F64F0549989
Authority key identifier: 8A:99:42:1A:DB:1D:C9:BA:7F:69:83:7F:10:8B:27:A7:9F:BE:FA:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138322e302f32332d3233203d3e20323636323332.roa
Signing time:             Mon 20 Mar 2023 02:09:47 +0000
ROA not before:           Mon 20 Mar 2023 02:04:47 +0000
ROA not after:            Mon 18 Mar 2024 02:09:47 +0000
asID:                     266232
IP address blocks:        45.6.182.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c1:b7:52:88:b3:76:a1:7d:6e:9c:d6:84:4e:3f:64:f0:54:99:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F
        Validity
            Not Before: Mar 20 02:04:47 2023 GMT
            Not After : Mar 18 02:09:47 2024 GMT
        Subject: CN=A27FDB3BC028E4D95649ECE45BDD025279AC033A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:a4:25:86:d6:e5:5b:9b:68:74:79:17:e0:
                    fd:d6:02:dc:62:3f:26:25:b7:27:da:97:8c:97:08:
                    49:a1:01:a8:92:de:ae:d5:f6:66:f2:48:a2:c7:a9:
                    c4:dd:29:89:00:57:b5:4c:18:46:fe:f1:3f:bd:20:
                    6e:3c:70:14:4e:35:ef:24:4d:6d:72:e7:24:40:74:
                    a5:a1:48:03:e4:32:ef:31:a6:6e:eb:bb:f6:4a:58:
                    63:fe:06:ac:a2:47:8e:47:09:3a:b5:6a:6b:2b:5e:
                    60:3a:02:4a:a6:78:f9:63:9e:f8:8a:a5:70:db:32:
                    0c:e4:b0:1b:6c:46:da:ab:27:27:8c:3e:ae:8b:ac:
                    24:cc:79:9d:b3:4f:83:ce:96:2c:45:38:47:21:4b:
                    aa:fb:6c:e2:a6:ce:56:14:2f:a9:af:62:57:70:6d:
                    a2:ba:6f:40:54:e6:3d:28:eb:9f:c6:eb:25:c7:92:
                    be:65:f1:ed:72:f3:bb:ed:32:0e:55:6f:73:9a:72:
                    3a:46:d3:cd:1c:e4:f0:b6:b6:31:90:48:58:49:e8:
                    bf:ec:f2:b2:61:87:d8:00:45:75:71:91:4e:8f:b4:
                    db:92:f9:ea:66:36:0b:b1:7e:f8:c8:ca:4c:4a:32:
                    b0:79:c2:f7:58:2d:a1:88:46:84:f5:f9:93:09:19:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7F:DB:3B:C0:28:E4:D9:56:49:EC:E4:5B:DD:02:52:79:AC:03:3A
            X509v3 Authority Key Identifier:
                keyid:8A:99:42:1A:DB:1D:C9:BA:7F:69:83:7F:10:8B:27:A7:9F:BE:FA:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138322e302f32332d3233203d3e20323636323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:55:ac:45:b2:0e:11:2c:a8:1a:e3:31:ed:71:1d:79:db:3c:
         8b:92:63:7e:3f:6d:a0:24:bb:ae:e8:df:c2:f6:8a:1e:f0:58:
         a6:db:c5:47:5e:c5:87:75:fb:06:b0:d0:a0:29:0f:b6:c1:65:
         d5:c7:86:15:72:b3:bc:1a:a9:e2:cc:d3:4b:fc:4e:58:97:47:
         2f:36:ec:81:c1:41:37:51:a1:80:bc:62:c5:2a:74:21:08:d7:
         d7:b8:2a:93:64:f2:49:74:73:89:07:4f:0a:97:53:70:45:e1:
         ca:da:6a:81:7c:3a:fe:4e:6d:9d:4b:d9:bb:e8:f7:42:f1:c2:
         1b:96:7f:cd:db:33:01:5c:06:fd:7c:14:0c:ea:d8:a7:15:8f:
         e6:3a:9c:ff:80:46:34:71:85:4a:e8:6e:29:de:26:a2:d9:6b:
         44:c4:3d:7d:c2:24:2c:8d:31:4a:7d:23:b8:d8:e1:43:e1:0e:
         be:6e:83:1c:4f:72:f8:28:40:10:02:08:57:23:de:f3:8f:92:
         eb:10:67:09:28:90:6b:b6:e7:30:b4:73:24:72:3f:ed:57:28:
         78:92:40:8f:7b:2a:78:49:0f:83:99:d8:9d:21:74:a3:e8:9a:
         fc:ea:97:e3:90:14:fb:f3:04:39:81:51:fe:9d:bb:0a:b9:be:
         9f:ea:91:bc
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQMG3UoizdqF9bpzWhE4/ZPBUmYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE5OTQyMUFEQjFEQzlCQTdGNjk4MzdGMTA4QjI3QTc5
RkJFRkE5RjAeFw0yMzAzMjAwMjA0NDdaFw0yNDAzMTgwMjA5NDdaMDMxMTAvBgNV
BAMTKEEyN0ZEQjNCQzAyOEU0RDk1NjQ5RUNFNDVCREQwMjUyNzlBQzAzM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmaQlhtblW5todHkX4P3WAtxi
PyYltyfal4yXCEmhAaiS3q7V9mbySKLHqcTdKYkAV7VMGEb+8T+9IG48cBRONe8k
TW1y5yRAdKWhSAPkMu8xpm7ru/ZKWGP+BqyiR45HCTq1amsrXmA6AkqmePljnviK
pXDbMgzksBtsRtqrJyeMPq6LrCTMeZ2zT4POlixFOEchS6r7bOKmzlYUL6mvYldw
baK6b0BU5j0o65/G6yXHkr5l8e1y87vtMg5Vb3OacjpG080c5PC2tjGQSFhJ6L/s
8rJhh9gARXVxkU6PtNuS+epmNguxfvjIykxKMrB5wvdYLaGIRoT1+ZMJGasfAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUon/bO8Ao5NlWSezkW90CUnmsAzowHwYDVR0j
BBgwFoAUiplCGtsdybp/aYN/EIsnp5+++p8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2V2VVFmMlFiMmVwVXh4aXBKQkJIMWZWRE1qUXRUR1V0aUJzb2VrUG9K
a1UvMC84QTk5NDIxQURCMURDOUJBN0Y2OTgzN0YxMDhCMjdBNzlGQkVGQTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBOTk0MjFBREIxREM5QkE3
RjY5ODM3RjEwOEIyN0E3OUZCRUZBOUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NldlVRZjJRYjJlcFV4eGlwSkJCSDFmVkRNalF0VEdVdGlCc29la1BvSmtVLzAv
MzQzNTJlMzYyZTMxMzgzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjMy
MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS0GtjANBgkqhkiG9w0BAQsFAAOCAQEAK1WsRbIOESyo
GuMx7XEdeds8i5Jjfj9toCS7rujfwvaKHvBYptvFR17Fh3X7BrDQoCkPtsFl1ceG
FXKzvBqp4szTS/xOWJdHLzbsgcFBN1GhgLxixSp0IQjX17gqk2TySXRziQdPCpdT
cEXhytpqgXw6/k5tnUvZu+j3QvHCG5Z/zdszAVwG/XwUDOrYpxWP5jqc/4BGNHGF
SuhuKd4motlrRMQ9fcIkLI0xSn0juNjhQ+EOvm6DHE9y+ChAEAIIVyPe84+S6xBn
CSiQa7bnMLRzJHI/7VcoeJJAj3sqeEkPg5nYnSF0o+ia/OqX45AU+/MEOYFR/p27
Crm+n+qRvA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:25 2025 by rpki-client