Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134382e302f32322d3332203d3e20323638333732.roa
File:                     34352e3233392e3134382e302f32322d3332203d3e20323638333732.roa (raw, json)
Hash identifier:          p/IX6SapCPJPRjSywanDsvGVdz0SBfcqHrjF724hvX4=
Subject key identifier:   EB:B4:C8:DC:66:1E:B2:E7:07:C5:ED:51:D6:59:87:AB:CC:87:EA:1B
Certificate issuer:       /CN=4E543AA50EF098AA6EA925D72F3740ECB1497625
Certificate serial:       162A967FB85CDDC77310D6C87170A593FCDD08A9
Authority key identifier: 4E:54:3A:A5:0E:F0:98:AA:6E:A9:25:D7:2F:37:40:EC:B1:49:76:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E543AA50EF098AA6EA925D72F3740ECB1497625.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134382e302f32322d3332203d3e20323638333732.roa
Signing time:             Sat 28 Sep 2024 00:57:54 +0000
ROA not before:           Sat 28 Sep 2024 00:52:54 +0000
ROA not after:            Sat 27 Sep 2025 00:57:54 +0000
asID:                     268372
IP address blocks:        45.239.148.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2a:96:7f:b8:5c:dd:c7:73:10:d6:c8:71:70:a5:93:fc:dd:08:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E543AA50EF098AA6EA925D72F3740ECB1497625
        Validity
            Not Before: Sep 28 00:52:54 2024 GMT
            Not After : Sep 27 00:57:54 2025 GMT
        Subject: CN=EBB4C8DC661EB2E707C5ED51D65987ABCC87EA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:d0:a3:81:3d:68:43:cd:9f:60:47:68:f8:
                    40:63:8f:ec:f7:c0:43:04:7a:78:54:cb:de:da:fe:
                    1c:da:2e:b0:4a:cb:10:15:fb:4f:eb:5c:02:a6:d1:
                    ad:cd:10:28:35:57:e2:75:e7:26:d1:14:71:a8:bb:
                    3f:e0:11:6c:1f:6d:be:65:d9:39:f8:b4:85:84:7e:
                    19:51:d0:c7:78:46:12:1a:91:97:6c:bc:f3:29:aa:
                    c8:d1:d1:32:53:b6:0b:3b:98:13:e6:bd:f5:ca:35:
                    be:79:33:59:f7:1c:18:1a:94:1b:34:af:52:cc:8d:
                    36:ea:75:bb:23:b1:de:66:14:6c:1e:7f:13:b7:e7:
                    0c:c9:7e:e6:f3:28:df:da:1f:9a:73:43:b8:bb:3c:
                    6d:9b:a5:3b:97:f4:8c:41:53:73:4a:3f:85:ae:09:
                    6b:7b:ab:47:be:e6:f7:d4:f1:95:30:69:05:06:3e:
                    21:78:9e:65:88:1b:5c:27:ac:93:65:8e:37:9b:e8:
                    9f:99:57:7f:06:c6:4c:35:be:0b:b1:d6:46:cc:a8:
                    71:ef:86:a8:8a:aa:e2:57:03:dd:b2:0d:11:fe:8e:
                    19:16:9d:ad:ea:e9:87:68:bf:f0:00:16:22:ce:37:
                    21:28:ab:1b:ab:28:80:99:1e:85:91:7c:fc:7e:65:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B4:C8:DC:66:1E:B2:E7:07:C5:ED:51:D6:59:87:AB:CC:87:EA:1B
            X509v3 Authority Key Identifier:
                keyid:4E:54:3A:A5:0E:F0:98:AA:6E:A9:25:D7:2F:37:40:EC:B1:49:76:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/4E543AA50EF098AA6EA925D72F3740ECB1497625.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E543AA50EF098AA6EA925D72F3740ECB1497625.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134382e302f32322d3332203d3e20323638333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:a0:87:b7:4a:49:fd:ba:de:2b:05:15:d5:6e:c5:1d:82:a1:
         45:ab:da:54:a1:be:ff:ec:b4:eb:58:83:bf:bf:36:db:af:b1:
         db:27:26:b9:cb:90:ce:89:d3:ea:f3:17:6a:3a:b4:a5:50:1b:
         f7:05:00:5d:ff:bc:8a:5e:0e:cc:c4:c2:a0:46:be:8d:7d:5c:
         c0:3d:ae:2b:0c:3e:16:15:66:35:6a:cf:30:45:72:6a:d0:6b:
         a4:a4:4f:83:64:00:8b:d2:e8:72:39:38:4f:5a:7b:2e:c5:22:
         e8:5d:6e:86:a2:31:e6:45:f1:8a:87:49:75:5b:3a:d9:38:19:
         2e:cf:70:9d:17:51:93:c0:44:ec:0a:52:2e:c8:9e:53:de:7c:
         01:3b:0e:4e:6c:b0:1d:ff:f3:a4:76:5a:15:85:de:b2:36:20:
         55:7c:83:bb:0a:f2:da:c4:42:cf:fd:a9:8f:b9:b0:03:9c:6e:
         65:cb:ea:78:9c:28:20:1f:e6:a4:2b:c6:ce:8f:f3:b3:4c:f1:
         3d:7f:e4:36:b5:5a:e0:ae:8d:a7:34:d1:40:37:50:ea:8b:20:
         0f:e0:8d:db:73:a0:85:59:33:67:55:74:07:a1:94:24:8b:8e:
         52:00:1d:9a:f9:de:a1:70:14:bf:a3:f3:2b:f3:ef:bb:eb:d9:
         79:99:40:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFiqWf7hc3cdzENbIcXClk/zdCKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU1NDNBQTUwRUYwOThBQTZFQTkyNUQ3MkYzNzQwRUNC
MTQ5NzYyNTAeFw0yNDA5MjgwMDUyNTRaFw0yNTA5MjcwMDU3NTRaMDMxMTAvBgNV
BAMTKEVCQjRDOERDNjYxRUIyRTcwN0M1RUQ1MUQ2NTk4N0FCQ0M4N0VBMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKw9CjgT1oQ82fYEdo+EBjj+z3
wEMEenhUy97a/hzaLrBKyxAV+0/rXAKm0a3NECg1V+J15ybRFHGouz/gEWwfbb5l
2Tn4tIWEfhlR0Md4RhIakZdsvPMpqsjR0TJTtgs7mBPmvfXKNb55M1n3HBgalBs0
r1LMjTbqdbsjsd5mFGwefxO35wzJfubzKN/aH5pzQ7i7PG2bpTuX9IxBU3NKP4Wu
CWt7q0e+5vfU8ZUwaQUGPiF4nmWIG1wnrJNljjeb6J+ZV38Gxkw1vgux1kbMqHHv
hqiKquJXA92yDRH+jhkWna3q6Ydov/AAFiLONyEoqxurKICZHoWRfPx+ZfkpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU67TI3GYesucHxe1R1lmHq8yH6hswHwYDVR0j
BBgwFoAUTlQ6pQ7wmKpuqSXXLzdA7LFJdiUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnRyaU5hcWVGcWVDcHN1bTNnYzJzbWtlNHpHOTVpRzhSeUdjWXJrcEta
UEIvMC80RTU0M0FBNTBFRjA5OEFBNkVBOTI1RDcyRjM3NDBFQ0IxNDk3NjI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFNTQzQUE1MEVGMDk4QUE2
RUE5MjVENzJGMzc0MEVDQjE0OTc2MjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z0cmlOYXFlRnFlQ3BzdW0zZ2Myc21rZTR6Rzk1aUc4UnlHY1lya3BLWlBCLzAv
MzQzNTJlMzIzMzM5MmUzMTM0MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzMzM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt75QwDQYJKoZIhvcNAQELBQADggEBAHigh7dK
Sf263isFFdVuxR2CoUWr2lShvv/stOtYg7+/NtuvsdsnJrnLkM6J0+rzF2o6tKVQ
G/cFAF3/vIpeDszEwqBGvo19XMA9risMPhYVZjVqzzBFcmrQa6SkT4NkAIvS6HI5
OE9aey7FIuhdboaiMeZF8YqHSXVbOtk4GS7PcJ0XUZPAROwKUi7InlPefAE7Dk5s
sB3/86R2WhWF3rI2IFV8g7sK8trEQs/9qY+5sAOcbmXL6nicKCAf5qQrxs6P87NM
8T1/5Da1WuCujac00UA3UOqLIA/gjdtzoIVZM2dVdAehlCSLjlIAHZr53qFwFL+j
8yvz77vr2XmZQJU=
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:26:37 2025 by rpki-client