Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa
File:                     34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa (raw, json)
Hash identifier:          Ni4y1VgxZUGT9np7Oz3ww7lyjq3c6WPiCCfX7NMJ3ho=
Subject key identifier:   2C:0A:89:6A:E5:E8:0A:55:B3:90:6B:C8:10:75:3A:65:EF:74:FC:E3
Certificate issuer:       /CN=DC40E61CDCBC1E2ADAB99017EA481017DE0593A3
Certificate serial:       0230305274FA644375C73A58716B71986149E1BA
Authority key identifier: DC:40:E6:1C:DC:BC:1E:2A:DA:B9:90:17:EA:48:10:17:DE:05:93:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa
Signing time:             Fri 24 Jan 2025 17:29:25 +0000
ROA not before:           Fri 24 Jan 2025 17:24:25 +0000
ROA not after:            Fri 23 Jan 2026 17:29:25 +0000
asID:                     267022
IP address blocks:        45.226.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:30:30:52:74:fa:64:43:75:c7:3a:58:71:6b:71:98:61:49:e1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC40E61CDCBC1E2ADAB99017EA481017DE0593A3
        Validity
            Not Before: Jan 24 17:24:25 2025 GMT
            Not After : Jan 23 17:29:25 2026 GMT
        Subject: CN=2C0A896AE5E80A55B3906BC810753A65EF74FCE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:a4:36:e2:a2:3f:98:36:05:33:7a:e2:81:
                    2b:d4:03:74:80:85:ae:ef:79:e8:fa:7c:61:b7:3b:
                    fe:4c:58:77:81:99:08:b0:50:6c:10:ac:87:4d:61:
                    09:79:07:5e:a1:48:f0:ae:3b:9f:78:56:07:27:28:
                    f1:1c:8e:45:5f:a4:1a:1c:99:cb:ef:e5:4b:55:2f:
                    54:46:8a:1e:17:a4:26:cc:eb:01:9c:ce:4a:94:f4:
                    7f:62:53:16:05:58:32:59:ed:20:40:ef:31:8a:36:
                    a3:f9:57:17:90:aa:23:bb:de:84:8a:d5:fd:6f:68:
                    bf:3c:9e:c9:52:53:62:aa:b3:5d:10:68:55:f8:2c:
                    69:75:89:4b:2c:85:63:52:5a:d2:48:ab:8e:c8:5c:
                    64:db:08:cc:b7:87:8d:5a:75:c1:6c:fb:25:75:ab:
                    2a:93:9a:e0:d3:34:43:75:0c:4b:e9:1a:50:50:33:
                    3a:e3:0c:17:e1:5b:3f:41:eb:a7:7a:f6:f7:48:58:
                    12:73:0d:40:87:df:1c:3e:ed:8f:86:01:ef:26:cf:
                    08:1b:19:94:42:6b:60:a3:06:f9:ae:6b:e6:5a:85:
                    87:4b:d8:ec:d6:f5:83:5d:68:d6:ae:35:9c:0c:5f:
                    08:e0:24:8c:98:3d:c3:41:0b:36:f8:94:99:83:96:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0A:89:6A:E5:E8:0A:55:B3:90:6B:C8:10:75:3A:65:EF:74:FC:E3
            X509v3 Authority Key Identifier:
                keyid:DC:40:E6:1C:DC:BC:1E:2A:DA:B9:90:17:EA:48:10:17:DE:05:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:68:1b:49:20:7a:6f:5a:ca:a2:b2:f4:4f:4b:18:2c:1a:
         c3:8e:72:77:0d:8a:86:a1:66:01:9a:ef:6d:b0:c7:65:50:ce:
         ad:00:83:07:a8:00:e8:d3:6e:41:e2:6a:fe:40:aa:72:9d:4b:
         69:e1:10:f1:0c:47:5e:31:f6:43:c1:c0:b7:bd:ff:c6:a5:95:
         ce:52:13:23:b1:bf:e6:b9:21:d9:50:b2:eb:18:00:50:df:0c:
         0b:4f:83:94:e7:ab:ca:36:84:6a:06:cf:ca:04:6b:5d:e8:f7:
         81:af:d9:dc:a5:e4:e9:25:95:cc:39:31:f1:c3:86:0b:62:54:
         40:04:84:64:5a:f9:d4:c8:11:8c:a3:d9:c5:e6:cc:a5:b8:40:
         6a:35:aa:40:e1:01:56:79:18:52:bc:00:4a:ca:98:ea:83:5a:
         18:7e:21:2b:ca:1e:ac:0c:88:8f:be:15:b1:06:f9:fd:c4:c4:
         c4:74:33:06:77:16:11:22:9d:25:17:fe:49:6c:0f:ac:df:39:
         95:86:2f:98:3b:ab:8e:85:a2:05:bc:32:ee:ba:00:ea:20:f5:
         8d:4d:ca:c4:5f:0f:24:6d:c0:60:82:4c:f6:0f:7a:5e:e7:a1:
         e7:e6:72:2c:7c:65:0a:c6:09:1e:dc:88:19:eb:d2:4f:f4:71:
         32:33:84:62
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAjAwUnT6ZEN1xzpYcWtxmGFJ4bowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM0MEU2MUNEQ0JDMUUyQURBQjk5MDE3RUE0ODEwMTdE
RTA1OTNBMzAeFw0yNTAxMjQxNzI0MjVaFw0yNjAxMjMxNzI5MjVaMDMxMTAvBgNV
BAMTKDJDMEE4OTZBRTVFODBBNTVCMzkwNkJDODEwNzUzQTY1RUY3NEZDRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2laQ24qI/mDYFM3rigSvUA3SA
ha7veej6fGG3O/5MWHeBmQiwUGwQrIdNYQl5B16hSPCuO594VgcnKPEcjkVfpBoc
mcvv5UtVL1RGih4XpCbM6wGczkqU9H9iUxYFWDJZ7SBA7zGKNqP5VxeQqiO73oSK
1f1vaL88nslSU2Kqs10QaFX4LGl1iUsshWNSWtJIq47IXGTbCMy3h41adcFs+yV1
qyqTmuDTNEN1DEvpGlBQMzrjDBfhWz9B66d69vdIWBJzDUCH3xw+7Y+GAe8mzwgb
GZRCa2CjBvmua+ZahYdL2OzW9YNdaNauNZwMXwjgJIyYPcNBCzb4lJmDlkkbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULAqJauXoClWzkGvIEHU6Ze90/OMwHwYDVR0j
BBgwFoAU3EDmHNy8HirauZAX6kgQF94Fk6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzk0emFENk5DUDk2azc3Z2RabUcyN3RDbnNuSFNMem9ieG5lNDJ3UEo4
YlcvMC9EQzQwRTYxQ0RDQkMxRTJBREFCOTkwMTdFQTQ4MTAxN0RFMDU5M0EzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDNDBFNjFDRENCQzFFMkFE
QUI5OTAxN0VBNDgxMDE3REUwNTkzQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M5NHphRDZOQ1A5Nms3N2dkWm1HMjd0Q25zbkhTTHpvYnhuZTQyd1BKOGJXLzAv
MzQzNTJlMzIzMjM2MmUzMjM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4vAwDQYJKoZIhvcNAQELBQADggEBAFveaBtJ
IHpvWsqisvRPSxgsGsOOcncNioahZgGa722wx2VQzq0AgweoAOjTbkHiav5AqnKd
S2nhEPEMR14x9kPBwLe9/8allc5SEyOxv+a5IdlQsusYAFDfDAtPg5Tnq8o2hGoG
z8oEa13o94Gv2dyl5Okllcw5MfHDhgtiVEAEhGRa+dTIEYyj2cXmzKW4QGo1qkDh
AVZ5GFK8AErKmOqDWhh+ISvKHqwMiI++FbEG+f3ExMR0MwZ3FhEinSUX/klsD6zf
OZWGL5g7q46FogW8Mu66AOog9Y1NysRfDyRtwGCCTPYPel7noefmcix8ZQrGCR7c
iBnr0k/0cTIzhGI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:40:47 2025 by rpki-client