Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/34352e3138352e3230322e302f32342d3234203d3e20323639343032.roa
File:                     34352e3138352e3230322e302f32342d3234203d3e20323639343032.roa (raw, json)
Hash identifier:          cYlwtUm9Jk+llRR8X6PDW8Sk6B2/vf79zaATD6wfPv0=
Subject key identifier:   03:C0:45:27:21:8B:76:B7:5B:F1:28:DF:B0:2C:A1:82:A2:33:58:34
Certificate issuer:       /CN=03BAAC6EB82828A886F8CBC6692CCD42BF3D6127
Certificate serial:       6DD891DEB7B7DC367FF682323C7F75B0EE190548
Authority key identifier: 03:BA:AC:6E:B8:28:28:A8:86:F8:CB:C6:69:2C:CD:42:BF:3D:61:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BAAC6EB82828A886F8CBC6692CCD42BF3D6127.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/34352e3138352e3230322e302f32342d3234203d3e20323639343032.roa
Signing time:             Fri 24 Dec 2021 18:00:03 +0000
ROA not before:           Fri 24 Dec 2021 17:55:03 +0000
ROA not after:            Fri 23 Dec 2022 18:00:03 +0000
asID:                     269402
IP address blocks:        45.185.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d8:91:de:b7:b7:dc:36:7f:f6:82:32:3c:7f:75:b0:ee:19:05:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03BAAC6EB82828A886F8CBC6692CCD42BF3D6127
        Validity
            Not Before: Dec 24 17:55:03 2021 GMT
            Not After : Dec 23 18:00:03 2022 GMT
        Subject: CN=03C04527218B76B75BF128DFB02CA182A2335834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:ab:54:cf:47:a4:5c:d0:3b:71:9e:08:8d:
                    b8:a9:65:08:d8:55:49:d2:4e:03:a6:31:22:df:f9:
                    55:b7:b7:cd:32:0b:a0:7c:f0:2f:98:3b:30:17:20:
                    24:9b:a8:d9:57:a1:83:e1:a6:3d:68:e1:73:68:c5:
                    9c:e3:e7:30:3c:2f:db:8e:6a:05:c9:34:2e:cf:b1:
                    95:23:bf:d2:c5:df:be:4c:c7:b8:0e:12:93:a0:8c:
                    90:81:05:11:4e:d5:df:30:2f:23:e5:44:55:de:4b:
                    96:91:a0:c9:76:c3:7e:46:a4:61:33:ac:54:20:d7:
                    98:0d:fb:d1:51:af:44:88:97:59:39:94:ee:77:a0:
                    76:df:cd:1d:84:6d:c7:e8:fb:45:63:e7:34:af:aa:
                    23:b8:ef:4d:4a:82:4d:ca:32:11:b3:e6:84:66:d0:
                    3e:21:f7:89:10:11:86:1b:32:15:a0:7d:e1:98:eb:
                    b0:1b:86:4e:cf:36:07:78:17:44:9c:ff:f9:00:c4:
                    c4:63:27:e7:77:18:da:89:c3:a7:6e:14:b7:19:bc:
                    38:e8:82:21:ec:63:40:8d:93:5a:6c:3d:59:7c:31:
                    3d:98:ce:9c:9f:61:80:fa:1d:48:4a:33:90:71:83:
                    56:4b:92:a0:5e:dd:f2:0b:07:1d:ec:07:83:c7:13:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C0:45:27:21:8B:76:B7:5B:F1:28:DF:B0:2C:A1:82:A2:33:58:34
            X509v3 Authority Key Identifier:
                keyid:03:BA:AC:6E:B8:28:28:A8:86:F8:CB:C6:69:2C:CD:42:BF:3D:61:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/03BAAC6EB82828A886F8CBC6692CCD42BF3D6127.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BAAC6EB82828A886F8CBC6692CCD42BF3D6127.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/34352e3138352e3230322e302f32342d3234203d3e20323639343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:0e:86:bf:e0:9b:71:8a:cb:19:14:58:2d:4e:a5:c7:28:e4:
         e4:df:21:13:4c:3f:fa:60:9b:c6:21:72:d4:78:1b:ea:d7:3e:
         b7:2e:23:c1:45:d3:af:ca:1f:7c:32:e6:09:9f:ec:e2:b7:8e:
         68:20:10:c3:82:59:61:98:87:0a:97:da:61:26:13:b4:b9:4c:
         db:be:b2:db:66:6a:9f:79:7e:06:40:fa:fa:53:cd:45:45:b1:
         0e:8f:6f:ca:50:c6:cd:e2:d4:49:e7:32:47:52:ed:4e:e9:13:
         7e:ab:ba:6a:24:84:02:94:b6:a6:d6:50:50:ca:dd:81:bd:54:
         f4:06:38:b0:14:5e:54:39:b3:db:26:73:86:c0:a2:74:a2:83:
         57:77:99:23:1a:ce:ab:1a:5b:fc:af:99:02:cb:84:04:9d:68:
         dd:8f:7b:15:d8:4c:9c:d1:5a:24:cb:be:c1:c4:12:06:09:2d:
         4a:85:49:ad:9c:2e:28:30:10:40:b4:1a:dc:b3:a6:ff:90:8c:
         c4:4b:2c:b3:09:59:18:70:bb:ab:da:38:99:8a:e2:99:3f:82:
         33:2d:34:e8:1d:7a:28:e3:88:cd:a0:7a:83:61:9e:d1:69:10:
         1b:11:f8:94:11:00:55:e4:54:a9:76:59:54:f0:60:02:07:fe:
         d7:8b:33:7d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbdiR3re33DZ/9oIyPH91sO4ZBUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNCQUFDNkVCODI4MjhBODg2RjhDQkM2NjkyQ0NENDJC
RjNENjEyNzAeFw0yMTEyMjQxNzU1MDNaFw0yMjEyMjMxODAwMDNaMDMxMTAvBgNV
BAMTKDAzQzA0NTI3MjE4Qjc2Qjc1QkYxMjhERkIwMkNBMTgyQTIzMzU4MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JqtUz0ekXNA7cZ4IjbipZQjY
VUnSTgOmMSLf+VW3t80yC6B88C+YOzAXICSbqNlXoYPhpj1o4XNoxZzj5zA8L9uO
agXJNC7PsZUjv9LF375Mx7gOEpOgjJCBBRFO1d8wLyPlRFXeS5aRoMl2w35GpGEz
rFQg15gN+9FRr0SIl1k5lO53oHbfzR2Ebcfo+0Vj5zSvqiO4701Kgk3KMhGz5oRm
0D4h94kQEYYbMhWgfeGY67Abhk7PNgd4F0Sc//kAxMRjJ+d3GNqJw6duFLcZvDjo
giHsY0CNk1psPVl8MT2YzpyfYYD6HUhKM5Bxg1ZLkqBe3fILBx3sB4PHE799AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUA8BFJyGLdrdb8SjfsCyhgqIzWDQwHwYDVR0j
BBgwFoAUA7qsbrgoKKiG+MvGaSzNQr89YScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjN5aXVqZFlaNjdVNUJOdG1hd1JDWUtDRWFxUTNtdXhqeWFadUtZd1Zu
MVEvMC8wM0JBQUM2RUI4MjgyOEE4ODZGOENCQzY2OTJDQ0Q0MkJGM0Q2MTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAzQkFBQzZFQjgyODI4QTg4
NkY4Q0JDNjY5MkNDRDQyQkYzRDYxMjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzeWl1amRZWjY3VTVCTnRtYXdSQ1lLQ0VhcVEzbXV4anlhWnVLWXdWbjFRLzAv
MzQzNTJlMzEzODM1MmUzMjMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtucowDQYJKoZIhvcNAQELBQADggEBAFYOhr/g
m3GKyxkUWC1Opcco5OTfIRNMP/pgm8YhctR4G+rXPrcuI8FF06/KH3wy5gmf7OK3
jmggEMOCWWGYhwqX2mEmE7S5TNu+sttmap95fgZA+vpTzUVFsQ6Pb8pQxs3i1Enn
MkdS7U7pE36rumokhAKUtqbWUFDK3YG9VPQGOLAUXlQ5s9smc4bAonSig1d3mSMa
zqsaW/yvmQLLhASdaN2PexXYTJzRWiTLvsHEEgYJLUqFSa2cLigwEEC0Gtyzpv+Q
jMRLLLMJWRhwu6vaOJmK4pk/gjMtNOgdeijjiM2geoNhntFpEBsR+JQRAFXkVKl2
WVTwYAIH/teLM30=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:54 2025 by rpki-client