Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2HsbXxAatJJJNS7AwjwvPSbgUXJcGfRjn4MHuh5QTHPf/0/34352e3138312e3230382e302f32322d3234203d3e20323639323031.roa
File:                     34352e3138312e3230382e302f32322d3234203d3e20323639323031.roa (raw, json)
Hash identifier:          RM3lbXOgv/WmiHG8Q7hNDm+G9IHhhKBiWNk1VywGibI=
Subject key identifier:   B5:61:6D:38:C0:AE:4A:F8:62:51:94:5C:AA:18:16:4F:DD:44:8B:D3
Certificate issuer:       /CN=ABEDC4B9BD20C53B27C36B9A70A9A7964D0E717A
Certificate serial:       6803F862BB8A3A52D9E67750726AAA037D82E01F
Authority key identifier: AB:ED:C4:B9:BD:20:C5:3B:27:C3:6B:9A:70:A9:A7:96:4D:0E:71:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABEDC4B9BD20C53B27C36B9A70A9A7964D0E717A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2HsbXxAatJJJNS7AwjwvPSbgUXJcGfRjn4MHuh5QTHPf/0/34352e3138312e3230382e302f32322d3234203d3e20323639323031.roa
Signing time:             Sat 27 Aug 2022 16:00:00 +0000
ROA not before:           Sat 27 Aug 2022 15:55:00 +0000
ROA not after:            Sun 27 Aug 2023 16:00:00 +0000
asID:                     269201
IP address blocks:        45.181.208.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:03:f8:62:bb:8a:3a:52:d9:e6:77:50:72:6a:aa:03:7d:82:e0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDC4B9BD20C53B27C36B9A70A9A7964D0E717A
        Validity
            Not Before: Aug 27 15:55:00 2022 GMT
            Not After : Aug 27 16:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:3c:76:59:1c:e7:ee:77:e7:c3:07:e0:95:
                    3f:2a:f1:be:13:d2:c5:51:9e:8c:00:47:4c:33:05:
                    49:75:73:be:01:70:70:5b:6d:01:42:44:6c:ea:3e:
                    77:f4:52:75:f5:79:90:cf:65:9c:2e:4a:da:14:89:
                    fd:b6:94:61:53:30:9f:7c:6e:91:c6:f6:fc:05:ad:
                    16:49:5f:f6:79:5a:ec:7e:89:fe:fa:d1:09:de:96:
                    62:fb:cb:77:78:6e:fc:76:6b:fc:5b:04:67:d1:ce:
                    9e:6f:16:9d:ed:77:ad:b3:f3:a8:b8:e4:71:ca:32:
                    6d:64:aa:a3:89:04:d6:5f:fc:a0:09:e2:08:8d:09:
                    04:eb:70:6c:bb:9d:b6:b8:a9:bd:cb:4b:b5:ed:95:
                    4a:94:ad:dd:ec:3b:4c:a4:33:dd:de:b3:b6:4d:98:
                    4c:fc:0a:70:25:e8:ff:dd:2b:75:5f:3a:15:0f:ca:
                    d1:b9:c8:12:06:1d:71:eb:54:86:1f:0c:fd:f7:34:
                    16:b4:ce:e0:89:b4:d6:17:2b:4a:dd:09:44:18:9b:
                    3c:74:15:01:1d:78:e7:38:c9:98:86:40:9f:81:6b:
                    20:70:6a:8e:74:65:39:3a:e2:56:6a:57:0d:ca:ab:
                    5f:b9:d4:cf:06:60:6a:64:44:fb:4b:fa:bb:d7:94:
                    6b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:6D:38:C0:AE:4A:F8:62:51:94:5C:AA:18:16:4F:DD:44:8B:D3
            X509v3 Authority Key Identifier:
                keyid:AB:ED:C4:B9:BD:20:C5:3B:27:C3:6B:9A:70:A9:A7:96:4D:0E:71:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2HsbXxAatJJJNS7AwjwvPSbgUXJcGfRjn4MHuh5QTHPf/0/ABEDC4B9BD20C53B27C36B9A70A9A7964D0E717A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABEDC4B9BD20C53B27C36B9A70A9A7964D0E717A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2HsbXxAatJJJNS7AwjwvPSbgUXJcGfRjn4MHuh5QTHPf/0/34352e3138312e3230382e302f32322d3234203d3e20323639323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:c8:78:02:3d:54:b3:d8:6e:0f:0e:aa:4a:49:2f:d2:13:91:
         86:51:51:d6:36:43:9f:af:78:f4:ad:2c:92:3e:7e:a7:6d:23:
         ef:a4:5c:97:27:c4:04:59:93:04:9c:55:f5:d4:db:a2:b5:58:
         02:e9:74:31:83:44:88:c0:06:d1:1e:77:f8:6e:2d:be:fe:b1:
         c9:40:46:31:95:a7:cd:35:dd:bf:4e:16:95:4b:3a:f9:2f:d2:
         f5:63:66:37:8d:6f:88:86:c8:5f:2a:1f:f8:20:60:00:a8:e6:
         5e:15:dc:c8:df:30:be:14:f2:01:87:83:0c:22:60:38:f3:26:
         ff:77:64:6a:09:90:8e:3e:7c:3a:13:ae:61:21:3d:83:5e:79:
         0a:d9:5e:67:94:91:6c:52:4c:01:03:f6:e9:88:85:3e:cb:3d:
         bd:f5:10:ae:40:e1:d0:5f:84:7b:be:5b:ad:95:fe:56:9c:0c:
         4a:ac:88:9c:2a:f4:2a:0a:d7:09:a4:fd:f0:dc:23:f6:21:e8:
         af:3d:df:5a:31:e6:06:ea:54:c9:d9:51:8a:20:78:a5:8e:5f:
         a7:db:23:8f:02:ee:32:4b:1f:40:86:b4:94:67:a1:31:ae:56:
         3f:34:4b:c4:2a:37:4f:9a:58:0e:fc:86:b1:f4:0e:51:e0:cf:
         b5:85:b6:c2
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUaAP4YruKOlLZ5ndQcmqqA32C4B8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJFREM0QjlCRDIwQzUzQjI3QzM2QjlBNzBBOUE3OTY0
RDBFNzE3QTAeFw0yMjA4MjcxNTU1MDBaFw0yMzA4MjcxNjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUFERDNDNzY1OTFDRTdFRTc3
RTdDMzA3RTA5NTNGMkFGMUJFMTNEMkM1NTE5RThDMDA0NzRDMzMwNTQ5NzU3M0JF
MDE3MDcwNUI2RDAxNDI0NDZDRUEzRTc3RjQ1Mjc1RjU3OTkwQ0Y2NTlDMkU0QURB
MTQ4OUZEQjY5NDYxNTMzMDlGN0M2RTkxQzZGNkZDMDVBRDE2NDk1RkY2Nzk1QUVD
N0U4OUZFRkFEMTA5REU5NjYyRkJDQjc3Nzg2RUZDNzY2QkZDNUIwNDY3RDFDRTlF
NkYxNjlERUQ3N0FEQjNGM0E4QjhFNDcxQ0EzMjZENjRBQUEzODkwNEQ2NUZGQ0Ew
MDlFMjA4OEQwOTA0RUI3MDZDQkI5REI2QjhBOUJEQ0I0QkI1RUQ5NTRBOTRBRERE
RUMzQjRDQTQzM0REREVCM0I2NEQ5ODRDRkMwQTcwMjVFOEZGREQyQjc1NUYzQTE1
MEZDQUQxQjlDODEyMDYxRDcxRUI1NDg2MUYwQ0ZERjczNDE2QjRDRUUwODlCNEQ2
MTcyQjRBREQwOTQ0MTg5QjNDNzQxNTAxMUQ3OEU3MzhDOTk4ODY0MDlGODE2QjIw
NzA2QThFNzQ2NTM5M0FFMjU2NkE1NzBEQ0FBQjVGQjlENENGMDY2MDZBNjQ0NEZC
NEJGQUJCRDc5NDZCOTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmt08dlkc5+5358MH4JU/KvG+E9LFUZ6MAEdMMwVJdXO+AXBwW20B
QkRs6j539FJ19XmQz2WcLkraFIn9tpRhUzCffG6Rxvb8Ba0WSV/2eVrsfon++tEJ
3pZi+8t3eG78dmv8WwRn0c6ebxad7Xets/OouORxyjJtZKqjiQTWX/ygCeIIjQkE
63Bsu522uKm9y0u17ZVKlK3d7DtMpDPd3rO2TZhM/ApwJej/3St1XzoVD8rRucgS
Bh1x61SGHwz99zQWtM7gibTWFytK3QlEGJs8dBUBHXjnOMmYhkCfgWsgcGqOdGU5
OuJWalcNyqtfudTPBmBqZET7S/q715RrlQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLVhbTjArkr4YlGUXKoYFk/dRIvTMB8GA1UdIwQYMBaAFKvtxLm9IMU7J8NrmnCp
p5ZNDnF6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJIc2JYeEFhdEpKSk5T
N0F3and2UFNiZ1VYSmNHZlJqbjRNSHVoNVFUSFBmLzAvQUJFREM0QjlCRDIwQzUz
QjI3QzM2QjlBNzBBOUE3OTY0RDBFNzE3QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQkVEQzRCOUJEMjBDNTNCMjdDMzZCOUE3MEE5QTc5NjREMEU3
MTdBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ySHNiWHhBYXRKSkpOUzdBd2p3
dlBTYmdVWEpjR2ZSam40TUh1aDVRVEhQZi8wLzM0MzUyZTMxMzgzMTJlMzIzMDM4
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5MzIzMDMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LbXQMA0GCSqGSIb3DQEBCwUAA4IBAQBAyHgCPVSz2G4PDqpKSS/SE5GGUVHWNkOf
r3j0rSySPn6nbSPvpFyXJ8QEWZMEnFX11NuitVgC6XQxg0SIwAbRHnf4bi2+/rHJ
QEYxlafNNd2/ThaVSzr5L9L1Y2Y3jW+IhshfKh/4IGAAqOZeFdzI3zC+FPIBh4MM
ImA48yb/d2RqCZCOPnw6E65hIT2DXnkK2V5nlJFsUkwBA/bpiIU+yz299RCuQOHQ
X4R7vlutlf5WnAxKrIicKvQqCtcJpP3w3CP2IeivPd9aMeYG6lTJ2VGKIHiljl+n
2yOPAu4ySx9AhrSUZ6ExrlY/NEvEKjdPmlgO/Iax9A5R4M+1hbbC
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:16 2025 by rpki-client