Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37392e302f32342d3234203d3e20323638383031.roa
File:                     34352e3137332e37392e302f32342d3234203d3e20323638383031.roa (raw, json)
Hash identifier:          rAekEDJgSVmKlY+lZxwUHkHZ4lBMHVdrm2fJ6fGUhVs=
Subject key identifier:   5D:B2:0A:79:33:E0:59:BC:18:12:FE:38:68:AD:A6:5F:D0:96:B6:52
Certificate issuer:       /CN=314CC58029D80C55F7FCC7D6D34604096BE000E9
Certificate serial:       0ACB375BF7BDC8FB287476FA3F0D7C166C8F7F71
Authority key identifier: 31:4C:C5:80:29:D8:0C:55:F7:FC:C7:D6:D3:46:04:09:6B:E0:00:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37392e302f32342d3234203d3e20323638383031.roa
Signing time:             Fri 27 Oct 2023 13:08:47 +0000
ROA not before:           Fri 27 Oct 2023 13:03:47 +0000
ROA not after:            Fri 25 Oct 2024 13:08:47 +0000
asID:                     268801
IP address blocks:        45.173.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cb:37:5b:f7:bd:c8:fb:28:74:76:fa:3f:0d:7c:16:6c:8f:7f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314CC58029D80C55F7FCC7D6D34604096BE000E9
        Validity
            Not Before: Oct 27 13:03:47 2023 GMT
            Not After : Oct 25 13:08:47 2024 GMT
        Subject: CN=5DB20A7933E059BC1812FE3868ADA65FD096B652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:94:4f:ca:d4:f3:32:33:71:a6:8d:cb:6b:
                    28:be:c6:22:91:d6:ed:fb:bc:5f:48:b6:69:fa:f4:
                    a5:09:b7:e0:ec:72:91:d4:31:2e:ff:c0:37:79:b5:
                    e6:76:6d:a9:65:88:dd:65:53:e1:24:a3:80:4a:bb:
                    76:12:04:e0:b8:a0:53:d0:df:8d:2f:bc:81:d1:de:
                    c1:76:b6:24:af:30:d8:fc:76:c6:b0:ff:77:7c:5b:
                    e5:72:c5:1a:48:f4:0c:0b:cb:c7:2d:dc:ea:53:e6:
                    dd:5f:80:e2:11:7b:14:36:aa:f4:ff:92:1a:a9:2a:
                    04:94:ac:34:5e:08:d4:82:e4:b2:22:90:a5:91:05:
                    32:71:f6:94:59:fc:a7:79:e4:13:ed:9e:f8:b3:22:
                    ab:fa:a5:19:2c:77:c2:1a:23:0e:b1:4b:ab:12:b8:
                    04:14:a1:c0:80:72:c1:2f:7a:62:11:fc:a0:f2:4c:
                    22:87:60:0b:de:ac:7c:04:01:77:0b:9d:39:d8:fe:
                    2b:6c:22:89:32:25:f7:53:db:38:84:57:15:7a:31:
                    6b:45:ec:3f:1b:02:d6:43:3d:e9:0f:8b:f2:44:57:
                    88:28:c3:28:ec:c1:e6:e5:23:6a:04:b5:4a:16:6e:
                    67:f5:ee:6a:5f:0f:52:dd:e0:60:9d:df:8a:9c:d2:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B2:0A:79:33:E0:59:BC:18:12:FE:38:68:AD:A6:5F:D0:96:B6:52
            X509v3 Authority Key Identifier:
                keyid:31:4C:C5:80:29:D8:0C:55:F7:FC:C7:D6:D3:46:04:09:6B:E0:00:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37392e302f32342d3234203d3e20323638383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:c6:33:f6:03:16:68:76:8d:e5:86:ac:5b:ca:77:fe:bb:96:
         b8:c0:e0:13:4b:6d:a2:5c:41:83:2e:b0:0b:7a:ea:9c:d5:51:
         57:3c:17:a4:a6:ff:4c:95:e1:7f:26:3e:fa:9b:33:66:1a:fe:
         9a:0f:ae:db:0a:42:ca:2a:17:67:6d:19:4a:81:ed:6e:fe:1d:
         93:e4:0d:77:20:3d:f9:3c:78:db:60:43:27:ba:c5:5f:dc:fb:
         6b:7b:fb:2d:bf:21:a4:a9:07:4b:73:fa:f2:c4:27:f1:80:a2:
         2a:2d:f4:a1:24:7e:c8:53:31:e4:0f:76:bf:4a:43:46:23:6a:
         9d:c1:08:b0:16:78:30:98:df:a8:31:7a:d4:89:d4:c5:ef:dc:
         b6:e8:16:3d:a5:11:66:7b:14:0d:d1:ff:4c:f3:c5:51:58:e8:
         55:85:f9:a2:c7:b2:14:db:1a:68:19:da:37:ed:f4:36:9d:8f:
         36:7c:93:4c:76:fc:8c:47:d9:cd:31:8b:4b:7b:73:34:5a:ba:
         fc:89:bc:f6:b9:b1:a2:94:50:fc:ec:c6:3b:44:69:96:96:0e:
         c3:7e:ca:e2:82:6f:b8:65:5c:9c:09:8d:7a:64:de:16:59:13:
         71:ba:68:0b:db:89:ae:47:7d:e0:b3:6c:15:76:a5:e7:7d:34:
         fd:e3:5f:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCss3W/e9yPsodHb6Pw18FmyPf3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE0Q0M1ODAyOUQ4MEM1NUY3RkNDN0Q2RDM0NjA0MDk2
QkUwMDBFOTAeFw0yMzEwMjcxMzAzNDdaFw0yNDEwMjUxMzA4NDdaMDMxMTAvBgNV
BAMTKDVEQjIwQTc5MzNFMDU5QkMxODEyRkUzODY4QURBNjVGRDA5NkI2NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8JRPytTzMjNxpo3Layi+xiKR
1u37vF9Itmn69KUJt+DscpHUMS7/wDd5teZ2balliN1lU+Eko4BKu3YSBOC4oFPQ
340vvIHR3sF2tiSvMNj8dsaw/3d8W+VyxRpI9AwLy8ct3OpT5t1fgOIRexQ2qvT/
khqpKgSUrDReCNSC5LIikKWRBTJx9pRZ/Kd55BPtnvizIqv6pRksd8IaIw6xS6sS
uAQUocCAcsEvemIR/KDyTCKHYAverHwEAXcLnTnY/itsIokyJfdT2ziEVxV6MWtF
7D8bAtZDPekPi/JEV4gowyjsweblI2oEtUoWbmf17mpfD1Ld4GCd34qc0g1xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXbIKeTPgWbwYEv44aK2mX9CWtlIwHwYDVR0j
BBgwFoAUMUzFgCnYDFX3/MfW00YECWvgAOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGdjR2hzaXg2OXdVNDFRdk1zQldLblpGOFlZb0VXWnFDV1VORWZSRW5N
ck0vMC8zMTRDQzU4MDI5RDgwQzU1RjdGQ0M3RDZEMzQ2MDQwOTZCRTAwMEU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMxNENDNTgwMjlEODBDNTVG
N0ZDQzdENkQzNDYwNDA5NkJFMDAwRTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRnY0doc2l4Njl3VTQxUXZNc0JXS25aRjhZWW9FV1pxQ1dVTkVmUkVuTXJNLzAv
MzQzNTJlMzEzNzMzMmUzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALa1PMA0GCSqGSIb3DQEBCwUAA4IBAQBjxjP2AxZo
do3lhqxbynf+u5a4wOATS22iXEGDLrALeuqc1VFXPBekpv9MleF/Jj76mzNmGv6a
D67bCkLKKhdnbRlKge1u/h2T5A13ID35PHjbYEMnusVf3Ptre/stvyGkqQdLc/ry
xCfxgKIqLfShJH7IUzHkD3a/SkNGI2qdwQiwFngwmN+oMXrUidTF79y26BY9pRFm
exQN0f9M88VRWOhVhfmix7IU2xpoGdo37fQ2nY82fJNMdvyMR9nNMYtLe3M0Wrr8
ibz2ubGilFD87MY7RGmWlg7Dfsrigm+4ZVycCY16ZN4WWRNxumgL24muR33gs2wV
dqXnfTT941/d
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:31:00 2025 by rpki-client