Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3234203d3e20323638303239.roa
File:                     34352e3136382e35322e302f32322d3234203d3e20323638303239.roa (raw, json)
Hash identifier:          agv707KWtBynA666uEyI4G1ZtXQV5jfGgQLhuEYTQaE=
Subject key identifier:   8E:E1:AB:2D:8D:0C:B5:EF:6F:E7:5F:9B:D9:C2:39:D5:C6:BB:75:47
Certificate issuer:       /CN=1F732040F001D9B14A3D546E4DD3C7E056BC5D3D
Certificate serial:       18FC822D0AF1032C93420196FE702C0641CD3CB2
Authority key identifier: 1F:73:20:40:F0:01:D9:B1:4A:3D:54:6E:4D:D3:C7:E0:56:BC:5D:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F732040F001D9B14A3D546E4DD3C7E056BC5D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3234203d3e20323638303239.roa
Signing time:             Thu 17 Nov 2022 21:15:20 +0000
ROA not before:           Thu 17 Nov 2022 21:10:20 +0000
ROA not after:            Thu 16 Nov 2023 21:15:20 +0000
asID:                     268029
IP address blocks:        45.168.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fc:82:2d:0a:f1:03:2c:93:42:01:96:fe:70:2c:06:41:cd:3c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F732040F001D9B14A3D546E4DD3C7E056BC5D3D
        Validity
            Not Before: Nov 17 21:10:20 2022 GMT
            Not After : Nov 16 21:15:20 2023 GMT
        Subject: CN=8EE1AB2D8D0CB5EF6FE75F9BD9C239D5C6BB7547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:da:88:bc:74:a7:c3:cf:06:07:2d:f4:6f:07:
                    37:e0:49:72:05:02:e5:2d:6e:a0:8a:88:86:ab:88:
                    f9:5e:1c:1a:89:a2:05:9d:c5:e3:e2:88:db:e1:50:
                    c2:85:f9:7b:33:9d:44:55:d6:94:bd:3a:9a:01:f3:
                    57:c0:ee:d7:31:c2:49:00:3c:bc:79:14:06:18:84:
                    a5:d3:da:e7:e0:f7:7b:5b:8b:44:76:e1:26:fc:e4:
                    33:7d:a1:fc:4d:3b:aa:75:f9:00:83:98:87:9c:e1:
                    b9:d8:8f:38:2a:96:d6:34:d7:15:35:c5:63:3d:4e:
                    c1:44:d0:92:07:4c:80:a2:86:09:da:e8:a1:46:3b:
                    5c:b4:ff:b2:13:f4:22:ef:d3:d9:3d:72:c8:a2:bb:
                    1a:27:08:63:f2:9c:ca:97:5b:37:8e:54:8e:de:a9:
                    cc:54:a4:ed:cb:c7:28:bd:29:81:e8:31:b7:f8:68:
                    d2:d4:38:b2:3e:62:85:7b:5b:8d:a2:f5:46:67:f9:
                    be:e4:73:3f:ab:83:60:71:05:d5:9a:e3:5a:72:21:
                    0f:51:a8:06:e2:e9:7c:83:b5:fe:8a:45:d0:1f:38:
                    84:a2:9f:7d:b8:b9:0e:b0:36:aa:e7:26:70:48:97:
                    e2:db:e6:44:2c:73:f0:dc:dc:06:d1:99:05:dc:d0:
                    e5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E1:AB:2D:8D:0C:B5:EF:6F:E7:5F:9B:D9:C2:39:D5:C6:BB:75:47
            X509v3 Authority Key Identifier:
                keyid:1F:73:20:40:F0:01:D9:B1:4A:3D:54:6E:4D:D3:C7:E0:56:BC:5D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/1F732040F001D9B14A3D546E4DD3C7E056BC5D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F732040F001D9B14A3D546E4DD3C7E056BC5D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3234203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:ba:08:fd:da:57:b6:2f:80:82:6d:55:3f:a2:31:7d:7b:38:
         ab:e5:97:d3:ea:10:46:27:10:69:49:3f:4d:af:0b:6e:71:ef:
         13:c4:f3:c6:cd:c3:07:42:5c:7c:e7:43:c4:e4:64:50:77:6b:
         30:e1:c8:41:71:4c:bc:72:ae:3d:25:2b:c7:70:2f:e7:bf:55:
         7f:c5:37:ef:f6:bc:6a:c2:50:ee:e2:da:0f:a8:fc:c3:4b:88:
         7f:af:48:6b:ea:ee:76:8b:01:49:41:33:e4:b9:f0:91:ac:f3:
         a7:3d:2c:48:ff:33:85:bd:b4:7c:d9:53:00:e7:bc:12:ba:d7:
         4b:9f:0a:5c:b4:bd:ce:63:ed:a4:85:63:ed:04:16:64:f2:f6:
         9f:95:48:0a:e1:3d:48:b0:ea:ba:30:08:0b:46:ac:e6:e9:ed:
         c2:ae:86:90:96:33:46:27:8a:5d:c7:cb:e0:60:db:00:da:8b:
         d2:35:b9:2c:30:c4:d9:4d:01:f1:1e:8e:70:57:63:6d:1a:bd:
         b1:ef:ff:05:af:d0:6b:92:36:12:e7:fe:c3:84:96:ca:ea:de:
         9d:69:f3:a9:84:c4:5b:10:5a:95:0b:c6:14:ff:e7:0a:06:9c:
         c6:f8:3f:cb:96:64:e8:20:31:29:05:58:42:ea:8f:38:14:b2:
         55:c4:9f:a5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGPyCLQrxAyyTQgGW/nAsBkHNPLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY3MzIwNDBGMDAxRDlCMTRBM0Q1NDZFNEREM0M3RTA1
NkJDNUQzRDAeFw0yMjExMTcyMTEwMjBaFw0yMzExMTYyMTE1MjBaMDMxMTAvBgNV
BAMTKDhFRTFBQjJEOEQwQ0I1RUY2RkU3NUY5QkQ5QzIzOUQ1QzZCQjc1NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx2oi8dKfDzwYHLfRvBzfgSXIF
AuUtbqCKiIariPleHBqJogWdxePiiNvhUMKF+XsznURV1pS9OpoB81fA7tcxwkkA
PLx5FAYYhKXT2ufg93tbi0R24Sb85DN9ofxNO6p1+QCDmIec4bnYjzgqltY01xU1
xWM9TsFE0JIHTICihgna6KFGO1y0/7IT9CLv09k9csiiuxonCGPynMqXWzeOVI7e
qcxUpO3Lxyi9KYHoMbf4aNLUOLI+YoV7W42i9UZn+b7kcz+rg2BxBdWa41pyIQ9R
qAbi6XyDtf6KRdAfOISin324uQ6wNqrnJnBIl+Lb5kQsc/Dc3AbRmQXc0OUZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjuGrLY0Mte9v51+b2cI51ca7dUcwHwYDVR0j
BBgwFoAUH3MgQPAB2bFKPVRuTdPH4Fa8XT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkZuRkNGNThVVWd6U3RiRExuNmtBdFQ3NGplVERXNUFyZzhCSGVvRmpl
Y1UvMC8xRjczMjA0MEYwMDFEOUIxNEEzRDU0NkU0REQzQzdFMDU2QkM1RDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGNzMyMDQwRjAwMUQ5QjE0
QTNENTQ2RTRERDNDN0UwNTZCQzVEM0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZGbkZDRjU4VVVnelN0YkRMbjZrQXRUNzRqZVREVzVBcmc4Qkhlb0ZqZWNVLzAv
MzQzNTJlMzEzNjM4MmUzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLag0MA0GCSqGSIb3DQEBCwUAA4IBAQCJugj92le2
L4CCbVU/ojF9ezir5ZfT6hBGJxBpST9Nrwtuce8TxPPGzcMHQlx850PE5GRQd2sw
4chBcUy8cq49JSvHcC/nv1V/xTfv9rxqwlDu4toPqPzDS4h/r0hr6u52iwFJQTPk
ufCRrPOnPSxI/zOFvbR82VMA57wSutdLnwpctL3OY+2khWPtBBZk8vaflUgK4T1I
sOq6MAgLRqzm6e3CroaQljNGJ4pdx8vgYNsA2ovSNbksMMTZTQHxHo5wV2NtGr2x
7/8Fr9BrkjYS5/7DhJbK6t6dafOphMRbEFqVC8YU/+cKBpzG+D/LlmToIDEpBVhC
6o84FLJVxJ+l
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:30 2025 by rpki-client