Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233362e302f32322d3232203d3e20323639313032.roa
File:                     34352e3137382e3233362e302f32322d3232203d3e20323639313032.roa (raw, json)
Hash identifier:          HGEr5XlTuRwMxJ5yc3rmsZyYuKqz+6yQa/ec8vhNUkE=
Subject key identifier:   F1:79:23:05:18:FD:64:58:26:4C:08:D8:48:C6:EA:16:16:3D:FD:EF
Certificate issuer:       /CN=CB460E2365040598EFBCA2885EBA996AE5111964
Certificate serial:       408CADAD8070C034D59F733C2228AEC4482E3584
Authority key identifier: CB:46:0E:23:65:04:05:98:EF:BC:A2:88:5E:BA:99:6A:E5:11:19:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB460E2365040598EFBCA2885EBA996AE5111964.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233362e302f32322d3232203d3e20323639313032.roa
Signing time:             Fri 08 Nov 2024 13:23:16 +0000
ROA not before:           Fri 08 Nov 2024 13:18:16 +0000
ROA not after:            Fri 07 Nov 2025 13:23:16 +0000
asID:                     269102
IP address blocks:        45.178.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8c:ad:ad:80:70:c0:34:d5:9f:73:3c:22:28:ae:c4:48:2e:35:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB460E2365040598EFBCA2885EBA996AE5111964
        Validity
            Not Before: Nov  8 13:18:16 2024 GMT
            Not After : Nov  7 13:23:16 2025 GMT
        Subject: CN=F179230518FD6458264C08D848C6EA16163DFDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f9:b6:06:c3:2d:b0:33:a9:39:6c:a1:50:5a:
                    83:1d:85:e2:09:94:4d:d4:20:2c:76:f6:c6:d8:6e:
                    03:39:e9:84:b5:aa:e3:a0:37:59:07:ba:7d:b5:4d:
                    8a:cb:7f:c7:17:67:51:4f:fb:8d:de:0a:e8:a3:15:
                    5b:4b:7a:46:2f:6e:52:14:e6:47:41:42:fe:c6:ac:
                    3b:54:1b:1b:94:6b:a7:3d:54:40:c2:a6:a8:af:d6:
                    bc:61:69:f1:2c:24:df:c1:a3:ef:57:c5:9c:8e:f2:
                    6b:69:55:08:1c:a3:91:13:b0:b5:2b:92:ec:50:88:
                    a9:2f:4a:21:b2:e9:a1:aa:c4:33:2c:e0:1b:5c:78:
                    35:53:df:56:2a:f3:18:3e:75:33:10:c5:b5:36:88:
                    19:75:c7:c5:3a:24:82:68:1e:02:f8:14:39:27:55:
                    0e:2f:4b:d0:af:b5:73:32:3a:fd:dc:ae:2d:0b:54:
                    32:ef:5e:8a:d9:c2:c1:2c:ab:c9:3f:2b:57:80:0d:
                    0e:9b:24:a5:f3:ea:e8:86:1a:35:ba:b8:c4:68:ee:
                    3e:e9:f0:df:8a:96:14:54:d1:af:99:b2:cc:bb:b4:
                    a9:19:a5:ef:44:46:b5:c6:06:bb:d6:c3:d5:8a:6a:
                    60:2a:59:95:dd:3c:e2:e1:d4:84:db:89:ff:79:30:
                    cd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:79:23:05:18:FD:64:58:26:4C:08:D8:48:C6:EA:16:16:3D:FD:EF
            X509v3 Authority Key Identifier:
                keyid:CB:46:0E:23:65:04:05:98:EF:BC:A2:88:5E:BA:99:6A:E5:11:19:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/CB460E2365040598EFBCA2885EBA996AE5111964.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB460E2365040598EFBCA2885EBA996AE5111964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233362e302f32322d3232203d3e20323639313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:15:3b:55:56:87:95:48:22:0f:ca:5b:1f:64:22:97:a7:c6:
         69:4a:8b:8f:33:b3:df:48:0c:84:ed:05:4a:65:83:dd:0a:2d:
         45:d3:dc:a9:43:b0:d2:51:bc:ec:7e:4b:ea:69:b7:1f:eb:24:
         4a:f6:59:00:6e:59:e7:8c:87:9e:22:98:10:e1:2e:cb:d6:17:
         f8:72:ed:2c:14:64:4a:bf:99:38:4d:53:2c:16:b3:fe:27:68:
         74:74:34:e5:17:14:9f:55:33:11:4e:45:59:3c:b0:44:69:da:
         da:b5:98:85:30:ad:86:35:81:31:7a:f0:f7:47:5e:d9:1b:4b:
         3a:49:aa:17:16:ac:43:9b:4a:7e:13:57:63:49:0f:94:06:87:
         e7:14:31:01:57:a8:9b:25:e7:0a:3e:d3:1d:8d:4b:04:26:c9:
         81:b7:1c:f8:e5:27:04:43:29:b2:2b:de:7c:54:b5:51:4e:ea:
         f9:01:74:9e:e4:3f:78:29:9d:46:9e:fd:cf:e2:da:0d:e7:83:
         f5:f5:af:67:70:40:08:02:3f:f7:46:2d:a6:89:97:7c:5f:ce:
         49:7f:15:cc:61:dd:5c:3f:5a:fc:13:19:fc:37:99:35:e3:39:
         07:e5:ee:70:40:b6:54:15:45:8a:f8:82:f4:8f:41:b6:58:29:
         ee:b3:cd:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQIytrYBwwDTVn3M8IiiuxEguNYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I0NjBFMjM2NTA0MDU5OEVGQkNBMjg4NUVCQTk5NkFF
NTExMTk2NDAeFw0yNDExMDgxMzE4MTZaFw0yNTExMDcxMzIzMTZaMDMxMTAvBgNV
BAMTKEYxNzkyMzA1MThGRDY0NTgyNjRDMDhEODQ4QzZFQTE2MTYzREZERUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm+bYGwy2wM6k5bKFQWoMdheIJ
lE3UICx29sbYbgM56YS1quOgN1kHun21TYrLf8cXZ1FP+43eCuijFVtLekYvblIU
5kdBQv7GrDtUGxuUa6c9VEDCpqiv1rxhafEsJN/Bo+9XxZyO8mtpVQgco5ETsLUr
kuxQiKkvSiGy6aGqxDMs4BtceDVT31Yq8xg+dTMQxbU2iBl1x8U6JIJoHgL4FDkn
VQ4vS9CvtXMyOv3cri0LVDLvXorZwsEsq8k/K1eADQ6bJKXz6uiGGjW6uMRo7j7p
8N+KlhRU0a+Zssy7tKkZpe9ERrXGBrvWw9WKamAqWZXdPOLh1ITbif95MM23AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8XkjBRj9ZFgmTAjYSMbqFhY9/e8wHwYDVR0j
BBgwFoAUy0YOI2UEBZjvvKKIXrqZauURGWQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0tmUTFyVjFYV2ZhYTJOOWY1czI5Y0xubllnSFlqb3d2M2lRZVI5UmQ1
dlEvMC9DQjQ2MEUyMzY1MDQwNTk4RUZCQ0EyODg1RUJBOTk2QUU1MTExOTY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNDYwRTIzNjUwNDA1OThF
RkJDQTI4ODVFQkE5OTZBRTUxMTE5NjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdLZlExclYxWFdmYWEyTjlmNXMyOWNMbm5ZZ0hZam93djNpUWVSOVJkNXZRLzAv
MzQzNTJlMzEzNzM4MmUzMjMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMTMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsuwwDQYJKoZIhvcNAQELBQADggEBADUVO1VW
h5VIIg/KWx9kIpenxmlKi48zs99IDITtBUplg90KLUXT3KlDsNJRvOx+S+pptx/r
JEr2WQBuWeeMh54imBDhLsvWF/hy7SwUZEq/mThNUywWs/4naHR0NOUXFJ9VMxFO
RVk8sERp2tq1mIUwrYY1gTF68PdHXtkbSzpJqhcWrEObSn4TV2NJD5QGh+cUMQFX
qJsl5wo+0x2NSwQmyYG3HPjlJwRDKbIr3nxUtVFO6vkBdJ7kP3gpnUae/c/i2g3n
g/X1r2dwQAgCP/dGLaaJl3xfzkl/Fcxh3Vw/WvwTGfw3mTXjOQfl7nBAtlQVRYr4
gvSPQbZYKe6zzUQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:11 2025 by rpki-client