Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa
File:                     34352e3136342e36302e302f32322d3332203d3e20323638363035.roa (raw, json)
Hash identifier:          iKdLx34LmAnRbT9BAmk9BLO1Xwg7ayy7BP+Z8UFm2Dk=
Subject key identifier:   D2:64:C5:C9:EA:8A:D4:17:6D:63:FE:FE:4B:90:7A:E7:98:0C:3E:26
Certificate issuer:       /CN=10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A
Certificate serial:       7FC7261EF4624A809E4ECA07B95915332236D0DA
Authority key identifier: 10:C0:A2:0A:E6:37:3B:7B:3C:E5:CF:D1:0D:A7:B3:3F:66:0E:B8:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa
Signing time:             Mon 05 Aug 2024 20:54:04 +0000
ROA not before:           Mon 05 Aug 2024 20:49:04 +0000
ROA not after:            Mon 04 Aug 2025 20:54:04 +0000
asID:                     268605
IP address blocks:        45.164.60.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c7:26:1e:f4:62:4a:80:9e:4e:ca:07:b9:59:15:33:22:36:d0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A
        Validity
            Not Before: Aug  5 20:49:04 2024 GMT
            Not After : Aug  4 20:54:04 2025 GMT
        Subject: CN=D264C5C9EA8AD4176D63FEFE4B907AE7980C3E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f9:ea:39:ee:2c:ed:22:8c:f8:01:33:e7:0b:
                    5c:74:cf:e2:63:0d:3b:36:c2:96:7a:56:91:40:c1:
                    9d:21:43:e5:dd:c1:30:09:64:b8:e6:82:0c:f2:01:
                    80:54:98:43:f1:47:a9:ed:de:27:91:04:de:e6:53:
                    b6:52:d0:50:5e:d9:b2:7c:a7:97:b7:f1:55:7b:a4:
                    e2:4e:37:a2:2d:32:d8:fb:bd:1c:4a:4e:12:ed:ce:
                    40:df:60:f9:72:e6:f0:91:0f:a6:39:46:5a:5a:bc:
                    79:7e:e0:71:1b:34:35:1c:da:8b:75:e5:33:71:16:
                    ea:32:84:b6:3a:bb:b3:ce:ab:93:f0:37:eb:48:7f:
                    7f:1e:07:54:ce:6d:eb:03:d9:05:38:bb:bc:7b:a5:
                    ea:14:53:02:f9:fe:00:a0:76:b2:2e:24:c2:9c:a1:
                    0e:54:dd:b4:6e:77:9e:97:da:36:4f:4b:da:fd:a1:
                    00:b6:76:5b:48:7f:41:a1:5c:84:f4:c2:55:a1:f6:
                    58:43:8b:08:a4:c1:8c:a6:04:69:1f:73:5f:ea:c7:
                    22:87:20:f1:0f:3e:eb:88:12:08:32:b4:98:72:57:
                    7b:13:d3:84:ee:23:83:1d:a6:54:a3:b4:4a:0f:00:
                    4f:b2:40:69:74:24:3f:09:60:d3:ef:e9:e3:a9:a6:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:64:C5:C9:EA:8A:D4:17:6D:63:FE:FE:4B:90:7A:E7:98:0C:3E:26
            X509v3 Authority Key Identifier:
                keyid:10:C0:A2:0A:E6:37:3B:7B:3C:E5:CF:D1:0D:A7:B3:3F:66:0E:B8:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:f1:10:0a:c9:86:56:01:93:2e:64:31:56:1e:6d:10:89:54:
         71:9d:0d:43:93:fe:6c:3b:fb:e7:4f:01:bf:ec:9d:d7:48:a6:
         8c:2d:e9:56:0c:a8:c4:35:96:85:d9:0e:98:ad:06:db:4f:66:
         97:90:2d:28:6c:8e:74:58:f3:9f:e0:d5:5d:6a:05:07:a2:b0:
         5e:2f:b6:e6:f8:29:1d:9c:96:dc:5b:b7:0f:ae:a8:a1:06:82:
         89:72:04:47:b9:93:91:89:3e:58:67:11:7a:f5:c1:8b:f0:e4:
         61:ac:93:97:ac:0e:a4:0e:ee:de:a5:94:1d:cd:fc:b4:24:fc:
         8c:47:b3:fb:01:52:1f:10:95:7f:0c:2b:cf:c8:c2:9e:9c:06:
         cb:2a:2b:ea:46:3d:7e:64:34:7a:0e:16:7d:7e:76:9d:4f:20:
         0f:66:bb:ea:10:ac:ce:42:d4:f7:83:b9:9e:e9:34:c9:11:2f:
         b5:54:13:5f:54:55:eb:31:d8:6b:6e:df:61:26:bf:1b:dc:44:
         b1:f7:11:56:de:ee:4a:9f:e8:67:b4:df:ef:7b:aa:7e:d9:da:
         2b:c6:e5:ff:75:aa:f5:30:b8:db:7e:5b:58:19:39:bc:e8:b6:
         7d:a4:d1:32:6b:43:c1:d6:cf:8a:f9:4e:3b:68:0a:2e:45:bf:
         37:63:55:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUf8cmHvRiSoCeTsoHuVkVMyI20NowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBDMEEyMEFFNjM3M0I3QjNDRTVDRkQxMERBN0IzM0Y2
NjBFQjg4QTAeFw0yNDA4MDUyMDQ5MDRaFw0yNTA4MDQyMDU0MDRaMDMxMTAvBgNV
BAMTKEQyNjRDNUM5RUE4QUQ0MTc2RDYzRkVGRTRCOTA3QUU3OTgwQzNFMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx+eo57iztIoz4ATPnC1x0z+Jj
DTs2wpZ6VpFAwZ0hQ+XdwTAJZLjmggzyAYBUmEPxR6nt3ieRBN7mU7ZS0FBe2bJ8
p5e38VV7pOJON6ItMtj7vRxKThLtzkDfYPly5vCRD6Y5RlpavHl+4HEbNDUc2ot1
5TNxFuoyhLY6u7POq5PwN+tIf38eB1TObesD2QU4u7x7peoUUwL5/gCgdrIuJMKc
oQ5U3bRud56X2jZPS9r9oQC2dltIf0GhXIT0wlWh9lhDiwikwYymBGkfc1/qxyKH
IPEPPuuIEggytJhyV3sT04TuI4MdplSjtEoPAE+yQGl0JD8JYNPv6eOppkEhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0mTFyeqK1BdtY/7+S5B655gMPiYwHwYDVR0j
BBgwFoAUEMCiCuY3O3s85c/RDaezP2YOuIowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODJjRVVDQkI4Y2tXckVpYm11TGhBajNiRWJSZEpXdlBuRXp6R3BMUzRy
M1cvMC8xMEMwQTIwQUU2MzczQjdCM0NFNUNGRDEwREE3QjMzRjY2MEVCODhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQzBBMjBBRTYzNzNCN0Iz
Q0U1Q0ZEMTBEQTdCMzNGNjYwRUI4OEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgyY0VVQ0JCOGNrV3JFaWJtdUxoQWozYkViUmRKV3ZQbkV6ekdwTFM0cjNXLzAv
MzQzNTJlMzEzNjM0MmUzNjMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaQ8MA0GCSqGSIb3DQEBCwUAA4IBAQCe8RAKyYZW
AZMuZDFWHm0QiVRxnQ1Dk/5sO/vnTwG/7J3XSKaMLelWDKjENZaF2Q6YrQbbT2aX
kC0obI50WPOf4NVdagUHorBeL7bm+CkdnJbcW7cPrqihBoKJcgRHuZORiT5YZxF6
9cGL8ORhrJOXrA6kDu7epZQdzfy0JPyMR7P7AVIfEJV/DCvPyMKenAbLKivqRj1+
ZDR6DhZ9fnadTyAPZrvqEKzOQtT3g7me6TTJES+1VBNfVFXrMdhrbt9hJr8b3ESx
9xFW3u5Kn+hntN/ve6p+2dorxuX/dar1MLjbfltYGTm86LZ9pNEya0PB1s+K+U47
aAouRb83Y1XY
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:35:21 2025 by rpki-client