Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32332d3233203d3e20323634383632.roa
File:                     3136382e3138312e3133322e302f32332d3233203d3e20323634383632.roa (raw, json)
Hash identifier:          d3tdHtKiniWdawd5SofpICNbF5qKGrOH2cQpzUgjAfc=
Subject key identifier:   3C:E2:B3:25:BA:81:00:B6:34:C0:18:D8:A9:D6:F7:F5:4F:27:C9:B7
Certificate issuer:       /CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
Certificate serial:       4F31048C8229978994FD3BDCB62D558D31E7D947
Authority key identifier: 34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32332d3233203d3e20323634383632.roa
Signing time:             Sat 19 Aug 2023 16:00:00 +0000
ROA not before:           Sat 19 Aug 2023 15:55:00 +0000
ROA not after:            Sat 17 Aug 2024 16:00:00 +0000
asID:                     264862
IP address blocks:        168.181.132.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:31:04:8c:82:29:97:89:94:fd:3b:dc:b6:2d:55:8d:31:e7:d9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
        Validity
            Not Before: Aug 19 15:55:00 2023 GMT
            Not After : Aug 17 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:f1:5d:17:70:e6:38:b9:29:ba:00:d8:6b:
                    6b:5d:77:93:95:91:f0:f3:2a:1a:fc:40:21:53:d6:
                    d8:74:5e:a1:c3:e5:7f:d2:f0:4e:b3:27:f7:ed:b8:
                    e5:c9:77:60:67:b2:48:0f:9c:22:18:87:f5:84:53:
                    f5:8e:f9:83:6b:81:53:47:78:30:d7:37:ba:e7:ae:
                    aa:bc:72:00:9c:58:06:93:81:6d:49:0b:e7:53:48:
                    5f:6d:a7:f6:73:dd:bc:79:fe:d2:0c:94:bd:58:8a:
                    72:f2:c1:5d:d4:7d:6d:79:74:45:90:fb:d6:45:96:
                    87:7a:1d:a7:72:01:f0:57:b4:66:86:f7:9b:d4:d1:
                    6b:db:1d:ad:ed:02:07:21:e5:e4:5a:55:36:cb:89:
                    51:c9:19:04:e6:99:7d:97:72:94:6f:27:2f:dc:af:
                    7b:a4:6d:7b:cb:63:9f:99:b4:3f:88:51:8c:ac:d3:
                    c8:0b:2f:d9:f9:0f:69:7b:c2:e5:d3:0c:e9:ed:78:
                    43:60:43:18:aa:31:f0:e7:c9:96:5b:e5:fd:93:35:
                    0f:8e:d5:1d:ac:77:a3:6a:81:b8:cb:7b:18:71:24:
                    ac:94:4d:c7:02:cc:09:dc:58:db:c4:35:03:43:33:
                    5a:8a:a6:a6:2b:02:01:09:1e:96:30:9c:6a:e7:6a:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E2:B3:25:BA:81:00:B6:34:C0:18:D8:A9:D6:F7:F5:4F:27:C9:B7
            X509v3 Authority Key Identifier:
                keyid:34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32332d3233203d3e20323634383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:df:c3:6a:2e:dd:9a:f9:84:48:dd:d8:1c:23:f0:54:b5:
         14:e6:5d:ea:8e:4b:bf:35:93:c1:fa:e0:e9:82:b4:0b:e8:a2:
         dd:a0:29:1a:da:71:e0:b5:fe:3e:fb:92:96:04:58:6e:b7:ea:
         c5:cd:7f:f8:96:17:73:8a:a2:d1:cd:dd:4e:d1:27:8d:01:60:
         de:0c:a3:d2:67:73:5c:fc:49:3d:7f:21:63:bb:50:8b:8b:df:
         11:d4:42:8e:ce:0d:8c:c8:8c:1f:7b:1a:22:1b:61:5c:38:d0:
         b9:d7:1b:20:64:d4:e4:12:5a:5b:26:0f:b0:e2:ab:c8:b6:a6:
         76:bf:97:01:64:45:88:a0:5f:c4:3f:f0:19:bd:b1:50:0a:17:
         44:4c:63:00:23:3e:45:08:72:d0:db:69:70:4e:c2:0b:dd:bd:
         0f:eb:e4:e1:dd:56:98:c6:0d:3d:96:a0:bb:3b:ce:50:96:69:
         b6:cc:dc:b8:66:23:68:64:d5:6e:48:b9:54:a1:66:42:18:31:
         26:7c:93:3c:f1:e8:a8:62:cb:4d:34:53:48:6a:b7:c8:0c:b0:
         26:19:ae:2d:02:ae:a6:36:68:d2:a6:d1:54:88:6c:91:c4:0b:
         58:43:8d:fe:3b:3e:49:49:80:ce:40:65:c1:d0:be:e8:ed:1a:
         5f:26:21:b9
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUTzEEjIIpl4mU/Tvcti1VjTHn2UcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ1MTBDOENEMTlDRDJCQTg0MUJGQ0Q5MEMzODEzRTgw
RDUyMkEzRjAeFw0yMzA4MTkxNTU1MDBaFw0yNDA4MTcxNjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDIyMkYxNUQxNzcwRTYzOEI5
MjlCQTAwRDg2QjZCNUQ3NzkzOTU5MUYwRjMyQTFBRkM0MDIxNTNENkQ4NzQ1RUEx
QzNFNTdGRDJGMDRFQjMyN0Y3RURCOEU1Qzk3NzYwNjdCMjQ4MEY5QzIyMTg4N0Y1
ODQ1M0Y1OEVGOTgzNkI4MTUzNDc3ODMwRDczN0JBRTdBRUFBQkM3MjAwOUM1ODA2
OTM4MTZENDkwQkU3NTM0ODVGNkRBN0Y2NzNEREJDNzlGRUQyMEM5NEJENTg4QTcy
RjJDMTVERDQ3RDZENzk3NDQ1OTBGQkQ2NDU5Njg3N0ExREE3NzIwMUYwNTdCNDY2
ODZGNzlCRDREMTZCREIxREFERUQwMjA3MjFFNUU0NUE1NTM2Q0I4OTUxQzkxOTA0
RTY5OTdEOTc3Mjk0NkYyNzJGRENBRjdCQTQ2RDdCQ0I2MzlGOTlCNDNGODg1MThD
QUNEM0M4MEIyRkQ5RjkwRjY5N0JDMkU1RDMwQ0U5RUQ3ODQzNjA0MzE4QUEzMUYw
RTdDOTk2NUJFNUZEOTMzNTBGOEVENTFEQUM3N0EzNkE4MUI4Q0I3QjE4NzEyNEFD
OTQ0REM3MDJDQzA5REM1OERCQzQzNTAzNDMzMzVBOEFBNkE2MkIwMjAxMDkxRTk2
MzA5QzZBRTc2QTFBOUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0iLxXRdw5ji5KboA2GtrXXeTlZHw8yoa/EAhU9bYdF6hw+V/0vBO
syf37bjlyXdgZ7JID5wiGIf1hFP1jvmDa4FTR3gw1ze6566qvHIAnFgGk4FtSQvn
U0hfbaf2c928ef7SDJS9WIpy8sFd1H1teXRFkPvWRZaHeh2ncgHwV7Rmhveb1NFr
2x2t7QIHIeXkWlU2y4lRyRkE5pl9l3KUbycv3K97pG17y2OfmbQ/iFGMrNPICy/Z
+Q9pe8Ll0wzp7XhDYEMYqjHw58mWW+X9kzUPjtUdrHejaoG4y3sYcSSslE3HAswJ
3FjbxDUDQzNaiqamKwIBCR6WMJxq52oamwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FDzisyW6gQC2NMAY2KnW9/VPJ8m3MB8GA1UdIwQYMBaAFDRRDIzRnNK6hBv82Qw4
E+gNUio/MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhHWGNoMm5vQmRrR2tq
aE5NOW11Z1JzZ2FrcEs5RHB0SGZRamNINkZXV2NtLzAvMzQ1MTBDOENEMTlDRDJC
QTg0MUJGQ0Q5MEMzODEzRTgwRDUyMkEzRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zNDUxMEM4Q0QxOUNEMkJBODQxQkZDRDkwQzM4MTNFODBENTIy
QTNGLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84R1hjaDJub0Jka0dramhOTTlt
dWdSc2dha3BLOURwdEhmUWpjSDZGV1djbS8wLzMxMzYzODJlMzEzODMxMmUzMTMz
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzQzODM2MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGotYQwDQYJKoZIhvcNAQELBQADggEBAEJf38NqLt2a+YRI3dgcI/BUtRTmXeqO
S781k8H64OmCtAvoot2gKRraceC1/j77kpYEWG636sXNf/iWF3OKotHN3U7RJ40B
YN4Mo9Jnc1z8ST1/IWO7UIuL3xHUQo7ODYzIjB97GiIbYVw40LnXGyBk1OQSWlsm
D7Diq8i2pna/lwFkRYigX8Q/8Bm9sVAKF0RMYwAjPkUIctDbaXBOwgvdvQ/r5OHd
VpjGDT2WoLs7zlCWabbM3LhmI2hk1W5IuVShZkIYMSZ8kzzx6Khiy000U0hqt8gM
sCYZri0CrqY2aNKm0VSIbJHEC1hDjf47PklJgM5AZcHQvujtGl8mIbk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:38 2025 by rpki-client