Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/34352e3136352e31362e302f32342d3234203d3e20323638363637.roa
File:                     34352e3136352e31362e302f32342d3234203d3e20323638363637.roa (raw, json)
Hash identifier:          NKj4tX6rnKq/Y1Tw7sTGvOZmhUdTygLOUc2tCkUNdX4=
Subject key identifier:   7E:8D:B9:12:13:09:03:BB:7C:0B:E6:8A:16:4A:61:F4:3F:18:F1:79
Certificate issuer:       /CN=1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44
Certificate serial:       7B40B8BF06B09F3C5B8A93754678CB1905E35780
Authority key identifier: 1C:4A:D4:14:B6:D5:C6:E6:82:A2:1C:57:99:DA:3B:57:58:CB:8A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/34352e3136352e31362e302f32342d3234203d3e20323638363637.roa
Signing time:             Mon 15 Aug 2022 21:24:28 +0000
ROA not before:           Mon 15 Aug 2022 21:19:28 +0000
ROA not after:            Mon 14 Aug 2023 21:24:28 +0000
asID:                     268667
IP address blocks:        45.165.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:40:b8:bf:06:b0:9f:3c:5b:8a:93:75:46:78:cb:19:05:e3:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44
        Validity
            Not Before: Aug 15 21:19:28 2022 GMT
            Not After : Aug 14 21:24:28 2023 GMT
        Subject: CN=7E8DB912130903BB7C0BE68A164A61F43F18F179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:02:41:af:b5:52:58:60:26:9e:dc:65:fe:
                    32:75:5a:b4:6d:ac:a0:78:ae:db:73:ed:c8:1a:77:
                    80:32:ef:dc:57:e4:08:74:cf:82:b9:cf:25:33:89:
                    7d:08:eb:c2:ef:75:55:61:f3:df:9d:8e:6d:8d:62:
                    8d:49:8a:68:b3:76:4e:f1:71:a0:16:83:c4:b1:5c:
                    1f:23:0b:30:99:c4:38:1d:c7:52:ac:f6:27:89:9d:
                    37:84:11:3e:a6:9c:52:56:95:26:3b:bf:d2:3f:a9:
                    09:4e:7e:94:a0:24:04:4d:6a:c1:bb:a9:81:61:e5:
                    14:88:43:ba:25:c9:c0:7c:46:f6:b7:89:3a:8d:f2:
                    01:17:b6:8e:5b:59:7b:ac:ea:26:b7:ac:0d:40:e8:
                    44:27:cb:cb:d4:dd:46:a3:de:73:61:e7:66:6e:52:
                    d5:39:f0:13:67:1d:79:94:25:c7:41:e4:00:c1:ae:
                    5a:0a:f3:28:52:87:da:7e:13:63:5a:9e:2d:b0:9a:
                    2e:1d:9d:94:0b:05:8c:e3:d5:1e:5f:a7:90:43:06:
                    af:1d:4b:50:43:71:1f:0d:0e:15:9d:07:cb:ed:42:
                    79:5e:31:a7:a6:d7:cf:92:c4:33:ce:27:d7:31:81:
                    3a:a4:48:9d:5e:f6:d1:6c:b3:97:ae:42:a5:de:33:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8D:B9:12:13:09:03:BB:7C:0B:E6:8A:16:4A:61:F4:3F:18:F1:79
            X509v3 Authority Key Identifier:
                keyid:1C:4A:D4:14:B6:D5:C6:E6:82:A2:1C:57:99:DA:3B:57:58:CB:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/34352e3136352e31362e302f32342d3234203d3e20323638363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:89:f5:5c:fd:94:03:e0:d8:f5:85:41:6f:e5:d4:d0:3f:52:
         8a:1a:38:47:a8:bd:1c:dc:30:64:3d:69:8d:49:1e:57:29:42:
         10:ae:1f:8f:88:d7:ec:d0:e4:4d:e3:57:64:f9:87:c0:91:98:
         a7:00:6c:5d:53:b1:ad:24:56:e1:ed:d7:19:14:78:2b:69:e2:
         0e:82:22:83:e4:75:be:2e:1c:ce:47:59:58:a1:d4:2d:5d:ca:
         c2:eb:43:18:9c:50:31:25:3b:bc:3f:7f:82:a1:c9:aa:5b:80:
         62:ec:49:31:8d:a1:08:89:e4:cf:d3:27:07:fd:bd:41:7b:16:
         60:5e:66:fa:33:6d:91:ac:7b:34:fa:d1:2c:68:91:71:fb:ae:
         36:5d:0f:36:57:e1:f2:21:23:52:1a:94:37:60:1d:ce:97:1c:
         d8:8c:23:5b:92:88:a5:b9:17:f0:de:2f:6e:96:ab:ac:45:f6:
         cd:72:06:e5:09:12:b2:a2:8c:39:95:6e:87:e2:27:f3:60:04:
         be:f4:78:07:b1:8a:ae:88:78:12:46:05:01:51:c0:c5:78:90:
         6c:44:79:18:15:b5:e7:33:53:40:91:d1:86:f2:70:d8:63:04:
         34:a3:d8:91:bf:20:51:f4:57:ea:1a:56:a3:9d:ce:43:29:ed:
         02:be:9b:79
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe0C4vwawnzxbipN1RnjLGQXjV4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM0QUQ0MTRCNkQ1QzZFNjgyQTIxQzU3OTlEQTNCNTc1
OENCOEE0NDAeFw0yMjA4MTUyMTE5MjhaFw0yMzA4MTQyMTI0MjhaMDMxMTAvBgNV
BAMTKDdFOERCOTEyMTMwOTAzQkI3QzBCRTY4QTE2NEE2MUY0M0YxOEYxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHQJBr7VSWGAmntxl/jJ1WrRt
rKB4rttz7cgad4Ay79xX5Ah0z4K5zyUziX0I68LvdVVh89+djm2NYo1Jimizdk7x
caAWg8SxXB8jCzCZxDgdx1Ks9ieJnTeEET6mnFJWlSY7v9I/qQlOfpSgJARNasG7
qYFh5RSIQ7olycB8Rva3iTqN8gEXto5bWXus6ia3rA1A6EQny8vU3Uaj3nNh52Zu
UtU58BNnHXmUJcdB5ADBrloK8yhSh9p+E2Nani2wmi4dnZQLBYzj1R5fp5BDBq8d
S1BDcR8NDhWdB8vtQnleMaem18+SxDPOJ9cxgTqkSJ1e9tFss5euQqXeM7DhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfo25EhMJA7t8C+aKFkph9D8Y8XkwHwYDVR0j
BBgwFoAUHErUFLbVxuaCohxXmdo7V1jLikQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEpCdDY4VjVYemZOdzVIYllOZVlBbnNiWXF2ZGlrRnpZOG1xRm1oVE5W
cDcvMC8xQzRBRDQxNEI2RDVDNkU2ODJBMjFDNTc5OURBM0I1NzU4Q0I4QTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDNEFENDE0QjZENUM2RTY4
MkEyMUM1Nzk5REEzQjU3NThDQjhBNDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhKQnQ2OFY1WHpmTnc1SGJZTmVZQW5zYllxdmRpa0Z6WThtcUZtaFROVnA3LzAv
MzQzNTJlMzEzNjM1MmUzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzYzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaUQMA0GCSqGSIb3DQEBCwUAA4IBAQASifVc/ZQD
4Nj1hUFv5dTQP1KKGjhHqL0c3DBkPWmNSR5XKUIQrh+PiNfs0ORN41dk+YfAkZin
AGxdU7GtJFbh7dcZFHgraeIOgiKD5HW+LhzOR1lYodQtXcrC60MYnFAxJTu8P3+C
ocmqW4Bi7EkxjaEIieTP0ycH/b1BexZgXmb6M22RrHs0+tEsaJFx+642XQ82V+Hy
ISNSGpQ3YB3OlxzYjCNbkoiluRfw3i9ulqusRfbNcgblCRKyoow5lW6H4ifzYAS+
9HgHsYquiHgSRgUBUcDFeJBsRHkYFbXnM1NAkdGG8nDYYwQ0o9iRvyBR9FfqGlaj
nc5DKe0Cvpt5
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:19 2025 by rpki-client