Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JFJw1J8z1JhqKNmqbBuEAkuJZh6f2x4gNbvTEuT8wNk/0/34352e342e3139342e302f32342d3234203d3e20323636303837.roa
File:                     34352e342e3139342e302f32342d3234203d3e20323636303837.roa (raw, json)
Hash identifier:          MVbBdxlfBaff40IdoZAWRwEoT9G/kFgyrAo/cUEyBuA=
Subject key identifier:   59:68:C6:98:9E:D8:63:EE:64:2C:8A:2D:66:C6:91:01:F0:10:7A:D4
Certificate issuer:       /CN=13BCFA085A54D68915B58D7C8524F6FEE1600455
Certificate serial:       346DCB1B7A9D9DC989E6D32F5EF3A9CD30FD504C
Authority key identifier: 13:BC:FA:08:5A:54:D6:89:15:B5:8D:7C:85:24:F6:FE:E1:60:04:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BCFA085A54D68915B58D7C8524F6FEE1600455.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JFJw1J8z1JhqKNmqbBuEAkuJZh6f2x4gNbvTEuT8wNk/0/34352e342e3139342e302f32342d3234203d3e20323636303837.roa
Signing time:             Tue 16 May 2023 12:52:29 +0000
ROA not before:           Tue 16 May 2023 12:47:29 +0000
ROA not after:            Tue 14 May 2024 12:52:29 +0000
asID:                     266087
IP address blocks:        45.4.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6d:cb:1b:7a:9d:9d:c9:89:e6:d3:2f:5e:f3:a9:cd:30:fd:50:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BCFA085A54D68915B58D7C8524F6FEE1600455
        Validity
            Not Before: May 16 12:47:29 2023 GMT
            Not After : May 14 12:52:29 2024 GMT
        Subject: CN=5968C6989ED863EE642C8A2D66C69101F0107AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:eb:98:6c:ae:ea:b2:59:42:31:68:5e:34:
                    88:82:d3:89:a0:5c:84:5a:9a:10:6e:d1:d1:17:33:
                    8d:c8:e5:33:20:4f:48:bd:8d:7c:d4:84:f5:44:60:
                    b7:42:31:19:f6:87:cd:b5:0b:e9:80:fa:b7:38:fc:
                    a3:77:88:64:6a:24:0c:ff:f5:10:3d:f7:35:a5:e4:
                    4f:b7:0c:3f:48:cf:8f:05:c2:d7:8c:12:0a:f0:0e:
                    51:71:e4:af:cc:fb:f9:23:79:e5:78:35:77:63:62:
                    36:37:99:27:0b:f0:d5:d4:63:4c:72:72:17:fb:40:
                    6f:c1:06:0a:7d:63:d2:fc:34:8e:5a:15:76:74:25:
                    fb:5e:c9:b6:94:16:6f:f3:24:3e:7a:b8:5f:e5:a7:
                    4c:70:de:f6:44:59:5c:20:93:cd:4f:00:d0:6b:9e:
                    61:a1:38:0c:71:ca:e0:28:dd:7a:bc:96:83:4a:2d:
                    69:dd:5b:e6:36:be:78:8c:59:f6:62:5a:15:03:f5:
                    e6:a8:e8:b4:68:da:82:e3:9a:92:7c:e9:e0:1a:53:
                    85:c6:c1:2c:2c:62:8c:b1:77:bf:eb:2f:7e:7e:83:
                    05:5b:0e:57:4c:08:46:6b:12:c9:d5:0a:74:2e:89:
                    2b:c1:d4:01:34:3e:bc:30:2c:99:80:57:de:ea:88:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:68:C6:98:9E:D8:63:EE:64:2C:8A:2D:66:C6:91:01:F0:10:7A:D4
            X509v3 Authority Key Identifier:
                keyid:13:BC:FA:08:5A:54:D6:89:15:B5:8D:7C:85:24:F6:FE:E1:60:04:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JFJw1J8z1JhqKNmqbBuEAkuJZh6f2x4gNbvTEuT8wNk/0/13BCFA085A54D68915B58D7C8524F6FEE1600455.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BCFA085A54D68915B58D7C8524F6FEE1600455.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JFJw1J8z1JhqKNmqbBuEAkuJZh6f2x4gNbvTEuT8wNk/0/34352e342e3139342e302f32342d3234203d3e20323636303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:50:50:11:de:42:99:cd:3f:82:45:91:f8:89:c0:fe:e5:d6:
         5b:7e:a8:28:29:b6:c9:ae:e0:ed:11:ee:c1:7e:01:c6:c9:31:
         3f:62:64:a8:8e:3f:e0:84:a6:5c:2b:36:2d:e2:87:92:8f:04:
         17:90:46:49:90:3a:51:3d:b4:19:ea:0d:cd:4c:a0:41:f1:77:
         2c:c4:de:2a:47:bf:da:46:fd:da:39:27:29:08:b4:bd:ad:dc:
         a1:75:d8:af:25:36:35:eb:43:0e:79:f2:44:b5:bd:c6:d8:dc:
         12:d4:ff:62:e9:bd:c6:f3:13:db:e3:70:5c:64:08:f9:1a:da:
         77:9e:bf:7a:2e:45:06:50:67:49:2c:40:4f:d1:cc:f8:bd:44:
         93:2f:ee:af:e7:be:61:8b:ba:54:4e:ab:76:34:9d:5c:8a:18:
         68:cc:4f:b9:1e:e0:39:fa:13:e7:fd:bb:a0:ae:fe:b4:1b:3d:
         4b:6b:45:f4:22:dc:aa:b4:19:2f:22:e9:d8:6e:90:eb:9b:fb:
         a8:6a:10:2c:2b:42:e5:2e:78:ab:30:70:c0:e9:8d:75:e3:4e:
         31:1f:59:6d:9b:6e:89:08:d4:5d:ed:d8:c6:28:e9:d2:f6:34:
         e0:3c:5f:b9:f9:ef:22:8c:e8:c7:24:9c:9b:d5:12:01:cb:3d:
         50:aa:28:88
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNG3LG3qdncmJ5tMvXvOpzTD9UEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQ0ZBMDg1QTU0RDY4OTE1QjU4RDdDODUyNEY2RkVF
MTYwMDQ1NTAeFw0yMzA1MTYxMjQ3MjlaFw0yNDA1MTQxMjUyMjlaMDMxMTAvBgNV
BAMTKDU5NjhDNjk4OUVEODYzRUU2NDJDOEEyRDY2QzY5MTAxRjAxMDdBRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4euYbK7qsllCMWheNIiC04mg
XIRamhBu0dEXM43I5TMgT0i9jXzUhPVEYLdCMRn2h821C+mA+rc4/KN3iGRqJAz/
9RA99zWl5E+3DD9Iz48FwteMEgrwDlFx5K/M+/kjeeV4NXdjYjY3mScL8NXUY0xy
chf7QG/BBgp9Y9L8NI5aFXZ0JfteybaUFm/zJD56uF/lp0xw3vZEWVwgk81PANBr
nmGhOAxxyuAo3Xq8loNKLWndW+Y2vniMWfZiWhUD9eao6LRo2oLjmpJ86eAaU4XG
wSwsYoyxd7/rL35+gwVbDldMCEZrEsnVCnQuiSvB1AE0PrwwLJmAV97qiKNhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUWWjGmJ7YY+5kLIotZsaRAfAQetQwHwYDVR0j
BBgwFoAUE7z6CFpU1okVtY18hST2/uFgBFUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEpGSncxSjh6MUpocUtObXFiQnVFQWt1SlpoNmYyeDRnTmJ2VEV1VDh3
TmsvMC8xM0JDRkEwODVBNTRENjg5MTVCNThEN0M4NTI0RjZGRUUxNjAwNDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzQkNGQTA4NUE1NEQ2ODkx
NUI1OEQ3Qzg1MjRGNkZFRTE2MDA0NTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhKRkp3MUo4ejFKaHFLTm1xYkJ1RUFrdUpaaDZmMng0Z05idlRFdVQ4d05rLzAv
MzQzNTJlMzQyZTMxMzkzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMw
MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0EwjANBgkqhkiG9w0BAQsFAAOCAQEAe1BQEd5Cmc0/
gkWR+InA/uXWW36oKCm2ya7g7RHuwX4BxskxP2JkqI4/4ISmXCs2LeKHko8EF5BG
SZA6UT20GeoNzUygQfF3LMTeKke/2kb92jknKQi0va3coXXYryU2NetDDnnyRLW9
xtjcEtT/Yum9xvMT2+NwXGQI+Rrad56/ei5FBlBnSSxAT9HM+L1Eky/ur+e+YYu6
VE6rdjSdXIoYaMxPuR7gOfoT5/27oK7+tBs9S2tF9CLcqrQZLyLp2G6Q65v7qGoQ
LCtC5S54qzBwwOmNdeNOMR9ZbZtuiQjUXe3Yxijp0vY04DxfufnvIozoxyScm9US
Acs9UKooiA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:46 2025 by rpki-client