Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131322e302f32332d3233203d3e20323638353736.roa
File:                     34352e3136332e3131322e302f32332d3233203d3e20323638353736.roa (raw, json)
Hash identifier:          am27T0WfQ5oy2E+fRGHvsaKLxdWmyah1DZU0HIqp0zE=
Subject key identifier:   2D:95:02:18:B9:F6:5B:47:D9:72:92:BF:05:96:AD:15:F0:BB:B2:FE
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       7D84B3D2110547C4F8392C33EA2BA28C4C36FC0A
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131322e302f32332d3233203d3e20323638353736.roa
Signing time:             Wed 27 Sep 2023 13:00:00 +0000
ROA not before:           Wed 27 Sep 2023 12:55:00 +0000
ROA not after:            Wed 25 Sep 2024 13:00:00 +0000
asID:                     268576
IP address blocks:        45.163.112.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:84:b3:d2:11:05:47:c4:f8:39:2c:33:ea:2b:a2:8c:4c:36:fc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Sep 27 12:55:00 2023 GMT
            Not After : Sep 25 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:10:bf:68:ed:44:55:ba:38:fe:e5:76:b1:
                    75:91:05:e4:e4:7f:08:eb:a6:f7:7c:85:ae:c3:36:
                    e0:6f:6b:6e:8f:ba:ae:ae:45:ba:77:97:76:96:4c:
                    03:58:06:15:6a:07:00:76:96:70:ed:88:af:52:ae:
                    fc:b9:da:9d:52:03:f3:c9:89:38:9d:53:7e:2b:d1:
                    63:3b:b7:0b:d5:78:92:99:92:c5:37:7e:ce:33:51:
                    5c:aa:29:ff:b2:0b:52:93:19:fa:8f:fe:4b:55:a4:
                    7e:61:e9:86:0e:3c:be:73:30:fd:11:23:9b:60:35:
                    e3:fb:47:ce:3f:ea:1c:ac:94:09:72:83:c1:74:20:
                    5c:c2:19:07:b9:23:6e:1d:58:e4:01:78:d6:c8:1c:
                    5b:ec:4b:bc:6d:03:fa:72:d4:6a:3b:dc:31:58:8c:
                    a0:2f:69:e2:f4:92:fa:75:87:cd:14:51:46:e2:49:
                    6a:df:2d:f4:c1:ee:49:5e:54:ee:d9:c7:de:28:c8:
                    6b:ff:98:02:14:53:43:ac:79:f1:45:a7:54:ba:98:
                    7f:6b:41:e9:e8:e7:50:f6:62:0d:6a:78:cb:1e:79:
                    61:7e:c5:82:6a:11:0f:24:64:50:de:50:c3:57:69:
                    89:67:80:19:c7:95:3f:71:d4:88:63:70:bc:d9:ff:
                    08:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:95:02:18:B9:F6:5B:47:D9:72:92:BF:05:96:AD:15:F0:BB:B2:FE
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131322e302f32332d3233203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:70:c1:42:81:92:56:36:8d:fc:eb:4e:6c:ce:44:fb:87:44:
         cc:7f:c2:8d:5d:0f:2b:2a:a9:17:9b:89:0e:d5:36:56:81:50:
         4e:e5:7e:78:83:48:d2:c7:33:56:e6:bb:d0:03:13:c2:9f:3b:
         88:85:ad:c3:f4:59:d3:03:16:ec:10:aa:10:d6:c5:38:2d:6b:
         17:8e:14:68:80:c1:29:42:f3:8e:56:7c:ee:b9:78:8d:4d:3b:
         c7:5e:a2:c6:27:c5:72:a8:7d:37:c6:8e:1d:eb:99:69:e1:13:
         32:73:81:32:ec:f4:e4:61:47:d2:bb:99:2a:6a:d8:77:db:9d:
         5f:ad:6b:7c:b7:64:36:b6:73:b9:1b:e4:f6:27:44:8d:af:c4:
         98:87:d0:15:0d:53:a5:f1:f9:52:ba:4a:ec:02:5f:72:64:6c:
         8f:f8:48:0e:88:4c:87:8d:fb:fe:1b:77:44:04:a4:a5:55:4f:
         1e:6f:f2:51:5f:e4:3c:44:06:2f:7a:b2:d8:0c:5c:b1:16:e5:
         3c:a1:85:b8:5b:a2:33:34:84:2e:67:2d:e3:48:17:b7:71:67:
         3a:90:23:05:a6:e1:71:d8:e1:8c:09:23:ea:1f:dc:08:fb:56:
         03:d7:1b:81:cf:31:06:31:73:43:87:bf:35:5a:95:7c:fc:79:
         2c:2a:63:f7
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUfYSz0hEFR8T4OSwz6iuijEw2/AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJENTI1NkUwNjM3M0NGRTAzRDg5RUI3ODY1RkZDRDcw
ODZGNkVCNjAeFw0yMzA5MjcxMjU1MDBaFw0yNDA5MjUxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzU2ODEwQkY2OEVENDQ1NUJB
MzhGRUU1NzZCMTc1OTEwNUU0RTQ3RjA4RUJBNkY3N0M4NUFFQzMzNkUwNkY2QjZF
OEZCQUFFQUU0NUJBNzc5Nzc2OTY0QzAzNTgwNjE1NkEwNzAwNzY5NjcwRUQ4OEFG
NTJBRUZDQjlEQTlENTIwM0YzQzk4OTM4OUQ1MzdFMkJEMTYzM0JCNzBCRDU3ODky
OTk5MkM1Mzc3RUNFMzM1MTVDQUEyOUZGQjIwQjUyOTMxOUZBOEZGRTRCNTVBNDdF
NjFFOTg2MEUzQ0JFNzMzMEZEMTEyMzlCNjAzNUUzRkI0N0NFM0ZFQTFDQUM5NDA5
NzI4M0MxNzQyMDVDQzIxOTA3QjkyMzZFMUQ1OEU0MDE3OEQ2QzgxQzVCRUM0QkJD
NkQwM0ZBNzJENDZBM0JEQzMxNTg4Q0EwMkY2OUUyRjQ5MkZBNzU4N0NEMTQ1MTQ2
RTI0OTZBREYyREY0QzFFRTQ5NUU1NEVFRDlDN0RFMjhDODZCRkY5ODAyMTQ1MzQz
QUM3OUYxNDVBNzU0QkE5ODdGNkI0MUU5RThFNzUwRjY2MjBENkE3OENCMUU3OTYx
N0VDNTgyNkExMTBGMjQ2NDUwREU1MEMzNTc2OTg5Njc4MDE5Qzc5NTNGNzFENDg4
NjM3MEJDRDlGRjA4MEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxWgQv2jtRFW6OP7ldrF1kQXk5H8I66b3fIWuwzbgb2tuj7qurkW6
d5d2lkwDWAYVagcAdpZw7YivUq78udqdUgPzyYk4nVN+K9FjO7cL1XiSmZLFN37O
M1Fcqin/sgtSkxn6j/5LVaR+YemGDjy+czD9ESObYDXj+0fOP+ocrJQJcoPBdCBc
whkHuSNuHVjkAXjWyBxb7Eu8bQP6ctRqO9wxWIygL2ni9JL6dYfNFFFG4klq3y30
we5JXlTu2cfeKMhr/5gCFFNDrHnxRadUuph/a0Hp6OdQ9mINanjLHnlhfsWCahEP
JGRQ3lDDV2mJZ4AZx5U/cdSIY3C82f8IDwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FC2VAhi59ltH2XKSvwWWrRXwu7L+MB8GA1UdIwQYMBaAFGvVJW4GNzz+A9iet4Zf
/NcIb262MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlHSDdMb2duWHd5ZzZn
dkg1QnlHVmNEQjRkRDd4N1h6UlJQaDJQblhFdkVkLzAvNkJENTI1NkUwNjM3M0NG
RTAzRDg5RUI3ODY1RkZDRDcwODZGNkVCNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82QkQ1MjU2RTA2MzczQ0ZFMDNEODlFQjc4NjVGRkNENzA4NkY2
RUI2LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85R0g3TG9nblh3eWc2Z3ZINUJ5
R1ZjREI0ZEQ3eDdYelJSUGgyUG5YRXZFZC8wLzM0MzUyZTMxMzYzMzJlMzEzMTMy
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4MzUzNzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LaNwMA0GCSqGSIb3DQEBCwUAA4IBAQBicMFCgZJWNo38605szkT7h0TMf8KNXQ8r
KqkXm4kO1TZWgVBO5X54g0jSxzNW5rvQAxPCnzuIha3D9FnTAxbsEKoQ1sU4LWsX
jhRogMEpQvOOVnzuuXiNTTvHXqLGJ8VyqH03xo4d65lp4RMyc4Ey7PTkYUfSu5kq
ath3251frWt8t2Q2tnO5G+T2J0SNr8SYh9AVDVOl8flSukrsAl9yZGyP+EgOiEyH
jfv+G3dEBKSlVU8eb/JRX+Q8RAYverLYDFyxFuU8oYW4W6IzNIQuZy3jSBe3cWc6
kCMFpuFx2OGMCSPqH9wI+1YD1xuBzzEGMXNDh781WpV8/HksKmP3
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:42:19 2025 by rpki-client