Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233352e3138312e302f32342d3234203d3e20323638313932.roa
File:                     34352e3233352e3138312e302f32342d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          3aVSYQGGpps0ePNAS5Jk1LikQ/Sks4btWz2aAaMXqts=
Subject key identifier:   A1:EB:36:A2:3E:48:2D:3C:31:64:A2:CC:49:81:65:37:9F:FA:26:DE
Certificate issuer:       /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial:       7F24C414E692CE2F73297FDC50DBE3EFA24E90F9
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233352e3138312e302f32342d3234203d3e20323638313932.roa
Signing time:             Mon 14 Aug 2023 15:58:35 +0000
ROA not before:           Mon 14 Aug 2023 15:53:35 +0000
ROA not after:            Mon 12 Aug 2024 15:58:35 +0000
asID:                     268192
IP address blocks:        45.235.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:24:c4:14:e6:92:ce:2f:73:29:7f:dc:50:db:e3:ef:a2:4e:90:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
        Validity
            Not Before: Aug 14 15:53:35 2023 GMT
            Not After : Aug 12 15:58:35 2024 GMT
        Subject: CN=A1EB36A23E482D3C3164A2CC498165379FFA26DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:e7:39:62:0d:73:41:3c:c4:ee:aa:5f:ca:
                    d2:75:c9:90:66:be:de:13:d1:02:53:f2:a1:65:d1:
                    cf:9f:eb:75:55:fe:61:d7:62:b2:5a:32:e0:7e:00:
                    92:9d:71:ef:79:3c:d5:07:2d:13:1f:0f:73:6c:e6:
                    20:1a:b7:5d:af:5b:a6:a0:f0:2e:83:e5:d5:05:c8:
                    38:d8:19:52:53:e5:af:04:d0:c7:43:bb:bc:00:33:
                    df:dc:2f:1e:6a:9a:52:77:8e:d6:29:c1:3f:c3:f0:
                    6b:25:71:83:e6:47:4b:e3:5b:6b:d3:6d:dc:df:19:
                    60:7c:b2:de:fd:9f:01:d5:00:84:bc:38:87:e7:9d:
                    9e:c1:00:3b:9d:de:ad:51:91:01:19:d3:d6:a9:0f:
                    80:b0:ff:6f:03:58:f2:bb:19:4a:9c:19:52:4e:1e:
                    7b:58:75:b6:6b:0b:6d:12:ee:c3:b7:c6:72:d5:ae:
                    ca:bb:c7:6a:e9:6f:15:79:4a:93:8b:ba:0a:1f:92:
                    d9:ea:17:8d:a0:ae:70:0a:11:d5:10:24:8d:8a:0e:
                    f0:65:02:5c:f9:ea:ad:65:53:59:70:75:f2:6e:12:
                    c7:51:b0:69:88:79:3a:92:d8:45:d2:00:d2:34:28:
                    19:e8:96:e2:06:0a:c6:e3:bc:c3:ec:4d:c0:b0:7e:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EB:36:A2:3E:48:2D:3C:31:64:A2:CC:49:81:65:37:9F:FA:26:DE
            X509v3 Authority Key Identifier:
                keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233352e3138312e302f32342d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:b2:43:67:a9:dd:4b:24:02:86:b1:a9:72:de:dd:11:02:24:
         c4:f8:bc:9c:08:4f:35:cb:00:ed:52:41:b8:95:64:b6:0e:7d:
         31:59:47:06:7b:f3:70:39:9a:76:e5:a6:1d:9a:1b:0e:0a:f8:
         5a:0e:53:3c:8e:ff:20:5f:6f:ff:70:9f:ce:0e:d8:ae:e0:80:
         d2:f2:ab:bd:e3:d2:34:e5:f4:fc:6a:13:6d:c0:b1:be:b2:08:
         e5:2e:80:59:79:ee:f9:b1:4d:d4:8f:e7:0b:34:b1:cb:da:84:
         02:e6:9a:5b:0f:70:6e:9f:98:6d:b6:30:dc:d4:35:7b:aa:24:
         9f:41:7d:3f:01:46:ec:ae:ba:95:8b:0f:1c:b4:7f:47:d7:bc:
         92:b2:4f:6e:46:0d:28:e8:23:20:9b:fe:a1:05:61:c5:23:36:
         14:1d:73:dc:31:bc:16:1b:51:cb:32:07:4e:bf:8b:9b:47:47:
         ac:ac:0d:43:c0:b2:c8:81:d9:d6:dc:27:50:47:af:a3:b9:49:
         2f:7b:e5:a7:d9:ec:b0:42:70:ee:52:3f:61:09:d5:37:24:90:
         9a:8b:ee:fd:99:20:e4:03:a7:b7:c0:48:fc:5f:8d:d1:f7:b2:
         00:1b:b2:1e:7c:a1:6b:e2:47:83:97:5d:07:a3:d4:8a:a4:d9:
         1e:e7:42:56
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfyTEFOaSzi9zKX/cUNvj76JOkPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENBODA0Mjk3ODQzMUQyQjREMTVFNTQyMzM4NjhFOEVC
QTBEMTQ0NjAeFw0yMzA4MTQxNTUzMzVaFw0yNDA4MTIxNTU4MzVaMDMxMTAvBgNV
BAMTKEExRUIzNkEyM0U0ODJEM0MzMTY0QTJDQzQ5ODE2NTM3OUZGQTI2REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+uc5Yg1zQTzE7qpfytJ1yZBm
vt4T0QJT8qFl0c+f63VV/mHXYrJaMuB+AJKdce95PNUHLRMfD3Ns5iAat12vW6ag
8C6D5dUFyDjYGVJT5a8E0MdDu7wAM9/cLx5qmlJ3jtYpwT/D8GslcYPmR0vjW2vT
bdzfGWB8st79nwHVAIS8OIfnnZ7BADud3q1RkQEZ09apD4Cw/28DWPK7GUqcGVJO
HntYdbZrC20S7sO3xnLVrsq7x2rpbxV5SpOLugofktnqF42grnAKEdUQJI2KDvBl
Alz56q1lU1lwdfJuEsdRsGmIeTqS2EXSANI0KBnoluIGCsbjvMPsTcCwfriRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoes2oj5ILTwxZKLMSYFlN5/6Jt4wHwYDVR0j
BBgwFoAU3KgEKXhDHStNFeVCM4aOjroNFEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhHNk45aFNkWFBGeGIzalFVV1lBd0E5N0cyMk5GQUNjOHdSTTdHd3BB
SmQvMi9EQ0E4MDQyOTc4NDMxRDJCNEQxNUU1NDIzMzg2OEU4RUJBMEQxNDQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQTgwNDI5Nzg0MzFEMkI0
RDE1RTU0MjMzODY4RThFQkEwRDE0NDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlYRzZOOWhTZFhQRnhiM2pRVVdZQXdBOTdHMjJORkFDYzh3Uk03R3dwQUpkLzIv
MzQzNTJlMzIzMzM1MmUzMTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt67UwDQYJKoZIhvcNAQELBQADggEBALOyQ2ep
3UskAoaxqXLe3RECJMT4vJwITzXLAO1SQbiVZLYOfTFZRwZ783A5mnblph2aGw4K
+FoOUzyO/yBfb/9wn84O2K7ggNLyq73j0jTl9PxqE23Asb6yCOUugFl57vmxTdSP
5ws0scvahALmmlsPcG6fmG22MNzUNXuqJJ9BfT8BRuyuupWLDxy0f0fXvJKyT25G
DSjoIyCb/qEFYcUjNhQdc9wxvBYbUcsyB06/i5tHR6ysDUPAssiB2dbcJ1BHr6O5
SS975afZ7LBCcO5SP2EJ1TckkJqL7v2ZIOQDp7fASPxfjdH3sgAbsh58oWviR4OX
XQej1Iqk2R7nQlY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:35:17 2025 by rpki-client