Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/34352e3137322e3138302e302f32322d3234203d3e20323638373732.roa
File:                     34352e3137322e3138302e302f32322d3234203d3e20323638373732.roa (raw, json)
Hash identifier:          31/alXJlgR8TEVtpBzAMcun1SB2JlGtdfg5qIx7h5SU=
Subject key identifier:   D8:E7:55:0D:79:0E:D2:B7:BD:2C:99:00:AD:99:47:F9:19:58:01:06
Certificate issuer:       /CN=131615AEF72584ED22DEB683B789B0E2311412FA
Certificate serial:       04BCCBB9DA4065F4590CDCA97BAF0A7687353B8B
Authority key identifier: 13:16:15:AE:F7:25:84:ED:22:DE:B6:83:B7:89:B0:E2:31:14:12:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/131615AEF72584ED22DEB683B789B0E2311412FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/34352e3137322e3138302e302f32322d3234203d3e20323638373732.roa
Signing time:             Mon 16 Oct 2023 13:17:53 +0000
ROA not before:           Mon 16 Oct 2023 13:12:53 +0000
ROA not after:            Mon 14 Oct 2024 13:17:53 +0000
asID:                     268772
IP address blocks:        45.172.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bc:cb:b9:da:40:65:f4:59:0c:dc:a9:7b:af:0a:76:87:35:3b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131615AEF72584ED22DEB683B789B0E2311412FA
        Validity
            Not Before: Oct 16 13:12:53 2023 GMT
            Not After : Oct 14 13:17:53 2024 GMT
        Subject: CN=D8E7550D790ED2B7BD2C9900AD9947F919580106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:6b:c8:73:0a:0c:7b:37:00:6e:7a:67:c6:
                    d0:35:96:a4:9d:e9:bc:81:af:e7:34:2b:ed:d8:d1:
                    38:ef:e6:c6:d7:b5:4c:d8:cc:24:1c:94:b1:8d:14:
                    0c:4c:4f:dd:47:0f:69:3e:76:4d:04:0a:89:a3:8b:
                    7d:c8:ef:74:7d:2b:65:e9:21:05:64:dc:92:b4:fe:
                    d5:e6:fc:a5:aa:63:b4:3a:69:37:3f:91:5c:8b:78:
                    83:85:8a:41:b4:7a:29:7e:df:4e:8d:55:f4:8a:f5:
                    53:cc:e3:6f:3d:a4:37:55:b5:c8:43:73:bc:b8:45:
                    0d:dc:5d:77:4e:8e:da:bf:4e:d5:77:df:5f:b1:6d:
                    5d:bc:63:80:f8:69:3a:3c:3f:dd:9b:6a:72:6b:cd:
                    38:5d:47:bb:db:76:15:b1:2f:26:1e:d6:2b:7d:26:
                    7c:68:65:92:94:0d:b5:aa:9c:9b:47:05:f8:9e:e2:
                    00:89:81:00:47:41:12:ac:ea:77:24:32:ca:e1:0f:
                    bd:6e:d9:42:e8:e8:cc:17:c3:ab:0e:5b:8d:46:6d:
                    08:b0:4b:6f:4e:10:3b:b3:45:11:23:35:76:88:b8:
                    12:1a:40:3e:0e:5f:48:06:c4:e8:15:bc:19:4c:bc:
                    37:88:4f:f0:b0:bf:42:c8:43:de:cc:7c:af:ed:d1:
                    41:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E7:55:0D:79:0E:D2:B7:BD:2C:99:00:AD:99:47:F9:19:58:01:06
            X509v3 Authority Key Identifier:
                keyid:13:16:15:AE:F7:25:84:ED:22:DE:B6:83:B7:89:B0:E2:31:14:12:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/131615AEF72584ED22DEB683B789B0E2311412FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/131615AEF72584ED22DEB683B789B0E2311412FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ptizjQEN1V5rhh9AMr3gHCjQaAEFyESS1WfboffzWCN/0/34352e3137322e3138302e302f32322d3234203d3e20323638373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:2f:75:33:ff:ea:89:78:2c:e2:5a:a1:f2:97:2f:55:83:05:
         f8:10:95:44:fe:3e:01:37:e9:d0:5f:0d:e8:cc:66:63:d3:99:
         c2:6f:9d:c7:bc:2a:79:bd:d2:40:cf:f6:b3:35:33:e9:8d:33:
         dc:13:5a:8f:89:64:b6:08:d2:71:f2:38:70:aa:09:dc:fe:e0:
         c3:5c:69:4a:75:2e:b4:ee:81:bd:c7:81:3b:6f:5e:54:00:93:
         89:9b:fc:2a:ef:64:85:98:2d:bd:4a:ac:26:55:60:02:ec:34:
         e1:a9:bc:72:1c:1a:43:20:57:8e:1c:cc:c0:04:49:ec:cf:fe:
         39:32:ab:2b:4d:24:0d:86:dd:6a:98:28:16:d8:72:d1:0d:32:
         54:14:a0:3b:7c:db:1b:a3:c9:bc:34:45:69:91:1b:a2:d8:40:
         eb:14:11:9d:df:50:5f:f5:a2:93:16:b9:f5:64:9b:87:11:e5:
         d2:58:29:81:c7:99:58:08:45:36:5a:41:af:f1:66:0e:71:be:
         2e:2f:c9:db:22:45:ee:f5:dc:4a:5f:39:d2:8d:7a:e3:ba:b4:
         4e:3c:f2:42:f7:8e:60:b9:9c:34:68:98:05:9f:6c:f4:f3:1b:
         78:92:95:72:54:0d:e7:61:4b:d8:ce:8c:85:e2:ad:7f:73:cc:
         c7:7a:72:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBLzLudpAZfRZDNype68Kdoc1O4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMxNjE1QUVGNzI1ODRFRDIyREVCNjgzQjc4OUIwRTIz
MTE0MTJGQTAeFw0yMzEwMTYxMzEyNTNaFw0yNDEwMTQxMzE3NTNaMDMxMTAvBgNV
BAMTKEQ4RTc1NTBENzkwRUQyQjdCRDJDOTkwMEFEOTk0N0Y5MTk1ODAxMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/WvIcwoMezcAbnpnxtA1lqSd
6byBr+c0K+3Y0Tjv5sbXtUzYzCQclLGNFAxMT91HD2k+dk0EComji33I73R9K2Xp
IQVk3JK0/tXm/KWqY7Q6aTc/kVyLeIOFikG0eil+306NVfSK9VPM4289pDdVtchD
c7y4RQ3cXXdOjtq/TtV331+xbV28Y4D4aTo8P92banJrzThdR7vbdhWxLyYe1it9
JnxoZZKUDbWqnJtHBfie4gCJgQBHQRKs6nckMsrhD71u2ULo6MwXw6sOW41GbQiw
S29OEDuzRREjNXaIuBIaQD4OX0gGxOgVvBlMvDeIT/Cwv0LIQ97MfK/t0UGvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2OdVDXkO0re9LJkArZlH+RlYAQYwHwYDVR0j
BBgwFoAUExYVrvclhO0i3raDt4mw4jEUEvowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXB0aXpqUUVOMVY1cmhoOUFNcjNnSENqUWFBRUZ5RVNTMVdmYm9mZnpX
Q04vMC8xMzE2MTVBRUY3MjU4NEVEMjJERUI2ODNCNzg5QjBFMjMxMTQxMkZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzMTYxNUFFRjcyNTg0RUQy
MkRFQjY4M0I3ODlCMEUyMzExNDEyRkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlwdGl6alFFTjFWNXJoaDlBTXIzZ0hDalFhQUVGeUVTUzFXZmJvZmZ6V0NOLzAv
MzQzNTJlMzEzNzMyMmUzMTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrLQwDQYJKoZIhvcNAQELBQADggEBAB0vdTP/
6ol4LOJaofKXL1WDBfgQlUT+PgE36dBfDejMZmPTmcJvnce8Knm90kDP9rM1M+mN
M9wTWo+JZLYI0nHyOHCqCdz+4MNcaUp1LrTugb3HgTtvXlQAk4mb/CrvZIWYLb1K
rCZVYALsNOGpvHIcGkMgV44czMAESezP/jkyqytNJA2G3WqYKBbYctENMlQUoDt8
2xujybw0RWmRG6LYQOsUEZ3fUF/1opMWufVkm4cR5dJYKYHHmVgIRTZaQa/xZg5x
vi4vydsiRe713EpfOdKNeuO6tE488kL3jmC5nDRomAWfbPTzG3iSlXJUDedhS9jO
jIXirX9zzMd6cgk=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:32 2025 by rpki-client