Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/34352e3136382e3138332e302f32342d3234203d3e20323638303638.roa
File:                     34352e3136382e3138332e302f32342d3234203d3e20323638303638.roa (raw, json)
Hash identifier:          XWw0AgeAn1C0U7mK1mkDNk3/esF82UihdQb6LnbwJCI=
Subject key identifier:   74:6F:BF:BE:0C:C2:C3:BE:2C:F9:99:43:32:23:C4:29:37:B5:79:8C
Certificate issuer:       /CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
Certificate serial:       52BE5D47AEFA4E3DA74503AF386F451CCB9149BB
Authority key identifier: BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/34352e3136382e3138332e302f32342d3234203d3e20323638303638.roa
Signing time:             Mon 29 Jan 2024 11:44:41 +0000
ROA not before:           Mon 29 Jan 2024 11:39:41 +0000
ROA not after:            Mon 27 Jan 2025 11:44:41 +0000
asID:                     268068
IP address blocks:        45.168.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:be:5d:47:ae:fa:4e:3d:a7:45:03:af:38:6f:45:1c:cb:91:49:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
        Validity
            Not Before: Jan 29 11:39:41 2024 GMT
            Not After : Jan 27 11:44:41 2025 GMT
        Subject: CN=746FBFBE0CC2C3BE2CF999433223C42937B5798C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:ff:fb:c0:4d:53:5a:e8:80:c0:5c:7f:bf:
                    72:5a:53:5c:9d:d3:23:79:1a:ca:13:6d:15:55:93:
                    13:8f:37:b4:d8:f0:7c:01:91:63:3c:f7:d3:d9:cc:
                    7b:ec:d6:11:21:83:79:45:0c:1e:27:13:28:24:b7:
                    ec:45:93:f9:d5:66:bf:7a:d4:86:5c:28:87:95:36:
                    bc:4b:54:48:19:78:24:ca:81:4a:d0:86:59:7f:95:
                    5d:4a:23:65:9c:60:2d:be:10:35:d4:d5:52:0e:bc:
                    bd:32:de:22:c4:24:04:00:77:45:a2:de:0d:33:95:
                    94:7b:70:b5:52:d1:c9:fa:04:13:f1:7b:87:68:d3:
                    a6:b9:30:6f:ce:b6:5a:49:12:53:5f:6e:1a:47:b4:
                    37:c0:31:c8:ad:61:37:dd:05:6e:99:f7:4d:52:71:
                    1b:a9:33:b9:99:e7:51:07:c5:1e:92:e8:e3:47:1d:
                    e7:c4:fe:b9:a3:9d:72:e7:88:5d:cb:33:9b:0c:27:
                    c9:8d:34:2d:be:8b:7f:8f:f7:4d:48:c3:f5:3f:81:
                    6e:fc:6e:b7:1f:5d:31:da:3f:51:28:2a:21:48:aa:
                    b0:6d:10:5f:79:03:27:4a:6d:71:0e:e0:f7:02:d4:
                    92:d8:d7:2c:0b:0c:e6:7a:55:0d:9c:13:4a:d5:61:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6F:BF:BE:0C:C2:C3:BE:2C:F9:99:43:32:23:C4:29:37:B5:79:8C
            X509v3 Authority Key Identifier:
                keyid:BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/34352e3136382e3138332e302f32342d3234203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:14:b7:d6:31:64:36:15:db:cc:a0:cf:e5:d4:9c:0f:46:21:
         b9:a9:6b:44:1b:12:d2:0f:16:c8:be:0d:f1:97:63:e4:e4:25:
         30:a8:fa:da:c6:6f:20:71:f3:4b:0b:74:13:8f:79:fd:2c:64:
         e3:c3:a9:f2:21:09:c9:ff:12:48:0d:a7:08:5f:ee:2b:25:f0:
         26:51:8b:77:79:8a:4e:56:7c:56:d8:59:77:bf:94:66:17:6a:
         1d:c6:c0:74:90:d9:16:e3:05:77:70:35:96:78:8b:6e:2c:ed:
         c6:a5:f5:f4:95:9c:8d:0d:38:d9:47:ae:a8:46:e1:0f:b1:9c:
         79:92:26:74:b4:e3:7e:5e:44:5a:2c:cf:85:11:a1:f7:d9:98:
         60:70:04:5a:44:e8:af:33:19:06:3c:85:8f:8c:cd:96:34:a0:
         9f:28:79:ad:06:fb:bb:18:66:0f:54:87:d4:c7:72:26:0b:71:
         f6:97:a4:00:91:06:c6:d2:51:9a:d3:61:fa:72:96:2f:74:6d:
         ec:10:a0:16:53:d7:c1:6d:70:b4:43:fa:90:38:d5:14:b6:a5:
         29:b9:d1:ce:ac:5d:d4:27:bf:e3:a1:35:40:3e:61:e8:5e:76:
         81:f4:20:06:eb:ac:df:04:66:65:d3:33:2e:1d:65:25:48:f1:
         5e:2b:9a:77
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUr5dR676Tj2nRQOvOG9FHMuRSbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFRTE5MEI2NUIyMjI4MDkwRDUxNUI3Q0Y2MkI2QUVB
QzJGNTI3MDAeFw0yNDAxMjkxMTM5NDFaFw0yNTAxMjcxMTQ0NDFaMDMxMTAvBgNV
BAMTKDc0NkZCRkJFMENDMkMzQkUyQ0Y5OTk0MzMyMjNDNDI5MzdCNTc5OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTk//7wE1TWuiAwFx/v3JaU1yd
0yN5GsoTbRVVkxOPN7TY8HwBkWM899PZzHvs1hEhg3lFDB4nEygkt+xFk/nVZr96
1IZcKIeVNrxLVEgZeCTKgUrQhll/lV1KI2WcYC2+EDXU1VIOvL0y3iLEJAQAd0Wi
3g0zlZR7cLVS0cn6BBPxe4do06a5MG/OtlpJElNfbhpHtDfAMcitYTfdBW6Z901S
cRupM7mZ51EHxR6S6ONHHefE/rmjnXLniF3LM5sMJ8mNNC2+i3+P901Iw/U/gW78
brcfXTHaP1EoKiFIqrBtEF95AydKbXEO4PcC1JLY1ywLDOZ6VQ2cE0rVYZWHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdG+/vgzCw74s+ZlDMiPEKTe1eYwwHwYDVR0j
BBgwFoAUuu4ZC2WyIoCQ1RW3z2K2rqwvUnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUVRUHJCbUtIVzJGZURHNkFiYlRRN1FYeFB6eXFpZXlrSjhlZXN1ZlZw
MTEvMC9CQUVFMTkwQjY1QjIyMjgwOTBENTE1QjdDRjYyQjZBRUFDMkY1MjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBRUUxOTBCNjVCMjIyODA5
MEQ1MTVCN0NGNjJCNkFFQUMyRjUyNzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FFUVByQm1LSFcyRmVERzZBYmJUUTdRWHhQenlxaWV5a0o4ZWVzdWZWcDExLzAv
MzQzNTJlMzEzNjM4MmUzMTM4MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqLcwDQYJKoZIhvcNAQELBQADggEBAK4Ut9Yx
ZDYV28ygz+XUnA9GIbmpa0QbEtIPFsi+DfGXY+TkJTCo+trGbyBx80sLdBOPef0s
ZOPDqfIhCcn/EkgNpwhf7isl8CZRi3d5ik5WfFbYWXe/lGYXah3GwHSQ2RbjBXdw
NZZ4i24s7cal9fSVnI0NONlHrqhG4Q+xnHmSJnS0435eRFosz4URoffZmGBwBFpE
6K8zGQY8hY+MzZY0oJ8oea0G+7sYZg9Uh9THciYLcfaXpACRBsbSUZrTYfpyli90
bewQoBZT18FtcLRD+pA41RS2pSm50c6sXdQnv+OhNUA+YehedoH0IAbrrN8EZmXT
My4dZSVI8V4rmnc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:35 2025 by rpki-client