Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37382e302f32332d3233203d3e20323639373030.roa
File:                     34352e3139312e37382e302f32332d3233203d3e20323639373030.roa (raw, json)
Hash identifier:          pZI2yYKRb37Zwt8+0hYCiYmYHU6VdaYvwLWo4vFkkTk=
Subject key identifier:   56:38:08:A1:CF:08:4F:E9:AC:B9:32:6E:A6:2F:84:4A:3B:E8:86:10
Certificate issuer:       /CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
Certificate serial:       6496747F639F589EA0DF1C42645D6770D19FFE0B
Authority key identifier: F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37382e302f32332d3233203d3e20323639373030.roa
Signing time:             Tue 16 May 2023 02:00:00 +0000
ROA not before:           Tue 16 May 2023 01:55:00 +0000
ROA not after:            Tue 14 May 2024 02:00:00 +0000
asID:                     269700
IP address blocks:        45.191.78.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:96:74:7f:63:9f:58:9e:a0:df:1c:42:64:5d:67:70:d1:9f:fe:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
        Validity
            Not Before: May 16 01:55:00 2023 GMT
            Not After : May 14 02:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:09:dd:4b:e0:2a:aa:32:64:05:ac:09:09:
                    27:08:72:70:e3:e7:ec:21:b8:79:49:c3:1a:99:44:
                    5b:df:d1:3c:83:ad:ce:0d:4d:6c:89:79:ec:c9:29:
                    b1:f3:37:ae:a7:b3:b8:03:fd:96:65:1e:29:d2:2f:
                    06:b0:fc:80:19:93:30:2b:4d:7d:3a:38:5a:eb:14:
                    18:8e:56:71:1d:36:3a:c7:dc:2d:3e:2d:90:67:5f:
                    cf:2e:0e:d3:50:21:b1:be:12:bd:66:41:4e:53:c0:
                    fb:97:fb:95:9e:27:c3:75:21:02:53:e3:66:29:c6:
                    ba:ad:f9:cd:42:64:a8:66:2f:e5:e9:9a:a9:8a:22:
                    d8:ae:a3:55:b0:3b:21:05:38:fd:a5:1c:7b:45:63:
                    ea:26:8a:b2:82:58:62:1f:7b:05:7a:8d:64:20:d8:
                    bf:df:94:87:c4:96:72:5b:80:52:a3:bb:7e:6e:ef:
                    6a:b3:15:d3:2f:2b:af:3c:69:4f:75:e2:fb:8a:e0:
                    f1:8c:8a:65:ae:6c:60:89:2a:d0:a8:3e:6d:61:1b:
                    8d:00:5d:1b:c8:2e:30:53:e3:e8:61:7b:a2:77:cd:
                    a9:be:5c:f9:5d:36:87:f3:50:04:af:68:09:0f:98:
                    ea:b3:a7:4f:e0:ab:89:02:45:7f:2c:7c:bc:04:1d:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:08:A1:CF:08:4F:E9:AC:B9:32:6E:A6:2F:84:4A:3B:E8:86:10
            X509v3 Authority Key Identifier:
                keyid:F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37382e302f32332d3233203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:f4:c4:b4:e8:fc:41:4b:69:d8:37:4e:8c:d3:4f:b0:e0:98:
         2f:04:f0:20:44:b8:e9:c1:85:d4:4a:af:f2:37:34:00:22:f3:
         78:fa:3a:87:5f:02:c6:2c:56:87:3b:d3:35:57:a4:8d:ad:f5:
         a6:46:61:24:c4:c4:f5:0a:b0:09:f7:0a:3d:63:0b:af:ab:3b:
         2d:8d:69:c9:30:58:57:9c:39:d1:77:1a:38:2c:86:19:a5:6a:
         66:4c:e3:da:9b:15:02:28:41:28:07:7f:b3:ab:d4:c1:42:d6:
         b9:38:54:cd:fc:70:8e:93:fc:79:90:02:32:b3:f6:85:44:5b:
         0f:50:2b:8b:e3:26:ff:ce:44:57:a2:f4:af:49:86:5b:88:96:
         e6:0d:6f:76:e2:c2:9a:f8:ca:05:c7:2d:b4:54:81:32:99:96:
         d7:02:f5:f5:39:7f:0b:e2:c6:55:2b:62:fa:4f:06:8b:83:da:
         9f:d4:54:c2:30:d9:72:6a:e0:15:41:7c:55:60:3e:f8:f5:63:
         c4:f1:d2:99:55:40:f3:e7:4f:c7:ff:2e:08:32:fd:5f:14:c3:
         b0:9a:f9:e2:e7:79:6f:e2:28:5b:aa:72:94:d4:43:13:44:25:
         b4:3b:fd:8e:54:bb:73:de:b2:5c:c2:74:80:b4:5b:72:ea:dd:
         09:28:e7:7b
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUZJZ0f2OfWJ6g3xxCZF1ncNGf/gswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlCNjcxMjlCREMzQkQwQ0ZCQjNBNEU2OTNCQUEzNDA3
NjIyRkRBQTAeFw0yMzA1MTYwMTU1MDBaFw0yNDA1MTQwMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkFDMDA5REQ0QkUwMkFBQTMy
NjQwNUFDMDkwOTI3MDg3MjcwRTNFN0VDMjFCODc5NDlDMzFBOTk0NDVCREZEMTND
ODNBRENFMEQ0RDZDODk3OUVDQzkyOUIxRjMzN0FFQTdCM0I4MDNGRDk2NjUxRTI5
RDIyRjA2QjBGQzgwMTk5MzMwMkI0RDdEM0EzODVBRUIxNDE4OEU1NjcxMUQzNjNB
QzdEQzJEM0UyRDkwNjc1RkNGMkUwRUQzNTAyMUIxQkUxMkJENjY0MTRFNTNDMEZC
OTdGQjk1OUUyN0MzNzUyMTAyNTNFMzY2MjlDNkJBQURGOUNENDI2NEE4NjYyRkU1
RTk5QUE5OEEyMkQ4QUVBMzU1QjAzQjIxMDUzOEZEQTUxQzdCNDU2M0VBMjY4QUIy
ODI1ODYyMUY3QjA1N0E4RDY0MjBEOEJGREY5NDg3QzQ5NjcyNUI4MDUyQTNCQjdF
NkVFRjZBQjMxNUQzMkYyQkFGM0M2OTRGNzVFMkZCOEFFMEYxOEM4QTY1QUU2QzYw
ODkyQUQwQTgzRTZENjExQjhEMDA1RDFCQzgyRTMwNTNFM0U4NjE3QkEyNzdDREE5
QkU1Q0Y5NUQzNjg3RjM1MDA0QUY2ODA5MEY5OEVBQjNBNzRGRTBBQjg5MDI0NTdG
MkM3Q0JDMDQxREQ0REYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAusAJ3UvgKqoyZAWsCQknCHJw4+fsIbh5ScMamURb39E8g63ODU1s
iXnsySmx8zeup7O4A/2WZR4p0i8GsPyAGZMwK019Ojha6xQYjlZxHTY6x9wtPi2Q
Z1/PLg7TUCGxvhK9ZkFOU8D7l/uVnifDdSECU+NmKca6rfnNQmSoZi/l6ZqpiiLY
rqNVsDshBTj9pRx7RWPqJoqyglhiH3sFeo1kINi/35SHxJZyW4BSo7t+bu9qsxXT
LyuvPGlPdeL7iuDxjIplrmxgiSrQqD5tYRuNAF0byC4wU+PoYXuid82pvlz5XTaH
81AEr2gJD5jqs6dP4KuJAkV/LHy8BB3U3wIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FFY4CKHPCE/prLkybqYvhEo76IYQMB8GA1UdIwQYMBaAFPm2cSm9w70M+7Ok5pO6
o0B2Iv2qMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FyY0JyUXB6RnVUZkVr
SFZGRnFoTWt2VVl6QTNSaFNWVG10MnN2TUQyS3F5LzAvRjlCNjcxMjlCREMzQkQw
Q0ZCQjNBNEU2OTNCQUEzNDA3NjIyRkRBQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GOUI2NzEyOUJEQzNCRDBDRkJCM0E0RTY5M0JBQTM0MDc2MjJG
REFBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BcmNCclFwekZ1VGZFa0hWRkZx
aE1rdlVZekEzUmhTVlRtdDJzdk1EMktxeS8wLzM0MzUyZTMxMzkzMTJlMzczODJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzOTM3MzAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2/
TjANBgkqhkiG9w0BAQsFAAOCAQEACfTEtOj8QUtp2DdOjNNPsOCYLwTwIES46cGF
1Eqv8jc0ACLzePo6h18CxixWhzvTNVekja31pkZhJMTE9QqwCfcKPWMLr6s7LY1p
yTBYV5w50XcaOCyGGaVqZkzj2psVAihBKAd/s6vUwULWuThUzfxwjpP8eZACMrP2
hURbD1Ari+Mm/85EV6L0r0mGW4iW5g1vduLCmvjKBccttFSBMpmW1wL19Tl/C+LG
VSti+k8Gi4Pan9RUwjDZcmrgFUF8VWA++PVjxPHSmVVA8+dPx/8uCDL9XxTDsJr5
4ud5b+IoW6pylNRDE0QltDv9jlS7c96yXMJ0gLRbcurdCSjnew==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:46 2025 by rpki-client