Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132302e302f32322d3232203d3e20323638313534.roa
File:                     34352e3137302e3132302e302f32322d3232203d3e20323638313534.roa (raw, json)
Hash identifier:          ApLlfzm273q6oiNyVxYVTZXOu98hdX0jHFguRPC2UDI=
Subject key identifier:   0C:6D:AB:7B:4A:12:37:3B:EC:5A:67:AC:FE:1D:9D:F0:57:BA:61:CA
Certificate issuer:       /CN=18A43826A65928B70C1A033867FABC5F6E4207C0
Certificate serial:       138A3456F1C6FDE12C3DC0F5C85D4AF3818A6263
Authority key identifier: 18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18A43826A65928B70C1A033867FABC5F6E4207C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132302e302f32322d3232203d3e20323638313534.roa
Signing time:             Sat 18 Mar 2023 05:50:46 +0000
ROA not before:           Sat 18 Mar 2023 05:45:46 +0000
ROA not after:            Sat 16 Mar 2024 05:50:46 +0000
asID:                     268154
IP address blocks:        45.170.120.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8a:34:56:f1:c6:fd:e1:2c:3d:c0:f5:c8:5d:4a:f3:81:8a:62:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A43826A65928B70C1A033867FABC5F6E4207C0
        Validity
            Not Before: Mar 18 05:45:46 2023 GMT
            Not After : Mar 16 05:50:46 2024 GMT
        Subject: CN=0C6DAB7B4A12373BEC5A67ACFE1D9DF057BA61CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:0e:87:97:2e:c3:37:ce:c1:75:40:5c:5d:
                    bb:a1:b3:b7:b4:c1:d8:07:61:ea:37:7f:85:75:2f:
                    cb:e1:31:73:6d:84:56:24:11:8e:a4:b6:16:85:b5:
                    be:68:6f:49:a2:56:0b:91:04:29:9e:d4:86:77:0d:
                    c0:9d:73:e3:a5:5f:7e:f6:5f:42:87:89:bc:78:ae:
                    3c:0b:7b:2c:12:47:ba:71:7b:02:76:8b:bb:32:80:
                    98:90:36:93:59:cf:eb:3b:4b:18:82:44:ae:1f:bc:
                    5a:4d:2a:b3:f4:15:72:59:80:b1:c4:71:83:20:c8:
                    fd:8d:87:74:ff:fe:3c:51:dc:29:63:93:b8:2a:8f:
                    c5:c9:bd:97:e9:49:50:7b:ab:7e:e3:ec:4a:80:a1:
                    3b:9c:4b:ad:df:1e:b3:00:02:1e:d3:6e:6a:52:86:
                    9c:ba:f9:fc:91:97:92:fd:e4:a7:87:6d:83:7a:c7:
                    8d:49:7b:2d:49:13:63:d0:7c:da:c0:54:6b:6d:2d:
                    9e:bd:93:32:85:97:cb:ed:fa:27:32:fa:41:db:f6:
                    aa:dc:b4:47:ba:af:32:9e:3f:04:f0:60:bf:1f:e2:
                    38:a2:cf:46:35:72:7d:cd:95:8c:d0:46:55:18:7a:
                    c2:72:3b:6a:af:46:a8:d3:e1:8e:10:0f:00:35:3e:
                    33:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6D:AB:7B:4A:12:37:3B:EC:5A:67:AC:FE:1D:9D:F0:57:BA:61:CA
            X509v3 Authority Key Identifier:
                keyid:18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/18A43826A65928B70C1A033867FABC5F6E4207C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18A43826A65928B70C1A033867FABC5F6E4207C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132302e302f32322d3232203d3e20323638313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:b0:f6:31:46:1e:d0:5a:c1:2b:6b:5d:80:ff:47:a0:07:0b:
         c4:f6:23:b5:58:59:ae:7f:5c:d9:d8:63:a3:64:c5:e9:f0:d9:
         95:d5:39:99:6f:c6:9c:2e:e2:a1:fb:d0:52:a1:64:61:ea:43:
         aa:38:67:d0:51:5c:62:61:6a:8f:da:11:ee:d6:40:ca:ef:08:
         ef:5d:e9:d0:da:b8:8d:d9:5e:55:ae:40:a0:d5:0a:3c:d4:97:
         7d:8b:b1:4a:f0:e0:8f:fa:6d:cf:1f:13:e8:47:83:6f:fe:57:
         2b:97:30:b6:9e:7d:e7:f0:e5:d7:cd:4e:54:ea:93:92:c3:30:
         90:6a:a1:04:0e:0f:92:d3:ec:ca:e1:8a:e9:e5:36:24:e5:ca:
         87:d9:72:60:02:18:7a:67:9c:38:60:73:c4:04:5b:cf:c3:41:
         f8:dc:4e:36:9d:09:71:75:cb:53:5f:d3:a5:b1:f8:c7:af:39:
         6f:2e:08:7d:62:32:a2:f3:f0:61:99:cc:fa:d9:21:79:bd:b7:
         cb:79:fd:80:8d:c8:0e:28:97:48:f8:84:24:0f:82:23:95:cb:
         b4:eb:06:e6:56:c0:12:f0:74:82:c2:58:73:26:69:b5:1b:90:
         fb:5f:1b:50:6b:cc:b9:aa:74:8a:4e:02:4e:4e:ee:18:7f:4e:
         01:20:12:0e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE4o0VvHG/eEsPcD1yF1K84GKYmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThBNDM4MjZBNjU5MjhCNzBDMUEwMzM4NjdGQUJDNUY2
RTQyMDdDMDAeFw0yMzAzMTgwNTQ1NDZaFw0yNDAzMTYwNTUwNDZaMDMxMTAvBgNV
BAMTKDBDNkRBQjdCNEExMjM3M0JFQzVBNjdBQ0ZFMUQ5REYwNTdCQTYxQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8g6Hly7DN87BdUBcXbuhs7e0
wdgHYeo3f4V1L8vhMXNthFYkEY6kthaFtb5ob0miVguRBCme1IZ3DcCdc+OlX372
X0KHibx4rjwLeywSR7pxewJ2i7sygJiQNpNZz+s7SxiCRK4fvFpNKrP0FXJZgLHE
cYMgyP2Nh3T//jxR3Cljk7gqj8XJvZfpSVB7q37j7EqAoTucS63fHrMAAh7TbmpS
hpy6+fyRl5L95KeHbYN6x41Jey1JE2PQfNrAVGttLZ69kzKFl8vt+icy+kHb9qrc
tEe6rzKePwTwYL8f4jiiz0Y1cn3NlYzQRlUYesJyO2qvRqjT4Y4QDwA1PjNTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDG2re0oSNzvsWmes/h2d8Fe6YcowHwYDVR0j
BBgwFoAUGKQ4JqZZKLcMGgM4Z/q8X25CB8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRVM0IxZFdEam9vMmE4U21zNGl5ODFkUVZqZ3YzNThVSGJBeVhlWVh6
cWgvMC8xOEE0MzgyNkE2NTkyOEI3MEMxQTAzMzg2N0ZBQkM1RjZFNDIwN0MwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE4QTQzODI2QTY1OTI4Qjcw
QzFBMDMzODY3RkFCQzVGNkU0MjA3QzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0VTNCMWRXRGpvbzJhOFNtczRpeTgxZFFWamd2MzU4VUhiQXlYZVlYenFoLzAv
MzQzNTJlMzEzNzMwMmUzMTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMTM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqngwDQYJKoZIhvcNAQELBQADggEBADKw9jFG
HtBawStrXYD/R6AHC8T2I7VYWa5/XNnYY6Nkxenw2ZXVOZlvxpwu4qH70FKhZGHq
Q6o4Z9BRXGJhao/aEe7WQMrvCO9d6dDauI3ZXlWuQKDVCjzUl32LsUrw4I/6bc8f
E+hHg2/+VyuXMLaefefw5dfNTlTqk5LDMJBqoQQOD5LT7MrhiunlNiTlyofZcmAC
GHpnnDhgc8QEW8/DQfjcTjadCXF1y1Nf06Wx+MevOW8uCH1iMqLz8GGZzPrZIXm9
t8t5/YCNyA4ol0j4hCQPgiOVy7TrBuZWwBLwdILCWHMmabUbkPtfG1BrzLmqdIpO
Ak5O7hh/TgEgEg4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:23:27 2025 by rpki-client