Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132302e302f32332d3233203d3e20323638313534.roa
File:                     34352e3137302e3132302e302f32332d3233203d3e20323638313534.roa (raw, json)
Hash identifier:          Tr4XCTET0Z8OLAUAToD4BEoiqrCd3EDRfXXzTFhrmzo=
Subject key identifier:   3E:A7:0B:A0:E6:5F:B2:FD:FC:9C:86:2D:86:84:CF:DD:F1:40:7A:8B
Certificate issuer:       /CN=18A43826A65928B70C1A033867FABC5F6E4207C0
Certificate serial:       181BA25CAD368BF9778858C44BA90FB17251DBCA
Authority key identifier: 18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18A43826A65928B70C1A033867FABC5F6E4207C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132302e302f32332d3233203d3e20323638313534.roa
Signing time:             Sat 18 Mar 2023 05:50:52 +0000
ROA not before:           Sat 18 Mar 2023 05:45:52 +0000
ROA not after:            Sat 16 Mar 2024 05:50:52 +0000
asID:                     268154
IP address blocks:        45.170.120.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1b:a2:5c:ad:36:8b:f9:77:88:58:c4:4b:a9:0f:b1:72:51:db:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A43826A65928B70C1A033867FABC5F6E4207C0
        Validity
            Not Before: Mar 18 05:45:52 2023 GMT
            Not After : Mar 16 05:50:52 2024 GMT
        Subject: CN=3EA70BA0E65FB2FDFC9C862D8684CFDDF1407A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a0:d0:59:02:f8:07:47:5d:ae:f0:88:48:91:
                    c1:4c:8c:8d:64:c4:44:ac:bc:81:69:ba:5c:e8:f0:
                    c3:a4:2a:f9:fc:c4:df:e9:f3:d7:9f:3f:96:d1:97:
                    83:e3:04:a9:e8:04:68:ff:8e:56:8b:3d:64:a9:cb:
                    37:61:13:36:21:14:77:45:82:d3:ee:71:89:64:45:
                    3d:9c:03:ed:6c:fd:7a:38:4e:13:a4:d6:fb:e7:86:
                    9f:77:74:30:dd:66:83:61:f6:5e:db:03:2b:33:68:
                    5a:fd:59:d0:c0:32:00:6b:c9:06:b7:b5:8d:5f:ad:
                    a7:b6:ac:e1:3c:fc:79:67:5f:e2:cf:71:bc:f3:25:
                    0c:30:0c:e8:11:e5:7b:dc:0f:cc:91:db:5f:53:e0:
                    eb:71:33:49:7b:15:db:a9:2e:65:16:10:e9:9f:72:
                    f3:bb:fa:ee:22:56:40:55:3c:52:95:a7:62:ac:46:
                    82:fe:e2:f4:7d:6d:bc:6c:05:93:2e:be:c1:30:5a:
                    02:aa:dc:b9:b2:b7:c1:5c:82:0d:9b:03:b7:53:6e:
                    23:37:5c:fe:fa:72:6d:27:86:b4:b9:84:b8:16:d2:
                    0b:72:d8:34:0f:e6:f0:4a:09:22:f5:9c:d2:d2:bb:
                    c9:c3:fd:02:1e:c1:ca:db:6c:c0:14:d4:75:4c:f7:
                    5b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A7:0B:A0:E6:5F:B2:FD:FC:9C:86:2D:86:84:CF:DD:F1:40:7A:8B
            X509v3 Authority Key Identifier:
                keyid:18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/18A43826A65928B70C1A033867FABC5F6E4207C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18A43826A65928B70C1A033867FABC5F6E4207C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132302e302f32332d3233203d3e20323638313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:01:29:6d:c4:b5:ed:fa:1a:e6:cd:30:85:20:b4:11:60:b3:
         05:9a:0b:13:93:52:1c:62:79:ec:52:4b:54:8d:26:3c:9c:56:
         7b:e9:ae:86:4c:9e:43:cd:f3:07:20:0e:85:b3:80:ad:5a:81:
         68:b6:52:82:5e:c6:9d:57:21:9b:a7:79:b5:21:0b:0c:d5:ad:
         3f:70:16:bc:35:4b:77:c7:f2:5b:f5:4d:ee:fc:7d:2d:2a:5c:
         5f:a6:07:37:13:79:32:8d:d3:ba:82:0f:f5:39:0b:87:9b:a5:
         d1:e4:d5:90:77:84:a9:0e:ab:c0:28:e4:29:c4:27:0f:10:2f:
         b7:00:2a:b7:eb:6b:98:dc:ea:14:83:96:ff:81:8f:12:1c:90:
         7e:82:69:8f:2c:0d:41:34:0b:54:69:d1:54:28:58:9d:16:90:
         c2:2e:07:f2:fb:b2:3e:d3:f8:39:cb:c4:cc:e1:78:5e:9c:ef:
         be:0e:be:94:46:5d:c8:b5:01:e1:26:90:2a:d0:23:09:6e:d4:
         95:4c:ba:e0:a3:5d:22:7a:07:48:c2:fc:93:42:a5:e6:af:46:
         22:08:aa:0c:27:ff:99:8e:15:41:5c:4a:e2:bc:22:80:57:aa:
         ae:55:21:57:46:ff:ca:6b:ca:ec:d2:31:49:23:14:0d:dd:5d:
         b9:f3:45:c1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGBuiXK02i/l3iFjES6kPsXJR28owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThBNDM4MjZBNjU5MjhCNzBDMUEwMzM4NjdGQUJDNUY2
RTQyMDdDMDAeFw0yMzAzMTgwNTQ1NTJaFw0yNDAzMTYwNTUwNTJaMDMxMTAvBgNV
BAMTKDNFQTcwQkEwRTY1RkIyRkRGQzlDODYyRDg2ODRDRkRERjE0MDdBOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoNBZAvgHR12u8IhIkcFMjI1k
xESsvIFpulzo8MOkKvn8xN/p89efP5bRl4PjBKnoBGj/jlaLPWSpyzdhEzYhFHdF
gtPucYlkRT2cA+1s/Xo4ThOk1vvnhp93dDDdZoNh9l7bAyszaFr9WdDAMgBryQa3
tY1frae2rOE8/HlnX+LPcbzzJQwwDOgR5XvcD8yR219T4OtxM0l7FdupLmUWEOmf
cvO7+u4iVkBVPFKVp2KsRoL+4vR9bbxsBZMuvsEwWgKq3Lmyt8Fcgg2bA7dTbiM3
XP76cm0nhrS5hLgW0gty2DQP5vBKCSL1nNLSu8nD/QIewcrbbMAU1HVM91vJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPqcLoOZfsv38nIYthoTP3fFAeoswHwYDVR0j
BBgwFoAUGKQ4JqZZKLcMGgM4Z/q8X25CB8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRVM0IxZFdEam9vMmE4U21zNGl5ODFkUVZqZ3YzNThVSGJBeVhlWVh6
cWgvMC8xOEE0MzgyNkE2NTkyOEI3MEMxQTAzMzg2N0ZBQkM1RjZFNDIwN0MwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE4QTQzODI2QTY1OTI4Qjcw
QzFBMDMzODY3RkFCQzVGNkU0MjA3QzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0VTNCMWRXRGpvbzJhOFNtczRpeTgxZFFWamd2MzU4VUhiQXlYZVlYenFoLzAv
MzQzNTJlMzEzNzMwMmUzMTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqngwDQYJKoZIhvcNAQELBQADggEBAEMBKW3E
te36GubNMIUgtBFgswWaCxOTUhxieexSS1SNJjycVnvproZMnkPN8wcgDoWzgK1a
gWi2UoJexp1XIZunebUhCwzVrT9wFrw1S3fH8lv1Te78fS0qXF+mBzcTeTKN07qC
D/U5C4ebpdHk1ZB3hKkOq8Ao5CnEJw8QL7cAKrfra5jc6hSDlv+BjxIckH6CaY8s
DUE0C1Rp0VQoWJ0WkMIuB/L7sj7T+DnLxMzheF6c774OvpRGXci1AeEmkCrQIwlu
1JVMuuCjXSJ6B0jC/JNCpeavRiIIqgwn/5mOFUFcSuK8IoBXqq5VIVdG/8pryuzS
MUkjFA3dXbnzRcE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:52 2025 by rpki-client