Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/34352e3136312e38302e302f32322d3332203d3e20323638353032.roa
File:                     34352e3136312e38302e302f32322d3332203d3e20323638353032.roa (raw, json)
Hash identifier:          8vBPsRC9ORS3hEhLdYFwsTZCeEBY4Y5C9GufhXBwITQ=
Subject key identifier:   FD:AC:4F:8D:43:F4:FD:99:03:93:A4:B7:D6:DF:93:8F:8A:08:25:9D
Certificate issuer:       /CN=D393B0F5EB5552136D6D9C1DAC00128C7CE0750B
Certificate serial:       50A70B2680ED54EB5291DBE608415A5C8120365D
Authority key identifier: D3:93:B0:F5:EB:55:52:13:6D:6D:9C:1D:AC:00:12:8C:7C:E0:75:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/34352e3136312e38302e302f32322d3332203d3e20323638353032.roa
Signing time:             Fri 21 Jun 2024 19:03:28 +0000
ROA not before:           Fri 21 Jun 2024 18:58:28 +0000
ROA not after:            Fri 20 Jun 2025 19:03:28 +0000
asID:                     268502
IP address blocks:        45.161.80.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a7:0b:26:80:ed:54:eb:52:91:db:e6:08:41:5a:5c:81:20:36:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D393B0F5EB5552136D6D9C1DAC00128C7CE0750B
        Validity
            Not Before: Jun 21 18:58:28 2024 GMT
            Not After : Jun 20 19:03:28 2025 GMT
        Subject: CN=FDAC4F8D43F4FD990393A4B7D6DF938F8A08259D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:e0:1f:4e:63:34:16:3a:19:46:a0:f0:95:
                    19:06:eb:56:62:4b:c9:bc:cb:c4:7e:a4:48:fe:60:
                    54:6f:99:b1:dc:6d:ef:3c:ed:3f:94:1e:45:d0:b4:
                    47:59:d0:1d:95:a3:73:f6:e2:ed:fe:ac:30:30:12:
                    fa:8c:12:d8:de:91:a8:c9:eb:44:15:fd:9a:cf:52:
                    7c:f8:f8:ac:69:c1:df:15:d3:05:87:b3:b8:6a:7b:
                    ee:13:86:16:5b:f6:2a:3a:06:dc:b2:ad:e6:aa:1e:
                    3f:96:15:39:7d:c0:20:46:e5:2b:e0:7a:4a:3e:78:
                    4c:96:d6:50:98:64:c2:57:d5:bf:de:9a:9d:6a:df:
                    b5:58:6d:6d:9e:bb:99:88:f0:06:ad:df:0d:fd:3e:
                    6d:43:69:83:c7:84:23:de:b7:e1:31:32:7a:83:98:
                    63:9d:33:5a:30:78:14:46:70:6e:db:b7:cf:91:40:
                    ac:20:f3:65:cc:c1:37:f6:f3:15:21:62:2b:f6:58:
                    ee:be:2e:ca:95:72:89:fa:74:57:66:e9:42:ae:6f:
                    93:4a:01:cd:8d:84:bb:bc:73:5a:dc:af:a5:c9:3b:
                    cf:93:03:f7:57:64:bc:d2:61:75:3a:9d:ab:c8:3c:
                    c1:9d:a2:24:21:8b:7d:d8:e1:98:c1:4e:de:f9:51:
                    11:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AC:4F:8D:43:F4:FD:99:03:93:A4:B7:D6:DF:93:8F:8A:08:25:9D
            X509v3 Authority Key Identifier:
                keyid:D3:93:B0:F5:EB:55:52:13:6D:6D:9C:1D:AC:00:12:8C:7C:E0:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D393B0F5EB5552136D6D9C1DAC00128C7CE0750B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BE3PXXNtW4ZZJnzwvrx16pfWAfmzHaJFUuuS1gFT49Rb/0/34352e3136312e38302e302f32322d3332203d3e20323638353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:73:7a:c1:6d:e5:c8:6b:5e:0e:0b:e8:38:b1:db:9d:0a:
         20:9c:97:e7:08:e8:af:7e:2a:b0:82:7c:9e:5d:f1:39:61:71:
         01:a6:da:1d:08:15:41:07:96:eb:aa:01:e7:ce:d1:cf:96:ac:
         b1:47:27:7b:06:ae:d9:97:37:34:58:dd:8b:cb:06:42:8c:68:
         73:8e:33:f2:44:74:9b:71:8a:65:36:1c:ed:10:65:34:3e:ec:
         42:f1:bc:a5:55:ab:47:e3:13:43:ce:63:22:aa:7c:af:e2:a0:
         6b:00:23:1c:83:62:97:83:d0:22:8d:d9:4d:8a:68:99:ed:8a:
         83:df:47:a7:30:03:b6:36:24:b0:cf:8d:34:b4:b5:76:a6:e7:
         40:f7:76:35:b7:e4:f0:05:0b:cb:73:74:38:d2:f4:8a:1d:61:
         2a:e2:9d:03:ef:9f:30:ce:63:d4:f8:02:22:cd:bc:3e:8b:bb:
         d1:bd:88:bb:e0:e5:41:15:a7:95:e7:01:86:a4:a3:b0:25:71:
         8c:3b:89:bc:f8:38:5f:b5:0b:4f:97:6f:a9:7c:e8:a5:0e:78:
         4f:2d:ef:fe:3a:df:41:37:cb:0c:a4:db:a1:37:3d:be:32:2d:
         59:3c:50:dd:66:77:0c:6f:c6:d6:ce:74:26:a0:46:30:67:30:
         c9:91:d5:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUKcLJoDtVOtSkdvmCEFaXIEgNl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM5M0IwRjVFQjU1NTIxMzZENkQ5QzFEQUMwMDEyOEM3
Q0UwNzUwQjAeFw0yNDA2MjExODU4MjhaFw0yNTA2MjAxOTAzMjhaMDMxMTAvBgNV
BAMTKEZEQUM0RjhENDNGNEZEOTkwMzkzQTRCN0Q2REY5MzhGOEEwODI1OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PeAfTmM0FjoZRqDwlRkG61Zi
S8m8y8R+pEj+YFRvmbHcbe887T+UHkXQtEdZ0B2Vo3P24u3+rDAwEvqMEtjekajJ
60QV/ZrPUnz4+Kxpwd8V0wWHs7hqe+4ThhZb9io6BtyyreaqHj+WFTl9wCBG5Svg
eko+eEyW1lCYZMJX1b/emp1q37VYbW2eu5mI8Aat3w39Pm1DaYPHhCPet+ExMnqD
mGOdM1oweBRGcG7bt8+RQKwg82XMwTf28xUhYiv2WO6+LsqVcon6dFdm6UKub5NK
Ac2NhLu8c1rcr6XJO8+TA/dXZLzSYXU6navIPMGdoiQhi33Y4ZjBTt75URFxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/axPjUP0/ZkDk6S31t+Tj4oIJZ0wHwYDVR0j
BBgwFoAU05Ow9etVUhNtbZwdrAASjHzgdQswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkUzUFhYTnRXNFpaSm56d3ZyeDE2cGZXQWZtekhhSkZVdXVTMWdGVDQ5
UmIvMC9EMzkzQjBGNUVCNTU1MjEzNkQ2RDlDMURBQzAwMTI4QzdDRTA3NTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzOTNCMEY1RUI1NTUyMTM2
RDZEOUMxREFDMDAxMjhDN0NFMDc1MEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JFM1BYWE50VzRaWkpuend2cngxNnBmV0FmbXpIYUpGVXV1UzFnRlQ0OVJiLzAv
MzQzNTJlMzEzNjMxMmUzODMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzUzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaFQMA0GCSqGSIb3DQEBCwUAA4IBAQB30HN6wW3l
yGteDgvoOLHbnQognJfnCOivfiqwgnyeXfE5YXEBptodCBVBB5brqgHnztHPlqyx
Ryd7Bq7Zlzc0WN2LywZCjGhzjjPyRHSbcYplNhztEGU0PuxC8bylVatH4xNDzmMi
qnyv4qBrACMcg2KXg9AijdlNimiZ7YqD30enMAO2NiSwz400tLV2pudA93Y1t+Tw
BQvLc3Q40vSKHWEq4p0D758wzmPU+AIizbw+i7vRvYi74OVBFaeV5wGGpKOwJXGM
O4m8+DhftQtPl2+pfOilDnhPLe/+Ot9BN8sMpNuhNz2+Mi1ZPFDdZncMb8bWznQm
oEYwZzDJkdXQ
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:39 2025 by rpki-client