Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32322d3232203d3e20323637323338.roa
File:                     34352e3233322e342e302f32322d3232203d3e20323637323338.roa (raw, json)
Hash identifier:          T+5ANZ8Hye0sIrLRGmEvzoQ1X6Wm+d3XKo+ezHxJdRA=
Subject key identifier:   91:D6:B6:DF:6D:8C:0E:00:49:79:D4:EC:51:0E:AA:DF:60:98:F8:5D
Certificate issuer:       /CN=126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9
Certificate serial:       7C70DC6C6F9A760F1134461A75E8FE45B12B8617
Authority key identifier: 12:6E:BC:CB:39:E7:A8:71:3E:59:A6:7E:00:D6:B9:61:9F:D9:EF:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32322d3232203d3e20323637323338.roa
Signing time:             Mon 19 Sep 2022 15:49:46 +0000
ROA not before:           Mon 19 Sep 2022 15:44:46 +0000
ROA not after:            Mon 18 Sep 2023 15:49:46 +0000
asID:                     267238
IP address blocks:        45.232.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:70:dc:6c:6f:9a:76:0f:11:34:46:1a:75:e8:fe:45:b1:2b:86:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9
        Validity
            Not Before: Sep 19 15:44:46 2022 GMT
            Not After : Sep 18 15:49:46 2023 GMT
        Subject: CN=91D6B6DF6D8C0E004979D4EC510EAADF6098F85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:ba:c6:dd:7d:e7:3a:22:71:b6:d8:01:49:
                    43:1e:ae:32:b3:ad:cc:38:ba:09:76:ea:b6:40:03:
                    7d:52:42:85:da:a9:8c:12:4b:22:b1:e9:e9:e7:25:
                    92:fd:5f:ea:b5:6c:93:93:71:26:92:58:c0:42:cc:
                    61:71:49:df:2e:94:b1:42:56:52:38:7d:c1:8b:66:
                    d1:21:f9:c7:76:7d:16:73:68:6d:8b:69:7c:85:60:
                    9a:4a:3e:11:2f:da:64:e3:c3:04:70:e5:50:c5:b0:
                    a0:1f:3c:df:8f:97:7f:9a:1d:95:08:da:87:e1:4b:
                    5e:e6:90:77:02:0d:ff:f9:0b:23:d9:5a:89:02:18:
                    7b:8e:83:6e:7f:20:b9:ea:19:fb:e3:48:3f:e3:7d:
                    18:dc:76:97:49:3c:9e:53:63:01:d2:b2:40:6c:4d:
                    c9:fb:4e:42:e8:0e:80:33:a0:57:97:d9:03:08:25:
                    3a:13:3f:59:00:73:23:d4:57:81:48:8c:a7:2b:97:
                    8a:c6:77:31:9d:35:cf:a0:95:9a:83:d8:cf:88:d5:
                    65:61:30:02:2d:29:96:f1:31:a1:b8:59:4e:0a:ad:
                    22:76:8e:3e:65:d6:06:76:b0:3f:8e:bd:44:d1:04:
                    c9:b3:85:0c:75:2f:74:7c:55:e6:e2:3e:a6:16:73:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D6:B6:DF:6D:8C:0E:00:49:79:D4:EC:51:0E:AA:DF:60:98:F8:5D
            X509v3 Authority Key Identifier:
                keyid:12:6E:BC:CB:39:E7:A8:71:3E:59:A6:7E:00:D6:B9:61:9F:D9:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32322d3232203d3e20323637323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:56:37:d7:45:52:3e:5f:a2:45:c5:69:38:ac:c1:6c:fb:a1:
         c7:8c:3b:a0:29:a8:48:06:d0:29:1a:bd:ff:60:ab:81:e2:e6:
         a0:96:37:bd:c6:b2:2c:ba:67:d9:61:32:88:c3:8c:7b:3e:e1:
         b4:4a:3f:68:2e:7c:ad:ee:93:2c:f5:e4:95:75:a1:4e:e5:d7:
         c9:a5:54:a4:89:b7:91:b2:9f:22:3d:d3:ae:6c:30:a8:65:1b:
         df:37:dd:ad:58:b6:3c:93:e3:08:bc:63:8f:d1:4b:b7:3f:c6:
         53:3f:0b:2d:3e:48:71:11:42:45:9a:25:b5:ab:f0:e4:1f:8a:
         af:f1:3b:60:d7:60:f3:cd:94:38:1d:4a:15:56:bb:27:a0:0d:
         45:79:d5:f0:a8:dc:76:dc:8d:3e:1d:96:97:29:04:d3:7d:02:
         fa:79:f9:e9:80:3a:15:ae:8f:77:d8:f7:5a:61:03:57:f0:9b:
         0a:6c:99:ef:b8:3e:e5:56:2a:b3:e2:3c:a1:75:81:c5:41:b3:
         e9:49:4f:41:f5:5e:4b:a7:36:74:27:f7:0c:dc:90:4f:c6:46:
         49:4f:8b:1d:5e:cc:f9:2a:a6:81:46:2e:3e:d7:98:5f:78:c2:
         85:cd:54:43:32:fc:4f:b7:f4:5b:fc:70:7e:43:cc:fe:b5:67:
         06:b1:27:cd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfHDcbG+adg8RNEYadej+RbErhhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI2RUJDQ0IzOUU3QTg3MTNFNTlBNjdFMDBENkI5NjE5
RkQ5RUZBOTAeFw0yMjA5MTkxNTQ0NDZaFw0yMzA5MTgxNTQ5NDZaMDMxMTAvBgNV
BAMTKDkxRDZCNkRGNkQ4QzBFMDA0OTc5RDRFQzUxMEVBQURGNjA5OEY4NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYLrG3X3nOiJxttgBSUMerjKz
rcw4ugl26rZAA31SQoXaqYwSSyKx6ennJZL9X+q1bJOTcSaSWMBCzGFxSd8ulLFC
VlI4fcGLZtEh+cd2fRZzaG2LaXyFYJpKPhEv2mTjwwRw5VDFsKAfPN+Pl3+aHZUI
2ofhS17mkHcCDf/5CyPZWokCGHuOg25/ILnqGfvjSD/jfRjcdpdJPJ5TYwHSskBs
Tcn7TkLoDoAzoFeX2QMIJToTP1kAcyPUV4FIjKcrl4rGdzGdNc+glZqD2M+I1WVh
MAItKZbxMaG4WU4KrSJ2jj5l1gZ2sD+OvUTRBMmzhQx1L3R8VebiPqYWc0e5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkda2322MDgBJedTsUQ6q32CY+F0wHwYDVR0j
BBgwFoAUEm68yznnqHE+WaZ+ANa5YZ/Z76kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkV0OHhFWHVucHRTSHd1NFpXcGVncVBTUnlVbzF5TXg0b0F6d29RZFRW
bTMvMC8xMjZFQkNDQjM5RTdBODcxM0U1OUE2N0UwMEQ2Qjk2MTlGRDlFRkE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyNkVCQ0NCMzlFN0E4NzEz
RTU5QTY3RTAwRDZCOTYxOUZEOUVGQTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JFdDh4RVh1bnB0U0h3dTRaV3BlZ3FQU1J5VW8xeU14NG9BendvUWRUVm0zLzAv
MzQzNTJlMzIzMzMyMmUzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNzMy
MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3oBDANBgkqhkiG9w0BAQsFAAOCAQEARlY310VSPl+i
RcVpOKzBbPuhx4w7oCmoSAbQKRq9/2CrgeLmoJY3vcayLLpn2WEyiMOMez7htEo/
aC58re6TLPXklXWhTuXXyaVUpIm3kbKfIj3TrmwwqGUb3zfdrVi2PJPjCLxjj9FL
tz/GUz8LLT5IcRFCRZoltavw5B+Kr/E7YNdg882UOB1KFVa7J6ANRXnV8KjcdtyN
Ph2WlykE030C+nn56YA6Fa6Pd9j3WmEDV/CbCmyZ77g+5VYqs+I8oXWBxUGz6UlP
QfVeS6c2dCf3DNyQT8ZGSU+LHV7M+SqmgUYuPteYX3jChc1UQzL8T7f0W/xwfkPM
/rVnBrEnzQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:39 2025 by rpki-client