Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3131302e302f32332d3233203d3e20323638313036.roa
File:                     34352e3136392e3131302e302f32332d3233203d3e20323638313036.roa (raw, json)
Hash identifier:          JjmCSSyE2xwor0dTTIZ9Q30l231frlzMbebkynhKdl8=
Subject key identifier:   82:60:80:E7:91:9C:C5:5B:AA:8E:EB:74:AD:A3:C4:CC:85:42:6F:6F
Certificate issuer:       /CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
Certificate serial:       57AA1CE9500A8095F7C556AE83759C70C60816FD
Authority key identifier: B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3131302e302f32332d3233203d3e20323638313036.roa
Signing time:             Mon 25 Apr 2022 14:59:04 +0000
ROA not before:           Mon 25 Apr 2022 14:54:04 +0000
ROA not after:            Mon 24 Apr 2023 14:59:04 +0000
asID:                     268106
IP address blocks:        45.169.110.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:aa:1c:e9:50:0a:80:95:f7:c5:56:ae:83:75:9c:70:c6:08:16:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
        Validity
            Not Before: Apr 25 14:54:04 2022 GMT
            Not After : Apr 24 14:59:04 2023 GMT
        Subject: CN=826080E7919CC55BAA8EEB74ADA3C4CC85426F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:c8:41:e1:73:21:5c:48:ef:aa:54:e7:94:
                    cf:25:f9:dd:22:5b:0d:81:f5:80:15:dd:be:a0:21:
                    71:9f:b3:64:5e:5a:9a:8c:cd:88:ff:d9:ca:75:28:
                    0e:1b:fa:6f:48:8e:bf:bf:43:cc:19:b7:bf:07:2a:
                    17:0f:cc:c1:cf:86:6b:c4:ff:89:9b:2b:f2:c3:cb:
                    3a:0a:9c:a3:c5:e2:73:d9:2a:4d:3f:32:fe:29:1d:
                    7d:f2:e5:77:17:88:ef:e7:01:35:30:e1:98:92:23:
                    56:77:d9:78:4b:67:67:23:d6:4d:7f:f8:5b:0a:c8:
                    31:dd:50:22:96:3e:71:19:5a:49:ae:02:34:de:4e:
                    4b:ef:d1:25:c8:c9:ba:ad:25:b1:03:b0:c3:5d:7c:
                    7b:de:52:80:be:6c:5c:03:56:a5:e4:f6:ba:48:12:
                    76:0f:f7:ce:32:ab:72:1f:4d:ec:04:8f:40:24:01:
                    c6:6a:ca:c7:5b:37:90:0d:d3:c8:57:bb:92:6d:07:
                    95:ae:a2:7c:fb:44:9f:ad:b1:a0:2d:c2:7a:fd:a1:
                    03:f9:43:12:98:84:29:6e:03:35:0c:2b:b9:ca:d2:
                    1a:05:a5:a0:4a:77:0e:88:36:26:d3:ce:cb:f0:76:
                    ff:c4:06:6c:55:18:28:8a:65:87:8d:40:4c:32:ef:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:60:80:E7:91:9C:C5:5B:AA:8E:EB:74:AD:A3:C4:CC:85:42:6F:6F
            X509v3 Authority Key Identifier:
                keyid:B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3131302e302f32332d3233203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:f6:d1:26:82:af:33:e2:ca:d1:bb:12:0e:6e:72:1b:72:f6:
         7b:b5:33:92:01:4f:ab:10:c8:d7:60:49:6d:c0:e9:9d:b9:99:
         ac:dd:0a:5d:58:77:2f:3e:e8:a1:20:50:43:1b:a1:d9:ff:54:
         17:19:e5:2a:67:07:57:4c:9a:72:2f:93:06:ed:07:31:28:67:
         7b:f9:72:b0:e4:77:8c:c1:92:a1:60:4a:40:76:f4:81:e8:3e:
         42:e5:e8:78:0b:be:ff:c3:e1:e8:d3:ed:65:a9:79:59:f6:35:
         15:72:71:2e:c5:63:f2:da:64:18:12:23:31:9b:77:77:d0:7d:
         7a:7f:6c:4f:7c:bc:89:81:92:09:3f:e2:bf:e8:a7:ea:51:fc:
         71:22:c3:c6:a8:71:65:b9:97:20:04:1e:d4:33:8c:ad:ea:f7:
         7d:96:ae:df:ff:c5:a1:b9:d5:7a:45:f9:35:58:24:15:1f:65:
         a5:ea:af:84:62:75:24:4a:15:0d:4d:ea:e4:14:99:e7:a6:a6:
         12:3f:a2:5d:d2:51:c9:cd:5b:84:ad:a1:7f:9d:f4:18:9c:4b:
         f8:7e:fb:94:91:57:9a:6f:a6:1c:db:ec:e6:bb:51:a8:28:64:
         e0:73:fb:59:c5:c2:d2:65:29:66:3f:89:bf:d6:48:76:a1:6e:
         31:89:2b:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV6oc6VAKgJX3xVaug3WccMYIFv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI2MTRGMkQzNUZERjA0RkI0MjhERUI0NkU2MDcxM0E4
RENGNkI0OTAeFw0yMjA0MjUxNDU0MDRaFw0yMzA0MjQxNDU5MDRaMDMxMTAvBgNV
BAMTKDgyNjA4MEU3OTE5Q0M1NUJBQThFRUI3NEFEQTNDNENDODU0MjZGNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGB8hB4XMhXEjvqlTnlM8l+d0i
Ww2B9YAV3b6gIXGfs2ReWpqMzYj/2cp1KA4b+m9Ijr+/Q8wZt78HKhcPzMHPhmvE
/4mbK/LDyzoKnKPF4nPZKk0/Mv4pHX3y5XcXiO/nATUw4ZiSI1Z32XhLZ2cj1k1/
+FsKyDHdUCKWPnEZWkmuAjTeTkvv0SXIybqtJbEDsMNdfHveUoC+bFwDVqXk9rpI
EnYP984yq3IfTewEj0AkAcZqysdbN5AN08hXu5JtB5Wuonz7RJ+tsaAtwnr9oQP5
QxKYhCluAzUMK7nK0hoFpaBKdw6INibTzsvwdv/EBmxVGCiKZYeNQEwy70JzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgmCA55GcxVuqjut0raPEzIVCb28wHwYDVR0j
BBgwFoAUsmFPLTX98E+0KN60bmBxOo3Pa0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJaZHBUMWpxVWtxVm5Qdld1V2ZlWXVReGdTUzYzdkNSRjJFZjg2b2Y4
bncvMC9CMjYxNEYyRDM1RkRGMDRGQjQyOERFQjQ2RTYwNzEzQThEQ0Y2QjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyNjE0RjJEMzVGREYwNEZC
NDI4REVCNDZFNjA3MTNBOERDRjZCNDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JSWmRwVDFqcVVrcVZuUHZXdVdmZVl1UXhnU1M2M3ZDUkYyRWY4Nm9mOG53LzAv
MzQzNTJlMzEzNjM5MmUzMTMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqW4wDQYJKoZIhvcNAQELBQADggEBAKD20SaC
rzPiytG7Eg5uchty9nu1M5IBT6sQyNdgSW3A6Z25mazdCl1Ydy8+6KEgUEMbodn/
VBcZ5SpnB1dMmnIvkwbtBzEoZ3v5crDkd4zBkqFgSkB29IHoPkLl6HgLvv/D4ejT
7WWpeVn2NRVycS7FY/LaZBgSIzGbd3fQfXp/bE98vImBkgk/4r/op+pR/HEiw8ao
cWW5lyAEHtQzjK3q932Wrt//xaG51XpF+TVYJBUfZaXqr4RidSRKFQ1N6uQUmeem
phI/ol3SUcnNW4StoX+d9BicS/h++5SRV5pvphzb7Oa7UagoZOBz+1nFwtJlKWY/
ib/WSHahbjGJKyk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:40 2025 by rpki-client