Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31322e302f32342d3234203d3e20323638333436.roa
File:                     34352e3233392e31322e302f32342d3234203d3e20323638333436.roa (raw, json)
Hash identifier:          CRLi/xkefhOumramybQOEVQH+wN2VOqmjPaq8EC8xi8=
Subject key identifier:   0F:62:75:E8:1D:4B:90:F5:B6:7C:AC:AF:06:7B:2E:4E:E3:76:E9:72
Certificate issuer:       /CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Certificate serial:       5D8BE4E6FF674011CB6BB189EB9012DEBFFF1E59
Authority key identifier: 0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31322e302f32342d3234203d3e20323638333436.roa
Signing time:             Mon 22 May 2023 19:23:59 +0000
ROA not before:           Mon 22 May 2023 19:18:59 +0000
ROA not after:            Mon 20 May 2024 19:23:59 +0000
asID:                     268346
IP address blocks:        45.239.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8b:e4:e6:ff:67:40:11:cb:6b:b1:89:eb:90:12:de:bf:ff:1e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
        Validity
            Not Before: May 22 19:18:59 2023 GMT
            Not After : May 20 19:23:59 2024 GMT
        Subject: CN=0F6275E81D4B90F5B67CACAF067B2E4EE376E972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:87:f5:bc:f3:a3:a4:df:0c:05:4a:5e:e3:
                    c2:ad:35:c4:43:ba:87:3d:d1:6d:e7:69:5a:e4:d6:
                    ad:28:22:65:d8:41:f4:4f:9c:eb:64:1d:20:d3:f6:
                    0e:fc:ca:c4:ee:d9:2f:4e:96:0e:6b:a4:92:51:ad:
                    39:e6:41:42:7b:4f:87:b6:38:c4:3b:4e:90:65:c9:
                    b6:8d:b3:28:25:af:78:fc:6e:2a:6c:87:ae:a9:13:
                    9a:00:2c:85:26:0a:e5:c2:c7:ab:63:5d:50:fd:11:
                    ec:3b:1b:c0:96:ff:2d:73:cd:68:50:d4:45:01:27:
                    30:12:90:69:7a:41:d0:42:4b:8b:a9:11:bf:88:3d:
                    28:a7:76:58:4a:77:a1:5e:4b:cb:5a:81:c0:a2:76:
                    d9:53:36:ca:6e:ae:92:30:00:af:b9:03:ea:3a:a7:
                    54:8f:c7:25:92:7c:85:b6:42:75:88:03:e3:ed:c0:
                    57:1b:1c:fc:87:ca:a3:56:47:a7:9b:8f:81:c8:03:
                    65:f4:22:8d:37:46:da:66:f3:e0:66:c9:c0:0a:92:
                    bd:8e:8a:95:d2:9b:df:fc:87:b9:47:75:7d:36:e0:
                    8e:4b:c5:83:f2:c9:bd:4d:52:db:1d:b5:99:c0:6e:
                    1b:6a:e0:c8:34:7e:e9:75:9f:7f:7f:c8:d0:2a:68:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:62:75:E8:1D:4B:90:F5:B6:7C:AC:AF:06:7B:2E:4E:E3:76:E9:72
            X509v3 Authority Key Identifier:
                keyid:0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31322e302f32342d3234203d3e20323638333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:b4:d3:e7:11:32:01:6b:09:73:b7:2e:43:70:b6:6c:cf:4c:
         a3:b8:d6:cb:40:66:0b:0e:b3:2f:87:29:0e:91:25:fb:c4:da:
         fd:59:b0:2f:13:f3:71:08:33:e9:ee:ff:ae:e0:f8:33:c3:44:
         6d:39:70:51:2f:97:ca:a8:c3:b7:5e:79:5d:47:6d:28:b3:1f:
         00:f9:70:8a:98:87:57:88:fd:85:c6:9f:8f:62:a5:05:34:a4:
         50:f3:07:2a:db:0e:3c:ab:fb:68:c9:f4:e6:70:38:ae:32:2f:
         df:4d:04:45:4d:ba:99:65:22:d2:cf:a3:4c:00:18:e3:4d:50:
         66:37:77:49:f1:18:39:74:1b:de:af:ed:ac:93:af:e7:d0:8e:
         09:c5:78:24:58:3d:0e:1d:0d:ef:61:56:1f:f8:c1:ca:b5:1b:
         ff:1a:7f:9e:16:ac:73:98:01:f1:21:21:b4:8b:cb:61:04:eb:
         8a:6b:3d:f2:76:b5:8e:3a:93:57:20:37:bf:93:12:4d:7d:14:
         7c:bc:43:cf:00:3e:ea:5f:ac:de:87:11:f6:f7:82:ce:2b:34:
         c2:27:16:cd:fa:5e:00:0a:05:4c:f3:63:d5:ad:e6:88:b3:51:
         d4:d8:f0:b0:63:cf:5b:15:9f:48:83:ed:1f:97:fb:92:67:89:
         39:6b:df:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXYvk5v9nQBHLa7GJ65AS3r//HlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE0MjkwRkM5MTMwNEI1QkY4MDk5MUJFQkEwNkY5MThD
NEZBRjVBRjAeFw0yMzA1MjIxOTE4NTlaFw0yNDA1MjAxOTIzNTlaMDMxMTAvBgNV
BAMTKDBGNjI3NUU4MUQ0QjkwRjVCNjdDQUNBRjA2N0IyRTRFRTM3NkU5NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtIf1vPOjpN8MBUpe48KtNcRD
uoc90W3naVrk1q0oImXYQfRPnOtkHSDT9g78ysTu2S9Olg5rpJJRrTnmQUJ7T4e2
OMQ7TpBlybaNsyglr3j8bipsh66pE5oALIUmCuXCx6tjXVD9Eew7G8CW/y1zzWhQ
1EUBJzASkGl6QdBCS4upEb+IPSindlhKd6FeS8tagcCidtlTNspurpIwAK+5A+o6
p1SPxyWSfIW2QnWIA+PtwFcbHPyHyqNWR6ebj4HIA2X0Io03Rtpm8+BmycAKkr2O
ipXSm9/8h7lHdX024I5LxYPyyb1NUtsdtZnAbhtq4Mg0ful1n39/yNAqaEC5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUD2J16B1LkPW2fKyvBnsuTuN26XIwHwYDVR0j
BBgwFoAUCkKQ/JEwS1v4CZG+ugb5GMT69a8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDE3WjlMR2hEd1pyam5VTFMyZUs4TExDVnN3bXM1am1nWXNENkg2ZUJM
WmgvMC8wQTQyOTBGQzkxMzA0QjVCRjgwOTkxQkVCQTA2RjkxOEM0RkFGNUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBBNDI5MEZDOTEzMDRCNUJG
ODA5OTFCRUJBMDZGOTE4QzRGQUY1QUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QxN1o5TEdoRHdacmpuVUxTMmVLOExMQ1Zzd21zNWptZ1lzRDZINmVCTFpoLzAv
MzQzNTJlMzIzMzM5MmUzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe8MMA0GCSqGSIb3DQEBCwUAA4IBAQCmtNPnETIB
awlzty5DcLZsz0yjuNbLQGYLDrMvhykOkSX7xNr9WbAvE/NxCDPp7v+u4Pgzw0Rt
OXBRL5fKqMO3XnldR20osx8A+XCKmIdXiP2Fxp+PYqUFNKRQ8wcq2w48q/toyfTm
cDiuMi/fTQRFTbqZZSLSz6NMABjjTVBmN3dJ8Rg5dBver+2sk6/n0I4JxXgkWD0O
HQ3vYVYf+MHKtRv/Gn+eFqxzmAHxISG0i8thBOuKaz3ydrWOOpNXIDe/kxJNfRR8
vEPPAD7qX6zehxH294LOKzTCJxbN+l4ACgVM82PVreaIs1HU2PCwY89bFZ9Ig+0f
l/uSZ4k5a98C
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:48 2025 by rpki-client