Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/34352e3136362e35382e302f32342d3234203d3e20323634313733.roa
File:                     34352e3136362e35382e302f32342d3234203d3e20323634313733.roa (raw, json)
Hash identifier:          IS4mNpb0pK69T6XnxX20MpCEfuCv6dlBExkVb7x3VHY=
Subject key identifier:   46:0E:C2:E2:14:96:EE:16:A4:A3:0E:51:35:0C:1D:0B:7F:89:D5:1B
Certificate issuer:       /CN=E1065105D21C56AC4973B7DD1221083E42A226C6
Certificate serial:       2563183A4BC954B9BD1D6634356A269BB0E82634
Authority key identifier: E1:06:51:05:D2:1C:56:AC:49:73:B7:DD:12:21:08:3E:42:A2:26:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1065105D21C56AC4973B7DD1221083E42A226C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/34352e3136362e35382e302f32342d3234203d3e20323634313733.roa
Signing time:             Thu 11 Jan 2024 21:29:40 +0000
ROA not before:           Thu 11 Jan 2024 21:24:40 +0000
ROA not after:            Thu 09 Jan 2025 21:29:40 +0000
asID:                     264173
IP address blocks:        45.166.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:63:18:3a:4b:c9:54:b9:bd:1d:66:34:35:6a:26:9b:b0:e8:26:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1065105D21C56AC4973B7DD1221083E42A226C6
        Validity
            Not Before: Jan 11 21:24:40 2024 GMT
            Not After : Jan  9 21:29:40 2025 GMT
        Subject: CN=460EC2E21496EE16A4A30E51350C1D0B7F89D51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:d6:8d:0b:db:42:f8:23:dc:7b:02:e9:11:
                    26:6b:18:51:30:0c:17:92:22:b1:b6:aa:ab:4b:b6:
                    39:fb:e3:42:20:8b:64:ac:6a:86:f7:16:be:69:51:
                    d0:97:be:bc:e8:ac:94:0f:60:41:ef:31:c0:8d:d4:
                    1c:b6:23:3e:9f:d5:9f:48:7f:fe:c8:2d:1b:94:87:
                    b1:eb:02:43:15:a0:56:9d:32:c4:69:72:54:bb:b7:
                    81:ce:f3:17:81:ab:ed:74:7f:ea:39:cc:37:db:98:
                    d4:12:f2:02:2c:ce:0c:9c:75:ba:1b:6e:60:b1:5c:
                    8d:1c:e7:32:02:d3:fa:cc:36:f9:cd:72:54:5c:e8:
                    ce:17:65:16:13:de:73:3d:5d:a4:ba:be:94:5c:e6:
                    eb:66:02:95:cb:3e:39:81:66:ea:5e:fc:12:44:a8:
                    95:9a:e1:e6:0f:ef:8f:10:92:fc:bb:6b:20:1a:19:
                    75:75:a6:32:7e:ff:07:c0:1a:f7:25:3d:28:5f:65:
                    5e:ed:1d:be:86:29:0f:6e:88:2d:9a:bc:84:45:15:
                    45:a4:62:50:e6:df:cb:08:ef:01:2c:69:ff:3b:c5:
                    42:5e:b0:7d:04:72:f7:75:31:e1:dc:33:71:27:64:
                    1f:26:01:f2:a1:0d:43:d9:e3:75:61:bb:70:93:d6:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0E:C2:E2:14:96:EE:16:A4:A3:0E:51:35:0C:1D:0B:7F:89:D5:1B
            X509v3 Authority Key Identifier:
                keyid:E1:06:51:05:D2:1C:56:AC:49:73:B7:DD:12:21:08:3E:42:A2:26:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/E1065105D21C56AC4973B7DD1221083E42A226C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1065105D21C56AC4973B7DD1221083E42A226C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/34352e3136362e35382e302f32342d3234203d3e20323634313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:18:63:d2:7b:aa:c2:91:bb:e4:b1:bf:a3:48:26:a6:0d:e2:
         43:1f:c6:da:18:04:3c:9c:cc:47:1e:56:6e:27:22:c3:39:66:
         53:5a:32:a4:53:d1:ac:0c:44:01:9d:d2:f4:dd:f3:31:b5:92:
         0e:74:c6:09:ac:47:d1:13:11:5e:7c:29:91:8a:9b:81:8f:6d:
         bb:a9:8e:ba:a8:79:3e:79:68:f9:8b:7c:37:f3:9f:a2:8a:34:
         9c:34:c0:9b:64:c1:f0:8b:c9:f4:23:91:12:01:4c:54:c8:7e:
         bd:84:9e:61:c1:e2:ee:d0:68:98:1c:4d:03:12:33:7d:33:9c:
         3b:41:dd:e8:4c:4e:3e:1b:cf:79:19:b6:60:65:76:03:e7:71:
         f8:20:0e:e9:1a:bb:dc:03:e3:75:48:a6:a4:4e:d7:99:3d:4e:
         d9:8b:d9:1c:eb:33:4a:8a:c4:17:15:fd:3f:63:54:63:16:3e:
         7e:48:2e:06:c4:1c:12:25:b7:5c:56:da:6e:21:2d:82:09:7a:
         e1:dc:e8:1d:ec:49:61:98:c7:6d:36:6e:74:5a:77:d0:5d:bf:
         bd:86:a8:77:4a:0a:f3:f6:cb:c6:25:fc:9d:56:b1:d9:59:cb:
         b7:c5:0c:0e:87:db:2a:25:04:b7:35:4b:0a:4a:9e:e3:21:00:
         b8:89:4c:77
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJWMYOkvJVLm9HWY0NWomm7DoJjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEwNjUxMDVEMjFDNTZBQzQ5NzNCN0REMTIyMTA4M0U0
MkEyMjZDNjAeFw0yNDAxMTEyMTI0NDBaFw0yNTAxMDkyMTI5NDBaMDMxMTAvBgNV
BAMTKDQ2MEVDMkUyMTQ5NkVFMTZBNEEzMEU1MTM1MEMxRDBCN0Y4OUQ1MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9udaNC9tC+CPcewLpESZrGFEw
DBeSIrG2qqtLtjn740Igi2Ssaob3Fr5pUdCXvrzorJQPYEHvMcCN1By2Iz6f1Z9I
f/7ILRuUh7HrAkMVoFadMsRpclS7t4HO8xeBq+10f+o5zDfbmNQS8gIszgycdbob
bmCxXI0c5zIC0/rMNvnNclRc6M4XZRYT3nM9XaS6vpRc5utmApXLPjmBZupe/BJE
qJWa4eYP748Qkvy7ayAaGXV1pjJ+/wfAGvclPShfZV7tHb6GKQ9uiC2avIRFFUWk
YlDm38sI7wEsaf87xUJesH0Ecvd1MeHcM3EnZB8mAfKhDUPZ43Vhu3CT1uBfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURg7C4hSW7hakow5RNQwdC3+J1RswHwYDVR0j
BBgwFoAU4QZRBdIcVqxJc7fdEiEIPkKiJsYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTlWd3B2NnVTVjgyUUh6YXhWcUVXM3o5akQ5THBiWTZpbjJoTXQ0Yko0
V1QvMC9FMTA2NTEwNUQyMUM1NkFDNDk3M0I3REQxMjIxMDgzRTQyQTIyNkM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UxMDY1MTA1RDIxQzU2QUM0
OTczQjdERDEyMjEwODNFNDJBMjI2QzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U5VndwdjZ1U1Y4MlFIemF4VnFFVzN6OWpEOUxwYlk2aW4yaE10NGJKNFdULzAv
MzQzNTJlMzEzNjM2MmUzNTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaY6MA0GCSqGSIb3DQEBCwUAA4IBAQA0GGPSe6rC
kbvksb+jSCamDeJDH8baGAQ8nMxHHlZuJyLDOWZTWjKkU9GsDEQBndL03fMxtZIO
dMYJrEfRExFefCmRipuBj227qY66qHk+eWj5i3w385+iijScNMCbZMHwi8n0I5ES
AUxUyH69hJ5hweLu0GiYHE0DEjN9M5w7Qd3oTE4+G895GbZgZXYD53H4IA7pGrvc
A+N1SKakTteZPU7Zi9kc6zNKisQXFf0/Y1RjFj5+SC4GxBwSJbdcVtpuIS2CCXrh
3Ogd7ElhmMdtNm50WnfQXb+9hqh3Sgrz9svGJfydVrHZWcu3xQwOh9sqJQS3NUsK
Sp7jIQC4iUx3
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:44 2025 by rpki-client