Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/34352e372e3132382e302f32322d3234203d3e203533303632.roa
File:                     34352e372e3132382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier:          TVIE///eF+0pRBeqHGTSTA2C2wq2s9ikcvNJPclpntI=
Subject key identifier:   9E:B9:EB:F4:F6:D6:E6:07:BF:D9:4F:21:03:A7:7C:83:58:46:AF:2D
Certificate issuer:       /CN=66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9
Certificate serial:       5CDB1961A332B6ADA82513063B071A0176BF35E8
Authority key identifier: 66:AC:B5:D5:C8:CD:99:E0:0F:24:80:BA:B1:FC:6F:95:F6:20:59:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/34352e372e3132382e302f32322d3234203d3e203533303632.roa
Signing time:             Wed 14 Aug 2024 00:36:38 +0000
ROA not before:           Wed 14 Aug 2024 00:31:38 +0000
ROA not after:            Wed 13 Aug 2025 00:36:38 +0000
asID:                     53062
IP address blocks:        45.7.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:db:19:61:a3:32:b6:ad:a8:25:13:06:3b:07:1a:01:76:bf:35:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9
        Validity
            Not Before: Aug 14 00:31:38 2024 GMT
            Not After : Aug 13 00:36:38 2025 GMT
        Subject: CN=9EB9EBF4F6D6E607BFD94F2103A77C835846AF2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:f8:06:ea:5d:30:55:aa:2b:ba:c7:87:06:
                    cb:1f:b5:62:a0:79:a4:48:bf:16:59:2e:51:da:a3:
                    d2:ee:7e:86:83:4c:60:4c:24:22:df:be:8f:56:c8:
                    13:64:ee:3f:45:65:dc:1f:e6:87:18:60:15:1a:5c:
                    6e:07:67:54:81:77:ec:ea:b7:33:67:6e:a0:34:17:
                    e2:9a:8d:8f:ed:f5:38:d1:b9:85:07:8a:9b:11:65:
                    2c:82:4b:8f:89:84:49:0b:1a:ec:79:8b:ad:68:ce:
                    ce:aa:1e:ba:c8:cc:f7:d5:fc:2e:66:50:37:4f:42:
                    e6:cb:a5:88:9d:1c:fe:ec:2d:0b:5d:09:9a:7f:21:
                    04:8b:68:cd:f6:22:2a:fa:da:dd:69:9f:af:90:47:
                    89:62:47:59:1f:f5:60:67:87:75:3f:4f:97:57:44:
                    d7:81:4c:7e:fd:c4:0c:31:a3:f5:93:98:91:1d:54:
                    59:04:5a:da:2a:6c:52:46:5e:da:c0:42:86:e1:b4:
                    b7:a8:05:84:08:f1:ef:45:a0:9e:ab:0e:a6:ce:06:
                    2f:1d:59:ff:8c:19:74:2b:7c:d1:f9:e3:49:85:24:
                    bb:bd:e1:e1:7e:1d:64:ff:62:c0:42:6d:bc:70:a7:
                    1b:67:54:d9:1a:a8:1d:7b:d4:26:bf:41:b6:99:89:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B9:EB:F4:F6:D6:E6:07:BF:D9:4F:21:03:A7:7C:83:58:46:AF:2D
            X509v3 Authority Key Identifier:
                keyid:66:AC:B5:D5:C8:CD:99:E0:0F:24:80:BA:B1:FC:6F:95:F6:20:59:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/34352e372e3132382e302f32322d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:35:4b:11:99:43:5c:3e:77:e2:f1:92:5d:c5:d3:bd:b2:
         b5:b2:00:89:bd:3e:23:f9:aa:f9:2d:94:c2:00:8c:6b:26:b9:
         e4:47:e7:56:1a:43:a6:cc:68:5b:1b:62:2a:10:54:fc:7a:6c:
         c3:e7:ab:cb:ae:8b:8c:bb:85:66:1c:13:31:b7:95:09:39:f8:
         cf:74:9b:07:99:93:7e:6f:7b:a6:bf:18:af:c8:80:9c:0a:c5:
         31:c2:9f:43:bf:cf:44:e9:b1:cf:ac:13:ed:01:3b:2c:a8:32:
         82:f7:b4:10:61:26:a4:c0:2f:ee:b9:00:78:3e:89:e1:ae:6f:
         e7:e6:45:6f:bc:41:f1:ba:6f:f2:a4:c6:66:34:b3:c2:34:bb:
         ac:f9:79:e4:2a:25:a4:7c:f4:47:4d:01:25:fc:45:dd:80:7c:
         9e:16:49:20:a1:21:e1:a6:45:fe:d5:e2:85:f0:e0:b4:6e:1c:
         f4:3c:93:3f:77:ce:ff:3c:0b:d0:f5:0b:2c:91:38:54:2c:b3:
         cb:18:99:96:61:94:d4:05:1a:76:d7:c6:0d:a3:9c:44:f8:17:
         84:6a:6c:6b:16:1a:18:86:c6:37:89:9c:55:ce:8b:d8:14:a0:
         48:b2:b3:41:39:78:a8:4f:6d:e9:a5:0a:ee:b1:14:2d:6d:a4:
         ce:a0:69:b0
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUXNsZYaMytq2oJRMGOwcaAXa/NegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZBQ0I1RDVDOENEOTlFMDBGMjQ4MEJBQjFGQzZGOTVG
NjIwNTlEOTAeFw0yNDA4MTQwMDMxMzhaFw0yNTA4MTMwMDM2MzhaMDMxMTAvBgNV
BAMTKDlFQjlFQkY0RjZENkU2MDdCRkQ5NEYyMTAzQTc3QzgzNTg0NkFGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrbvgG6l0wVaoruseHBssftWKg
eaRIvxZZLlHao9LufoaDTGBMJCLfvo9WyBNk7j9FZdwf5ocYYBUaXG4HZ1SBd+zq
tzNnbqA0F+KajY/t9TjRuYUHipsRZSyCS4+JhEkLGux5i61ozs6qHrrIzPfV/C5m
UDdPQubLpYidHP7sLQtdCZp/IQSLaM32Iir62t1pn6+QR4liR1kf9WBnh3U/T5dX
RNeBTH79xAwxo/WTmJEdVFkEWtoqbFJGXtrAQobhtLeoBYQI8e9FoJ6rDqbOBi8d
Wf+MGXQrfNH540mFJLu94eF+HWT/YsBCbbxwpxtnVNkaqB171Ca/QbaZiZZlAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUnrnr9PbW5ge/2U8hA6d8g1hGry0wHwYDVR0j
BBgwFoAUZqy11cjNmeAPJIC6sfxvlfYgWdkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FaGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZw
LzAvNjZBQ0I1RDVDOENEOTlFMDBGMjQ4MEJBQjFGQzZGOTVGNjIwNTlEOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82NkFDQjVENUM4Q0Q5OUUwMEYy
NDgwQkFCMUZDNkY5NUY2MjA1OUQ5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
aGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZwLzAvMzQz
NTJlMzcyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzMzMDM2MzIu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAItB4AwDQYJKoZIhvcNAQELBQADggEBAGz4NUsRmUNcPnfi8ZJd
xdO9srWyAIm9PiP5qvktlMIAjGsmueRH51YaQ6bMaFsbYioQVPx6bMPnq8uui4y7
hWYcEzG3lQk5+M90mweZk35ve6a/GK/IgJwKxTHCn0O/z0Tpsc+sE+0BOyyoMoL3
tBBhJqTAL+65AHg+ieGub+fmRW+8QfG6b/KkxmY0s8I0u6z5eeQqJaR89EdNASX8
Rd2AfJ4WSSChIeGmRf7V4oXw4LRuHPQ8kz93zv88C9D1CyyROFQss8sYmZZhlNQF
GnbXxg2jnET4F4RqbGsWGhiGxjeJnFXOi9gUoEiys0E5eKhPbemlCu6xFC1tpM6g
abA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:01:16 2025 by rpki-client