Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e2033333536.roa
File:                     34352e3138342e36382e302f32322d3332203d3e2033333536.roa (raw, json)
Hash identifier:          0AZ/4k3pYckDw3NaOFGdnpPzvD9K7vCzMiSfpgsoifs=
Subject key identifier:   CB:F4:46:18:31:A2:1A:CD:49:F8:6C:DD:D2:C6:41:D5:11:05:A6:2F
Certificate issuer:       /CN=7EA2EA6A0D3A338D4FA4840C542D4E9164C82629
Certificate serial:       07D5F6245CC09A9ACCCE9878FF3D95CF759E2E22
Authority key identifier: 7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e2033333536.roa
Signing time:             Fri 16 Aug 2024 02:40:33 +0000
ROA not before:           Fri 16 Aug 2024 02:35:33 +0000
ROA not after:            Fri 15 Aug 2025 02:40:33 +0000
asID:                     3356
IP address blocks:        45.184.68.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d5:f6:24:5c:c0:9a:9a:cc:ce:98:78:ff:3d:95:cf:75:9e:2e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA2EA6A0D3A338D4FA4840C542D4E9164C82629
        Validity
            Not Before: Aug 16 02:35:33 2024 GMT
            Not After : Aug 15 02:40:33 2025 GMT
        Subject: CN=CBF4461831A21ACD49F86CDDD2C641D51105A62F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:6e:fd:a2:e5:b7:56:5d:9f:59:5d:d1:6f:
                    73:0d:81:e2:7d:45:a8:85:4c:23:38:dc:ae:57:e8:
                    60:89:e3:a2:17:98:2b:a8:bc:c6:56:ab:f0:15:43:
                    c1:dd:f3:dc:4b:17:c4:cd:29:6b:ad:d6:dc:38:84:
                    11:a7:a9:0e:e1:6d:8f:2e:b7:15:00:14:7a:72:74:
                    af:4a:b8:99:95:fa:53:e7:f3:43:b1:81:bc:14:71:
                    e8:0f:9f:38:fa:10:44:da:bc:55:af:70:3b:85:a0:
                    0d:70:25:3a:24:65:c1:3b:d4:f0:4c:39:44:6a:be:
                    8e:5a:5f:7a:17:cb:c6:b9:59:6f:fe:1f:2b:4f:85:
                    d3:b3:d9:8b:76:21:8f:b8:a9:c5:a4:08:1f:ae:3f:
                    77:10:0e:a6:2c:0c:11:83:97:bf:dc:d4:4e:2f:a3:
                    33:77:3d:ad:cb:17:b7:fe:35:aa:45:77:e2:4c:55:
                    1d:a7:2b:09:9c:d0:0c:5c:91:10:bb:68:f4:20:18:
                    a5:15:5e:73:b6:bd:d9:05:61:db:79:4e:76:54:e2:
                    4b:bb:81:1f:97:ea:1c:1f:78:90:73:ce:64:6d:f4:
                    b8:c0:74:66:4d:75:8b:3b:b2:88:db:0b:ab:e3:6e:
                    c0:1d:66:1f:29:4d:da:25:5f:00:06:1d:eb:f9:73:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F4:46:18:31:A2:1A:CD:49:F8:6C:DD:D2:C6:41:D5:11:05:A6:2F
            X509v3 Authority Key Identifier:
                keyid:7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:95:ca:e8:fd:7b:d0:21:a6:d1:89:4c:2f:21:9a:08:c5:e3:
         bf:7a:f4:01:28:62:33:bd:a9:4d:3a:29:8e:fd:6b:02:b0:ba:
         8a:9d:a3:8c:4c:54:6c:52:dc:c6:7b:18:40:6f:06:80:a3:ad:
         d8:f6:73:4f:d7:d8:9f:2e:b0:fd:38:24:4d:38:3d:2f:49:25:
         7c:09:73:bd:5a:3e:a2:45:6b:06:99:15:c2:83:00:8b:2a:3f:
         cb:20:39:01:d4:85:37:70:60:78:f4:85:b6:29:ab:63:12:55:
         a8:3c:b8:54:41:63:fc:36:95:43:d0:07:e9:e7:94:85:ae:cf:
         52:76:c6:20:d0:b0:0f:2c:1d:95:8e:3b:a6:fc:85:53:d7:53:
         2d:60:21:2b:c5:79:01:4d:f8:b3:ac:81:5b:92:31:21:43:70:
         bc:80:49:36:d7:ef:5a:49:22:ed:4c:e9:40:e8:28:36:10:75:
         e5:a5:13:e6:be:d3:db:58:0d:11:50:77:a1:57:4d:aa:5a:0b:
         13:28:0a:7d:f4:a8:fb:17:e7:be:01:04:19:92:ab:07:2a:ba:
         33:5e:be:32:21:02:4b:06:37:f5:17:ec:30:91:32:e4:f2:f3:
         1f:71:fb:a4:95:4f:0f:69:4a:8c:1a:98:0c:8a:ea:3b:3b:d1:
         d5:9c:2e:6b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUB9X2JFzAmprMzph4/z2Vz3WeLiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VBMkVBNkEwRDNBMzM4RDRGQTQ4NDBDNTQyRDRFOTE2
NEM4MjYyOTAeFw0yNDA4MTYwMjM1MzNaFw0yNTA4MTUwMjQwMzNaMDMxMTAvBgNV
BAMTKENCRjQ0NjE4MzFBMjFBQ0Q0OUY4NkNEREQyQzY0MUQ1MTEwNUE2MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfBW79ouW3Vl2fWV3Rb3MNgeJ9
RaiFTCM43K5X6GCJ46IXmCuovMZWq/AVQ8Hd89xLF8TNKWut1tw4hBGnqQ7hbY8u
txUAFHpydK9KuJmV+lPn80OxgbwUcegPnzj6EETavFWvcDuFoA1wJTokZcE71PBM
OURqvo5aX3oXy8a5WW/+HytPhdOz2Yt2IY+4qcWkCB+uP3cQDqYsDBGDl7/c1E4v
ozN3Pa3LF7f+NapFd+JMVR2nKwmc0AxckRC7aPQgGKUVXnO2vdkFYdt5TnZU4ku7
gR+X6hwfeJBzzmRt9LjAdGZNdYs7sojbC6vjbsAdZh8pTdolXwAGHev5c+T/AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUy/RGGDGiGs1J+Gzd0sZB1REFpi8wHwYDVR0j
BBgwFoAUfqLqag06M41PpIQMVC1OkWTIJikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpiM05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2VzYXBvczZQMWFm
dk4vMC83RUEyRUE2QTBEM0EzMzhENEZBNDg0MEM1NDJENEU5MTY0QzgyNjI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFQTJFQTZBMEQzQTMzOEQ0
RkE0ODQwQzU0MkQ0RTkxNjRDODI2MjkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqYjNOcmdmdWVYMXlSZGhGMXZ2RFAyaUZkWm9RQXNlc2Fwb3M2UDFhZnZOLzAv
MzQzNTJlMzEzODM0MmUzNjM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzMzMzM1
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItuEQwDQYJKoZIhvcNAQELBQADggEBAG6Vyuj9e9AhptGJ
TC8hmgjF47969AEoYjO9qU06KY79awKwuoqdo4xMVGxS3MZ7GEBvBoCjrdj2c0/X
2J8usP04JE04PS9JJXwJc71aPqJFawaZFcKDAIsqP8sgOQHUhTdwYHj0hbYpq2MS
Vag8uFRBY/w2lUPQB+nnlIWuz1J2xiDQsA8sHZWOO6b8hVPXUy1gISvFeQFN+LOs
gVuSMSFDcLyASTbX71pJIu1M6UDoKDYQdeWlE+a+09tYDRFQd6FXTapaCxMoCn30
qPsX574BBBmSqwcqujNevjIhAksGN/UX7DCRMuTy8x9x+6SVTw9pSowamAyK6js7
0dWcLms=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:56 2025 by rpki-client