Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39372e302f32342d3234203d3e20323638343037.roa
File:                     34352e3136302e39372e302f32342d3234203d3e20323638343037.roa (raw, json)
Hash identifier:          MPCVZsG3DSv0w2iIPgzUgHYWfO+EGsbKhxKzS8ZDnLQ=
Subject key identifier:   C9:64:F2:67:03:05:60:8C:C9:30:62:7E:A7:52:19:66:21:D4:2D:57
Certificate issuer:       /CN=18380AF093DF48152B3963AA733B302A175459DB
Certificate serial:       0937C02898DC460DD2C35E8D0CF89B58409F50FF
Authority key identifier: 18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39372e302f32342d3234203d3e20323638343037.roa
Signing time:             Fri 14 Feb 2025 12:59:07 +0000
ROA not before:           Fri 14 Feb 2025 12:54:07 +0000
ROA not after:            Fri 13 Feb 2026 12:59:07 +0000
asID:                     268407
IP address blocks:        45.160.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:37:c0:28:98:dc:46:0d:d2:c3:5e:8d:0c:f8:9b:58:40:9f:50:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18380AF093DF48152B3963AA733B302A175459DB
        Validity
            Not Before: Feb 14 12:54:07 2025 GMT
            Not After : Feb 13 12:59:07 2026 GMT
        Subject: CN=C964F2670305608CC930627EA752196621D42D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:3b:0f:2e:91:55:07:51:ee:69:25:d0:46:
                    66:b2:3a:9b:ca:c3:af:f1:a2:3f:12:ca:dc:5e:8f:
                    19:4e:5a:e1:5d:7e:ea:84:6f:c9:ca:c3:9b:99:8f:
                    4d:6c:6f:6a:94:8e:87:7b:95:17:8b:b7:19:9d:e5:
                    a3:0e:4d:d7:60:67:9a:a4:95:bf:ad:c9:eb:17:9e:
                    b1:f5:8d:c1:c8:f5:a5:bb:8b:e4:4f:37:d4:53:20:
                    84:e0:0c:93:56:f5:85:e0:a9:cc:e6:58:4e:1d:b1:
                    d5:59:20:e8:d3:40:a4:a3:6a:dc:73:0b:58:83:6d:
                    3b:51:ec:a0:ef:bf:df:18:85:6f:28:bf:ff:56:ad:
                    fc:12:86:0d:e4:00:52:52:ed:af:4a:ff:48:3f:a6:
                    4c:9f:b3:5d:05:43:3f:50:55:cd:ce:e2:dc:11:5e:
                    7e:84:54:c1:07:01:50:40:ee:07:2b:d8:7f:ca:e5:
                    05:fd:fc:3c:9e:e9:65:14:7c:5f:6b:b1:27:e9:7c:
                    f3:26:b1:3f:62:52:0d:6a:06:ef:87:e3:cb:ba:2d:
                    26:c0:ec:d0:31:6d:ef:05:16:00:f4:b2:fb:f7:aa:
                    db:40:89:e5:ce:b4:18:bd:f5:ed:31:75:8a:38:51:
                    04:f9:6f:38:a2:eb:6b:ce:42:c2:a6:86:59:b9:56:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:64:F2:67:03:05:60:8C:C9:30:62:7E:A7:52:19:66:21:D4:2D:57
            X509v3 Authority Key Identifier:
                keyid:18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/18380AF093DF48152B3963AA733B302A175459DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39372e302f32342d3234203d3e20323638343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:89:d2:8d:9b:9d:aa:01:34:48:54:22:1e:f3:1b:8e:77:dd:
         b1:fd:c9:ce:db:57:d3:49:af:c7:2a:7d:12:c5:73:29:c2:59:
         66:09:91:4b:7d:40:26:ad:dd:85:f4:74:4e:d1:36:02:9b:83:
         8d:94:cb:41:0e:2d:65:12:b3:1c:69:56:a3:27:66:be:11:43:
         a0:ff:7a:14:82:2b:f1:36:b3:a9:05:ae:01:82:f3:d2:b5:ff:
         49:35:51:5c:8a:55:44:88:d0:f7:b9:8f:ba:ac:b8:1c:be:5e:
         31:e5:97:f7:79:73:13:41:63:5b:14:20:10:f2:d4:aa:86:5f:
         8b:49:88:69:8c:04:67:ab:51:e8:81:97:77:f3:d2:69:d0:27:
         9c:f8:ff:32:1c:1f:19:e3:8c:ae:cb:89:9a:d9:3f:5e:ae:ac:
         d1:68:0e:3c:e3:2e:97:0d:83:b3:c8:4c:ad:ae:78:5c:97:35:
         95:3b:98:d1:82:9d:bb:d2:cb:67:1b:09:6a:ce:2c:34:f5:82:
         aa:c3:bd:94:18:05:38:33:91:1e:f9:63:bd:f1:97:a0:28:86:
         9b:31:15:41:cd:dd:a6:c0:fc:bf:f3:4c:51:f6:d8:1d:d1:41:
         75:50:3b:73:ff:11:50:6c:aa:58:36:ef:a0:b4:5b:34:65:13:
         54:04:7a:81
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCTfAKJjcRg3Sw16NDPibWECfUP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTgzODBBRjA5M0RGNDgxNTJCMzk2M0FBNzMzQjMwMkEx
NzU0NTlEQjAeFw0yNTAyMTQxMjU0MDdaFw0yNjAyMTMxMjU5MDdaMDMxMTAvBgNV
BAMTKEM5NjRGMjY3MDMwNTYwOENDOTMwNjI3RUE3NTIxOTY2MjFENDJENTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYzsPLpFVB1HuaSXQRmayOpvK
w6/xoj8SytxejxlOWuFdfuqEb8nKw5uZj01sb2qUjod7lReLtxmd5aMOTddgZ5qk
lb+tyesXnrH1jcHI9aW7i+RPN9RTIITgDJNW9YXgqczmWE4dsdVZIOjTQKSjatxz
C1iDbTtR7KDvv98YhW8ov/9WrfwShg3kAFJS7a9K/0g/pkyfs10FQz9QVc3O4twR
Xn6EVMEHAVBA7gcr2H/K5QX9/Dye6WUUfF9rsSfpfPMmsT9iUg1qBu+H48u6LSbA
7NAxbe8FFgD0svv3qttAieXOtBi99e0xdYo4UQT5bzii62vOQsKmhlm5VmjrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyWTyZwMFYIzJMGJ+p1IZZiHULVcwHwYDVR0j
BBgwFoAUGDgK8JPfSBUrOWOqczswKhdUWdswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tRMVNHVVZlcHhwS1VrR1hSdVY5eTZicjhURDVueVhMOXNhWGNtazZQ
a2MvMC8xODM4MEFGMDkzREY0ODE1MkIzOTYzQUE3MzNCMzAyQTE3NTQ1OURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4MzgwQUYwOTNERjQ4MTUy
QjM5NjNBQTczM0IzMDJBMTc1NDU5REIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0drUTFTR1VWZXB4cEtVa0dYUnVWOXk2YnI4VEQ1bnlYTDlzYVhjbWs2UGtjLzAv
MzQzNTJlMzEzNjMwMmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzQzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaBhMA0GCSqGSIb3DQEBCwUAA4IBAQA4idKNm52q
ATRIVCIe8xuOd92x/cnO21fTSa/HKn0SxXMpwllmCZFLfUAmrd2F9HRO0TYCm4ON
lMtBDi1lErMcaVajJ2a+EUOg/3oUgivxNrOpBa4BgvPStf9JNVFcilVEiND3uY+6
rLgcvl4x5Zf3eXMTQWNbFCAQ8tSqhl+LSYhpjARnq1HogZd389Jp0Cec+P8yHB8Z
44yuy4ma2T9erqzRaA484y6XDYOzyEytrnhclzWVO5jRgp270stnGwlqziw09YKq
w72UGAU4M5Ee+WO98ZegKIabMRVBzd2mwPy/80xR9tgd0UF1UDtz/xFQbKpYNu+g
tFs0ZRNUBHqB
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:20:10 2025 by rpki-client