Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/34352e3138302e3232302e302f32322d3332203d3e20323639313530.roa
File:                     34352e3138302e3232302e302f32322d3332203d3e20323639313530.roa (raw, json)
Hash identifier:          v+pMbwfsYqob1lcuPjPNNHyhgzTfyJXu/7lsP0o8pro=
Subject key identifier:   0F:13:15:C4:82:D3:1E:81:1F:A7:D9:E8:31:B2:6C:C6:CA:BB:36:2B
Certificate issuer:       /CN=647BE817F76A58B8110B464E406EBB9FF62FF5F2
Certificate serial:       0C6B525789A9B8C7C4ADA50EB20C6D77308633C7
Authority key identifier: 64:7B:E8:17:F7:6A:58:B8:11:0B:46:4E:40:6E:BB:9F:F6:2F:F5:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/34352e3138302e3232302e302f32322d3332203d3e20323639313530.roa
Signing time:             Fri 15 Mar 2024 17:56:10 +0000
ROA not before:           Fri 15 Mar 2024 17:51:10 +0000
ROA not after:            Fri 14 Mar 2025 17:56:10 +0000
asID:                     269150
IP address blocks:        45.180.220.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6b:52:57:89:a9:b8:c7:c4:ad:a5:0e:b2:0c:6d:77:30:86:33:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647BE817F76A58B8110B464E406EBB9FF62FF5F2
        Validity
            Not Before: Mar 15 17:51:10 2024 GMT
            Not After : Mar 14 17:56:10 2025 GMT
        Subject: CN=0F1315C482D31E811FA7D9E831B26CC6CABB362B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:4d:00:f4:a2:2a:4d:b4:da:52:51:43:66:
                    89:6b:ad:b8:ed:ee:29:14:81:3a:88:79:dc:8e:fd:
                    35:2b:85:8b:37:de:e7:99:d7:e5:04:93:7c:e3:e6:
                    2c:14:d4:f2:49:e0:ed:15:e6:ad:da:39:c0:98:07:
                    f9:81:2c:4f:0b:d9:2d:57:91:f5:44:48:1f:5e:e6:
                    22:6a:e0:df:c3:b1:c0:25:b7:f3:a5:16:e9:f6:53:
                    7a:57:f8:9b:a5:25:32:95:99:57:d2:b1:70:fb:54:
                    1b:2a:63:c2:41:b0:6d:72:3b:b9:6b:2e:a1:fa:a4:
                    f2:88:90:1d:b7:ec:ba:04:9c:a5:5b:d6:64:45:34:
                    73:82:bc:d3:a9:eb:fd:88:b8:2c:4d:2d:22:09:11:
                    53:f0:44:e0:ec:23:2b:85:0c:13:1b:8a:35:11:1f:
                    ef:49:6a:4c:22:39:2f:db:dd:02:7f:e2:23:10:27:
                    78:49:d0:f9:96:49:2b:54:46:0b:ee:e3:06:ba:e3:
                    3a:b3:c7:06:eb:79:52:7d:38:51:23:49:73:7d:32:
                    79:c2:14:cc:79:e0:b2:77:a8:0b:f9:78:1f:47:bf:
                    04:57:b6:a1:c0:14:b4:46:ab:eb:af:c8:01:d4:28:
                    38:6d:17:10:84:98:c4:46:c9:8f:91:11:35:4a:75:
                    59:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:13:15:C4:82:D3:1E:81:1F:A7:D9:E8:31:B2:6C:C6:CA:BB:36:2B
            X509v3 Authority Key Identifier:
                keyid:64:7B:E8:17:F7:6A:58:B8:11:0B:46:4E:40:6E:BB:9F:F6:2F:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/34352e3138302e3232302e302f32322d3332203d3e20323639313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:ab:46:00:dc:bf:0e:6f:94:b8:d0:b1:27:8d:9f:69:6a:4b:
         ec:7e:fe:61:61:37:ad:77:db:f9:95:ab:17:f5:e0:3c:01:5b:
         b5:4a:cc:d0:5e:17:2b:a8:c4:47:37:bb:37:58:ce:88:33:ea:
         ab:9a:8b:02:e2:cd:42:66:45:66:60:42:6d:bd:39:cc:cf:42:
         c8:c8:92:d5:06:87:fe:98:1d:43:85:06:5d:01:9c:a8:85:96:
         2f:56:25:a9:4d:0b:56:c0:ec:ac:bf:9f:45:af:0b:2f:6a:e0:
         69:8b:6b:1c:54:d9:6c:27:a5:de:20:58:70:21:cc:2d:67:ed:
         8e:20:d3:d9:bd:a5:22:cb:e1:e5:3e:5a:83:41:e4:dd:8e:c1:
         f0:bc:07:a4:cf:2c:73:10:8e:05:97:73:8c:f4:fe:be:3c:55:
         eb:87:ec:a0:4b:93:c0:fd:62:49:0c:4e:d7:ec:ad:ba:fe:06:
         b1:2c:4d:e0:0e:d5:df:95:08:d1:27:f5:c6:97:ba:7c:e2:0c:
         7c:70:b0:06:74:5d:4a:0c:92:f5:5a:25:cf:38:0d:80:ba:a8:
         12:06:46:78:99:2a:48:07:2e:d3:3c:a7:11:9b:3d:09:64:15:
         d7:07:f1:ec:10:0c:fd:4d:88:b4:8e:e4:5f:b7:65:a6:20:77:
         c6:3e:f4:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDGtSV4mpuMfEraUOsgxtdzCGM8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ3QkU4MTdGNzZBNThCODExMEI0NjRFNDA2RUJCOUZG
NjJGRjVGMjAeFw0yNDAzMTUxNzUxMTBaFw0yNTAzMTQxNzU2MTBaMDMxMTAvBgNV
BAMTKDBGMTMxNUM0ODJEMzFFODExRkE3RDlFODMxQjI2Q0M2Q0FCQjM2MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCk0A9KIqTbTaUlFDZolrrbjt
7ikUgTqIedyO/TUrhYs33ueZ1+UEk3zj5iwU1PJJ4O0V5q3aOcCYB/mBLE8L2S1X
kfVESB9e5iJq4N/DscAlt/OlFun2U3pX+JulJTKVmVfSsXD7VBsqY8JBsG1yO7lr
LqH6pPKIkB237LoEnKVb1mRFNHOCvNOp6/2IuCxNLSIJEVPwRODsIyuFDBMbijUR
H+9JakwiOS/b3QJ/4iMQJ3hJ0PmWSStURgvu4wa64zqzxwbreVJ9OFEjSXN9MnnC
FMx54LJ3qAv5eB9HvwRXtqHAFLRGq+uvyAHUKDhtFxCEmMRGyY+RETVKdVkxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDxMVxILTHoEfp9noMbJsxsq7NiswHwYDVR0j
BBgwFoAUZHvoF/dqWLgRC0ZOQG67n/Yv9fIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDF0a0ZBU05KUHY0cUN0QnJaSEpUdW9jMUtXNHVhcVB0eHNxTGRkanBq
ZHcvMC82NDdCRTgxN0Y3NkE1OEI4MTEwQjQ2NEU0MDZFQkI5RkY2MkZGNUYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0N0JFODE3Rjc2QTU4Qjgx
MTBCNDY0RTQwNkVCQjlGRjYyRkY1RjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxdGtGQVNOSlB2NHFDdEJyWkhKVHVvYzFLVzR1YXFQdHhzcUxkZGpwamR3LzAv
MzQzNTJlMzEzODMwMmUzMjMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttNwwDQYJKoZIhvcNAQELBQADggEBAHyrRgDc
vw5vlLjQsSeNn2lqS+x+/mFhN6132/mVqxf14DwBW7VKzNBeFyuoxEc3uzdYzogz
6quaiwLizUJmRWZgQm29OczPQsjIktUGh/6YHUOFBl0BnKiFli9WJalNC1bA7Ky/
n0WvCy9q4GmLaxxU2Wwnpd4gWHAhzC1n7Y4g09m9pSLL4eU+WoNB5N2OwfC8B6TP
LHMQjgWXc4z0/r48VeuH7KBLk8D9YkkMTtfsrbr+BrEsTeAO1d+VCNEn9caXunzi
DHxwsAZ0XUoMkvVaJc84DYC6qBIGRniZKkgHLtM8pxGbPQlkFdcH8ewQDP1NiLSO
5F+3ZaYgd8Y+9Ks=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:11 2025 by rpki-client