Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231382e302f32332d3233203d3e20323639313934.roa
File:                     34352e3138302e3231382e302f32332d3233203d3e20323639313934.roa (raw, json)
Hash identifier:          2n2QVZ01pG4mdZnOBgGaL3F7ETQGH698bPRRHbmh3QQ=
Subject key identifier:   B4:7E:72:DC:1F:42:E9:5B:C1:61:19:B3:69:BD:D8:67:7C:7A:83:EF
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       08A359825F8DEC066D36BC6ED8933AFFBEEA1D0E
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231382e302f32332d3233203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:38 +0000
ROA not before:           Sat 29 Jul 2023 16:21:38 +0000
ROA not after:            Sat 27 Jul 2024 16:26:38 +0000
asID:                     269194
IP address blocks:        45.180.218.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a3:59:82:5f:8d:ec:06:6d:36:bc:6e:d8:93:3a:ff:be:ea:1d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:38 2023 GMT
            Not After : Jul 27 16:26:38 2024 GMT
        Subject: CN=B47E72DC1F42E95BC16119B369BDD8677C7A83EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:8d:e0:e8:0f:ed:26:42:8a:2f:fc:1a:be:
                    bd:bc:e3:d1:a4:75:ba:07:ba:25:6d:6d:fd:a0:c9:
                    d7:de:ff:b2:e6:ad:1f:a6:1c:0b:72:3e:58:06:53:
                    48:27:07:72:ec:31:0a:61:6e:02:52:2f:04:98:ce:
                    65:ca:97:ab:7a:87:1e:b3:bd:23:87:2b:9b:63:54:
                    a6:73:27:6f:95:f7:8c:f0:ac:ee:9c:fe:6e:1c:cf:
                    be:05:aa:e7:4b:e1:35:fc:e6:7c:78:f5:c8:36:3d:
                    04:9f:9c:e7:0f:3d:2f:86:2d:40:e3:92:61:86:cb:
                    12:ab:ef:86:e4:89:50:49:bf:36:8e:7e:01:03:f5:
                    52:29:9e:f0:bc:5a:1b:f3:35:5d:66:08:10:f2:b7:
                    67:8b:a2:d3:76:a9:01:4b:8e:40:7d:57:25:fe:49:
                    94:8e:6d:fe:39:bc:61:67:5f:ca:aa:c9:47:b5:ab:
                    41:4a:76:a7:67:5d:82:1f:93:e1:47:7c:d3:f8:24:
                    43:70:3f:83:50:a3:c6:26:17:44:e3:a6:cd:c4:2c:
                    46:9f:be:6f:1e:bf:df:7c:97:b3:71:5a:16:db:03:
                    38:94:92:8d:48:33:b8:8a:00:a2:62:64:8c:ad:d1:
                    60:ca:9b:5a:d7:e4:60:79:d5:96:40:e4:d4:84:f7:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7E:72:DC:1F:42:E9:5B:C1:61:19:B3:69:BD:D8:67:7C:7A:83:EF
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231382e302f32332d3233203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:73:f1:43:84:d7:10:6e:9c:14:86:d2:8c:7b:2b:f7:78:58:
         04:f6:47:50:ec:93:10:37:12:2a:0d:56:ac:9b:91:6a:3c:df:
         33:32:73:f4:db:93:97:3f:65:7f:fb:f3:d1:f4:2e:92:37:01:
         6b:1e:62:a8:6d:68:f4:09:a4:3b:70:13:fa:e5:2a:b2:3f:b4:
         53:79:18:65:89:7a:63:8c:dd:a0:6a:dd:13:ff:f8:36:34:fb:
         4a:b5:e4:67:cf:ea:bf:2d:62:41:91:34:24:6b:aa:7b:f4:c4:
         de:b9:86:45:ed:46:a2:9f:aa:27:ed:05:8b:12:68:14:be:d1:
         6a:2f:f7:03:42:63:c5:8b:7f:4f:c5:7e:7c:ce:40:95:2a:f1:
         a5:d2:a8:22:5e:1e:e5:e0:6b:08:fc:81:cf:77:7c:9b:6e:cb:
         2d:c8:f6:00:fe:c4:3e:32:23:9c:b4:62:55:01:67:51:8e:22:
         77:54:81:d2:95:6d:8d:d0:0d:17:d9:67:18:9c:4c:90:91:ac:
         8c:a2:29:cd:8e:31:d8:8b:b1:5c:6e:24:bf:ee:16:87:00:f3:
         67:cc:e7:63:4f:75:8d:e4:5d:23:94:15:67:7a:91:e9:69:19:
         6c:f1:4e:e0:5a:52:b3:4a:6b:e8:f8:13:4d:de:55:e1:88:cc:
         14:1c:08:a1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCKNZgl+N7AZtNrxu2JM6/77qHQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yMzA3MjkxNjIxMzhaFw0yNDA3MjcxNjI2MzhaMDMxMTAvBgNV
BAMTKEI0N0U3MkRDMUY0MkU5NUJDMTYxMTlCMzY5QkREODY3N0M3QTgzRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWY3g6A/tJkKKL/wavr2849Gk
dboHuiVtbf2gydfe/7LmrR+mHAtyPlgGU0gnB3LsMQphbgJSLwSYzmXKl6t6hx6z
vSOHK5tjVKZzJ2+V94zwrO6c/m4cz74FqudL4TX85nx49cg2PQSfnOcPPS+GLUDj
kmGGyxKr74bkiVBJvzaOfgED9VIpnvC8WhvzNV1mCBDyt2eLotN2qQFLjkB9VyX+
SZSObf45vGFnX8qqyUe1q0FKdqdnXYIfk+FHfNP4JENwP4NQo8YmF0Tjps3ELEaf
vm8ev998l7NxWhbbAziUko1IM7iKAKJiZIyt0WDKm1rX5GB51ZZA5NSE96ivAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtH5y3B9C6VvBYRmzab3YZ3x6g+8wHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzQzNTJlMzEzODMwMmUzMjMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEttNowDQYJKoZIhvcNAQELBQADggEBAAJz8UOE
1xBunBSG0ox7K/d4WAT2R1DskxA3EioNVqybkWo83zMyc/Tbk5c/ZX/789H0LpI3
AWseYqhtaPQJpDtwE/rlKrI/tFN5GGWJemOM3aBq3RP/+DY0+0q15GfP6r8tYkGR
NCRrqnv0xN65hkXtRqKfqiftBYsSaBS+0Wov9wNCY8WLf0/FfnzOQJUq8aXSqCJe
HuXgawj8gc93fJtuyy3I9gD+xD4yI5y0YlUBZ1GOIndUgdKVbY3QDRfZZxicTJCR
rIyiKc2OMdiLsVxuJL/uFocA82fM52NPdY3kXSOUFWd6kelpGWzxTuBaUrNKa+j4
E03eVeGIzBQcCKE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:51:03 2025 by rpki-client