Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233382e302f32332d3233203d3e20323639313934.roa
File:                     34352e3233382e3233382e302f32332d3233203d3e20323639313934.roa (raw, json)
Hash identifier:          tmInBau78RZTNu+Xk60oxwz/wWJVjeXyiooeqVblXs0=
Subject key identifier:   65:B5:41:A9:8A:20:B5:C9:C4:EF:AD:84:5C:98:0D:4A:9F:D3:29:F7
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       66F60B62C5362E756D69C043CFCFFE979181C0C6
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233382e302f32332d3233203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:43 +0000
ROA not before:           Sat 29 Jul 2023 16:21:43 +0000
ROA not after:            Sat 27 Jul 2024 16:26:43 +0000
asID:                     269194
IP address blocks:        45.238.238.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f6:0b:62:c5:36:2e:75:6d:69:c0:43:cf:cf:fe:97:91:81:c0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:43 2023 GMT
            Not After : Jul 27 16:26:43 2024 GMT
        Subject: CN=65B541A98A20B5C9C4EFAD845C980D4A9FD329F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:47:96:70:24:db:e2:73:ac:a9:aa:c6:9a:
                    84:65:b6:69:8b:66:f7:c3:33:8c:c8:a5:fd:f8:bd:
                    79:f6:a0:af:1a:94:63:3b:be:7a:56:ab:9c:18:9d:
                    98:ae:c9:97:1b:42:49:08:6a:e2:4d:e0:1a:20:60:
                    e3:8e:2e:ac:d6:61:38:62:06:75:ae:dd:5d:c3:35:
                    c2:b1:76:64:66:e6:81:02:87:fc:8e:de:0d:46:09:
                    8f:97:65:95:e1:10:bf:1d:d8:2e:db:e8:b5:d8:02:
                    04:ca:87:ce:92:cc:90:f4:ad:84:2d:78:a8:7b:63:
                    7f:f0:78:3e:31:ce:62:e2:e9:92:e3:c0:04:3d:c6:
                    d2:4d:f6:ea:84:3b:c0:73:45:d5:db:fa:18:dc:54:
                    cb:2c:9d:03:07:25:49:1c:3f:9a:0a:1c:26:d7:96:
                    eb:b8:74:26:ba:fc:52:ae:8a:ef:fa:bf:f1:77:33:
                    f8:d6:71:b5:d0:8d:66:b9:fb:08:29:26:1d:af:f8:
                    08:81:79:66:19:61:be:65:8d:e8:38:ec:3b:d7:96:
                    a8:89:bf:0f:fa:90:7b:84:6d:6d:9d:76:ab:a7:8f:
                    5f:95:14:81:eb:51:24:9d:1a:05:22:43:7f:5a:1e:
                    eb:19:dd:8e:b7:18:e7:04:40:09:ef:f7:df:dd:f2:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B5:41:A9:8A:20:B5:C9:C4:EF:AD:84:5C:98:0D:4A:9F:D3:29:F7
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233382e302f32332d3233203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:0c:dc:0a:7d:7d:e7:3a:28:d1:08:fc:b8:67:f7:07:50:0a:
         a2:2d:93:ba:64:2a:cf:91:63:7b:f0:9d:a0:35:98:95:d0:e9:
         c4:f4:3d:3b:26:55:b4:2e:18:ee:67:90:e3:06:ad:89:ad:3d:
         0a:c1:9b:27:e0:fe:e1:13:e6:9b:87:7a:c6:1d:83:bf:82:63:
         c0:ac:77:20:b7:40:dc:81:4b:86:78:0c:e2:c5:f2:b4:f6:db:
         37:48:f8:48:71:29:6f:92:cb:9f:6b:73:ab:c5:0b:dd:88:d9:
         bb:ac:85:4b:82:30:9e:52:d2:ff:bc:81:46:e3:4c:b3:05:f5:
         ff:f2:b7:da:2d:9b:5d:4d:4a:8f:61:d0:a8:50:5e:98:64:19:
         9c:18:b0:eb:f3:48:f7:78:88:c6:ef:21:e8:e9:fb:c2:87:62:
         ca:34:e4:2c:9f:34:2f:e6:42:63:f8:0f:58:50:90:78:51:57:
         4d:c6:76:2c:07:98:1e:68:94:2f:4d:f8:fa:62:23:f1:4b:10:
         a5:77:18:8c:5f:14:12:f1:a5:3c:d8:46:60:a8:54:24:dd:f3:
         5a:15:50:b3:d8:86:d1:d2:05:38:25:65:7f:a2:eb:ee:e2:c7:
         55:a7:08:95:cb:ce:4c:08:67:91:bc:40:be:85:c5:17:ab:77:
         25:37:ab:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZvYLYsU2LnVtacBDz8/+l5GBwMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yMzA3MjkxNjIxNDNaFw0yNDA3MjcxNjI2NDNaMDMxMTAvBgNV
BAMTKDY1QjU0MUE5OEEyMEI1QzlDNEVGQUQ4NDVDOTgwRDRBOUZEMzI5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvUeWcCTb4nOsqarGmoRltmmL
ZvfDM4zIpf34vXn2oK8alGM7vnpWq5wYnZiuyZcbQkkIauJN4BogYOOOLqzWYThi
BnWu3V3DNcKxdmRm5oECh/yO3g1GCY+XZZXhEL8d2C7b6LXYAgTKh86SzJD0rYQt
eKh7Y3/weD4xzmLi6ZLjwAQ9xtJN9uqEO8BzRdXb+hjcVMssnQMHJUkcP5oKHCbX
luu4dCa6/FKuiu/6v/F3M/jWcbXQjWa5+wgpJh2v+AiBeWYZYb5ljeg47DvXlqiJ
vw/6kHuEbW2ddqunj1+VFIHrUSSdGgUiQ39aHusZ3Y63GOcEQAnv99/d8rrBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZbVBqYogtcnE762EXJgNSp/TKfcwHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzQzNTJlMzIzMzM4MmUzMjMzMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7u4wDQYJKoZIhvcNAQELBQADggEBAFwM3Ap9
fec6KNEI/Lhn9wdQCqItk7pkKs+RY3vwnaA1mJXQ6cT0PTsmVbQuGO5nkOMGrYmt
PQrBmyfg/uET5puHesYdg7+CY8CsdyC3QNyBS4Z4DOLF8rT22zdI+EhxKW+Sy59r
c6vFC92I2bushUuCMJ5S0v+8gUbjTLMF9f/yt9otm11NSo9h0KhQXphkGZwYsOvz
SPd4iMbvIejp+8KHYso05CyfNC/mQmP4D1hQkHhRV03GdiwHmB5olC9N+PpiI/FL
EKV3GIxfFBLxpTzYRmCoVCTd81oVULPYhtHSBTglZX+i6+7ix1WnCJXLzkwIZ5G8
QL6FxRerdyU3q44=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:22 2025 by rpki-client