Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39322e302f32322d3232203d3e20323638353137.roa
File:                     34352e3136322e39322e302f32322d3232203d3e20323638353137.roa (raw, json)
Hash identifier:          Y6m9IbqLjTU/tQ9C/DzseH+waqS2JoK5AgD+bccg2zM=
Subject key identifier:   6E:07:7F:BA:FC:01:50:A7:00:43:E6:6D:E2:81:0B:6E:CA:82:E4:98
Certificate issuer:       /CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Certificate serial:       1058ADD462A10B3ADF66EAE2B151D3B89D4C014B
Authority key identifier: D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39322e302f32322d3232203d3e20323638353137.roa
Signing time:             Thu 11 Apr 2024 01:29:39 +0000
ROA not before:           Thu 11 Apr 2024 01:24:39 +0000
ROA not after:            Thu 10 Apr 2025 01:29:39 +0000
asID:                     268517
IP address blocks:        45.162.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:58:ad:d4:62:a1:0b:3a:df:66:ea:e2:b1:51:d3:b8:9d:4c:01:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D029A3E7478998493D96D0D6B9C212CDC5530659
        Validity
            Not Before: Apr 11 01:24:39 2024 GMT
            Not After : Apr 10 01:29:39 2025 GMT
        Subject: CN=6E077FBAFC0150A70043E66DE2810B6ECA82E498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:dd:61:59:0d:74:ae:74:18:c8:62:06:e4:
                    87:28:f3:ce:a2:58:35:41:0f:88:79:dc:d4:84:30:
                    61:3e:4b:38:94:aa:8e:d6:c3:81:a3:72:e6:ad:bd:
                    d1:e5:ef:fd:8b:13:0a:7d:25:7e:f4:a0:bf:5c:97:
                    db:be:44:bc:70:52:b9:5e:43:fc:1d:51:0d:81:f3:
                    73:35:95:23:31:f0:de:d7:ff:62:54:c3:32:f1:cf:
                    b4:cf:b2:1d:e1:f0:da:fd:60:a9:a8:3e:e9:7d:3e:
                    07:a5:eb:64:b4:f3:c0:ba:74:a7:27:22:98:d7:ec:
                    1a:d7:a3:a0:02:a6:2c:ed:06:01:6f:d1:30:82:e5:
                    9c:9e:c1:9c:28:17:6a:5b:df:19:d1:b1:be:98:7b:
                    6d:a3:b1:bc:93:b8:fc:13:69:18:f5:47:17:01:78:
                    c0:03:ed:eb:76:7f:09:cd:26:eb:c5:ef:32:84:09:
                    9b:f0:24:79:59:6e:b4:4f:a3:87:63:93:2d:da:b0:
                    45:b9:e4:2f:4e:5f:bf:3e:a8:52:d9:0e:28:7d:72:
                    c1:37:5a:1c:b7:73:88:da:a7:bd:87:d4:1d:44:f8:
                    8a:c4:de:c7:e7:37:99:54:86:cc:59:26:ee:21:f9:
                    f9:29:d5:70:87:8b:1b:27:21:33:8c:19:ca:a1:4d:
                    e0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:07:7F:BA:FC:01:50:A7:00:43:E6:6D:E2:81:0B:6E:CA:82:E4:98
            X509v3 Authority Key Identifier:
                keyid:D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/D029A3E7478998493D96D0D6B9C212CDC5530659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39322e302f32322d3232203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:2b:a0:e7:3c:1b:66:24:d8:09:89:23:2d:81:6b:3e:9d:d4:
         96:8b:f4:91:70:15:80:c7:ef:d1:e8:8e:26:24:96:6a:5e:ef:
         4f:4c:e4:f1:45:8f:b1:01:c4:a1:08:88:1d:8a:d7:36:14:f2:
         fd:ec:2e:1c:5e:68:d8:47:50:bb:6f:20:b3:fd:4b:28:e9:ad:
         a2:ff:6e:3f:52:66:10:5b:c0:82:4b:26:96:4f:82:98:e7:3b:
         3c:6d:a2:4f:9b:43:bc:b3:18:c3:e1:84:8d:ff:89:b2:6e:c9:
         72:42:bc:8f:71:4e:70:cc:96:22:75:16:3b:cf:4d:c0:af:47:
         37:f3:eb:23:4f:0c:33:6e:95:ee:e9:1a:2f:1a:56:70:4b:10:
         64:ef:7b:e2:81:29:78:bd:80:c5:db:f2:7c:2f:42:8e:83:f1:
         19:a4:0d:c9:0f:2c:98:ea:e1:7a:31:ab:2a:b7:50:90:c6:b1:
         09:ea:36:8d:84:c2:9e:20:b8:d9:3f:e5:a3:78:81:00:32:15:
         6f:02:b7:e9:a3:e8:14:76:a0:9f:b4:95:47:dc:0c:86:9d:90:
         26:83:3d:17:f8:cc:26:a9:a7:84:0c:18:2c:fe:bd:ea:e0:a7:
         d1:61:d5:31:6a:ed:08:4b:f4:1f:c6:18:f4:ef:17:46:61:f4:
         e1:46:6a:01
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEFit1GKhCzrfZurisVHTuJ1MAUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAyOUEzRTc0Nzg5OTg0OTNEOTZEMEQ2QjlDMjEyQ0RD
NTUzMDY1OTAeFw0yNDA0MTEwMTI0MzlaFw0yNTA0MTAwMTI5MzlaMDMxMTAvBgNV
BAMTKDZFMDc3RkJBRkMwMTUwQTcwMDQzRTY2REUyODEwQjZFQ0E4MkU0OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEY91hWQ10rnQYyGIG5Ico886i
WDVBD4h53NSEMGE+SziUqo7Ww4GjcuatvdHl7/2LEwp9JX70oL9cl9u+RLxwUrle
Q/wdUQ2B83M1lSMx8N7X/2JUwzLxz7TPsh3h8Nr9YKmoPul9Pgel62S088C6dKcn
IpjX7BrXo6ACpiztBgFv0TCC5ZyewZwoF2pb3xnRsb6Ye22jsbyTuPwTaRj1RxcB
eMAD7et2fwnNJuvF7zKECZvwJHlZbrRPo4djky3asEW55C9OX78+qFLZDih9csE3
Why3c4jap72H1B1E+IrE3sfnN5lUhsxZJu4h+fkp1XCHixsnITOMGcqhTeCtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbgd/uvwBUKcAQ+Zt4oELbsqC5JgwHwYDVR0j
BBgwFoAU0Cmj50eJmEk9ltDWucISzcVTBlkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE5hcU4zcmRrQU5QcVFkdzhkZmthZFF2UUdWcTFRb1RBMkJzaUJUZHNn
a1QvMS9EMDI5QTNFNzQ3ODk5ODQ5M0Q5NkQwRDZCOUMyMTJDREM1NTMwNjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwMjlBM0U3NDc4OTk4NDkz
RDk2RDBENkI5QzIxMkNEQzU1MzA2NTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hOYXFOM3Jka0FOUHFRZHc4ZGZrYWRRdlFHVnExUW9UQTJCc2lCVGRzZ2tULzEv
MzQzNTJlMzEzNjMyMmUzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzUzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaJcMA0GCSqGSIb3DQEBCwUAA4IBAQBoK6DnPBtm
JNgJiSMtgWs+ndSWi/SRcBWAx+/R6I4mJJZqXu9PTOTxRY+xAcShCIgditc2FPL9
7C4cXmjYR1C7byCz/Uso6a2i/24/UmYQW8CCSyaWT4KY5zs8baJPm0O8sxjD4YSN
/4mybslyQryPcU5wzJYidRY7z03Ar0c38+sjTwwzbpXu6RovGlZwSxBk73vigSl4
vYDF2/J8L0KOg/EZpA3JDyyY6uF6Masqt1CQxrEJ6jaNhMKeILjZP+WjeIEAMhVv
Arfpo+gUdqCftJVH3AyGnZAmgz0X+MwmqaeEDBgs/r3q4KfRYdUxau0IS/Qfxhj0
7xdGYfThRmoB
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:18 2025 by rpki-client