Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32332e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          ICkQPx/FdUkAI0ByzcqUR+b+DPnayy+y5yEC9PAVemg=
Subject key identifier:   D7:C7:37:CB:E1:46:AA:EB:D2:2D:32:01:8D:0E:B4:7A:0F:91:57:3E
Certificate issuer:       /CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
Certificate serial:       50E8C890B5D3061A284E3E1CB7B9C78DFFF2D74D
Authority key identifier: C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa
Signing time:             Mon 18 Dec 2023 19:05:06 +0000
ROA not before:           Mon 18 Dec 2023 19:00:06 +0000
ROA not after:            Mon 16 Dec 2024 19:05:06 +0000
asID:                     268440
IP address blocks:        45.161.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e8:c8:90:b5:d3:06:1a:28:4e:3e:1c:b7:b9:c7:8d:ff:f2:d7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
        Validity
            Not Before: Dec 18 19:00:06 2023 GMT
            Not After : Dec 16 19:05:06 2024 GMT
        Subject: CN=D7C737CBE146AAEBD22D32018D0EB47A0F91573E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:eb:6d:b8:fb:25:dc:32:f9:28:f7:0d:72:89:
                    8b:54:4a:64:82:71:fd:8d:f4:c5:e3:c7:c3:0b:6d:
                    6c:ed:43:99:5f:f7:93:83:b8:84:69:e9:07:d3:d8:
                    2f:ef:70:91:0c:91:55:d7:19:c9:c7:98:a7:7c:24:
                    39:9d:0a:6c:fa:b6:97:06:b4:0d:8b:ba:01:84:30:
                    c4:d7:c0:45:c0:77:f1:20:23:61:53:d9:e6:ba:f5:
                    2e:b2:2d:60:2f:9b:33:82:3b:da:52:be:37:5e:e8:
                    ee:95:68:91:1c:fe:8e:be:1e:84:ad:bf:34:f3:a6:
                    d5:ce:f8:ca:11:55:dc:bf:a1:b7:5c:65:ac:10:e2:
                    b4:c8:92:96:8c:23:18:38:a3:dd:9a:0f:4e:2b:dd:
                    31:66:71:d7:de:0a:19:37:e4:22:16:92:8a:6e:a5:
                    2e:48:18:1f:0f:b4:aa:68:47:85:a0:ad:c6:2b:7e:
                    cb:64:6e:19:a3:92:14:08:eb:ae:0a:d0:70:96:90:
                    f4:c6:e0:b7:96:b1:15:93:f7:46:a3:12:68:b7:a3:
                    d9:dc:cf:b8:64:22:36:b4:15:d0:b6:66:4e:cf:e3:
                    01:ad:8d:e0:97:cb:76:23:25:5b:64:31:75:c2:0a:
                    87:50:5c:a4:f9:5d:43:87:b6:08:66:29:9c:12:86:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C7:37:CB:E1:46:AA:EB:D2:2D:32:01:8D:0E:B4:7A:0F:91:57:3E
            X509v3 Authority Key Identifier:
                keyid:C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:1a:94:ec:17:bb:c4:82:1c:ab:22:9c:8d:63:9f:34:af:b8:
         b0:7c:58:9a:26:fc:35:11:1e:d1:a3:a4:6b:83:c6:80:ae:af:
         1e:62:39:46:0f:61:cd:df:54:09:99:e6:fd:4d:91:ff:05:b3:
         78:c4:42:30:f0:75:68:a7:5a:f5:ac:3d:06:6a:e0:d7:68:fc:
         87:98:2d:33:82:a5:4f:4f:14:bf:a2:79:86:be:4c:e3:6d:65:
         45:2a:29:41:2f:cc:79:c7:18:29:ed:5a:d2:ea:3d:4c:b1:e6:
         4d:e8:f4:6d:91:4f:1d:34:e8:b1:26:40:a1:43:7f:4b:06:a7:
         cd:31:48:1b:f2:42:91:aa:75:54:c4:8b:ef:70:18:bc:ff:71:
         18:4c:e4:5d:d8:5b:30:26:55:87:e0:b7:90:ca:15:02:db:7f:
         3e:72:10:93:75:65:da:f7:e9:b5:00:69:8d:2f:d6:6a:d0:69:
         2d:c5:d4:4c:35:cc:b0:93:6d:66:6b:39:98:b0:40:12:ff:c2:
         8d:42:97:d6:45:66:7a:84:16:8c:27:05:1a:cf:5d:1b:30:3f:
         1f:7a:20:44:ee:c5:fb:c3:0e:bf:92:90:09:53:ef:06:1f:9a:
         1d:b2:a3:e1:cc:a3:15:33:f4:50:2f:aa:e7:5d:f8:13:18:c7:
         2b:b4:f3:e6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUOjIkLXTBhooTj4ct7nHjf/y100wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE5M0I2ODk3OUIwRjE4OUQyQUQxQkUxRjRFN0M2QTgw
NThCNDFCNDAeFw0yMzEyMTgxOTAwMDZaFw0yNDEyMTYxOTA1MDZaMDMxMTAvBgNV
BAMTKEQ3QzczN0NCRTE0NkFBRUJEMjJEMzIwMThEMEVCNDdBMEY5MTU3M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg6224+yXcMvko9w1yiYtUSmSC
cf2N9MXjx8MLbWztQ5lf95ODuIRp6QfT2C/vcJEMkVXXGcnHmKd8JDmdCmz6tpcG
tA2LugGEMMTXwEXAd/EgI2FT2ea69S6yLWAvmzOCO9pSvjde6O6VaJEc/o6+HoSt
vzTzptXO+MoRVdy/obdcZawQ4rTIkpaMIxg4o92aD04r3TFmcdfeChk35CIWkopu
pS5IGB8PtKpoR4WgrcYrfstkbhmjkhQI664K0HCWkPTG4LeWsRWT90ajEmi3o9nc
z7hkIja0FdC2Zk7P4wGtjeCXy3YjJVtkMXXCCodQXKT5XUOHtghmKZwShoIZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU18c3y+FGquvSLTIBjQ60eg+RVz4wHwYDVR0j
BBgwFoAUwZO2iXmw8YnSrRvh9OfGqAWLQbQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRl
MlkvMC9DMTkzQjY4OTc5QjBGMTg5RDJBRDFCRTFGNEU3QzZBODA1OEI0MUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MxOTNCNjg5NzlCMEYxODlE
MkFEMUJFMUY0RTdDNkE4MDU4QjQxQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hiTTNHY0Q5dmJoWHVYdDZjekpkaW41WUN2OTJhc2RFQ25lU3NycDFkZTJZLzAv
MzQzNTJlMzEzNjMxMmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaEXMA0GCSqGSIb3DQEBCwUAA4IBAQCuGpTsF7vE
ghyrIpyNY580r7iwfFiaJvw1ER7Ro6Rrg8aArq8eYjlGD2HN31QJmeb9TZH/BbN4
xEIw8HVop1r1rD0GauDXaPyHmC0zgqVPTxS/onmGvkzjbWVFKilBL8x5xxgp7VrS
6j1MseZN6PRtkU8dNOixJkChQ39LBqfNMUgb8kKRqnVUxIvvcBi8/3EYTORd2Fsw
JlWH4LeQyhUC238+chCTdWXa9+m1AGmNL9Zq0GktxdRMNcywk21mazmYsEAS/8KN
QpfWRWZ6hBaMJwUaz10bMD8feiBE7sX7ww6/kpAJU+8GH5odsqPhzKMVM/RQL6rn
XfgTGMcrtPPm
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:44 2025 by rpki-client