Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3234203d3e20323731353832.roa
File:                     34352e3136352e3138302e302f32322d3234203d3e20323731353832.roa (raw, json)
Hash identifier:          Gc8PScKWke/qzlxgnEVQFsvV0l8jk6LLUPZ9AYB79u8=
Subject key identifier:   16:95:73:FE:61:5A:5B:15:69:02:8A:EF:EF:F7:76:00:3E:63:4E:5C
Certificate issuer:       /CN=6458F32FB7696095A9C07CF1CCA9EFBE8469C19B
Certificate serial:       72A64A4AACB18DC614A8686B6049AD39DB8F488B
Authority key identifier: 64:58:F3:2F:B7:69:60:95:A9:C0:7C:F1:CC:A9:EF:BE:84:69:C1:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6458F32FB7696095A9C07CF1CCA9EFBE8469C19B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3234203d3e20323731353832.roa
Signing time:             Fri 09 Dec 2022 16:06:55 +0000
ROA not before:           Fri 09 Dec 2022 16:01:55 +0000
ROA not after:            Fri 08 Dec 2023 16:06:55 +0000
asID:                     271582
IP address blocks:        45.165.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a6:4a:4a:ac:b1:8d:c6:14:a8:68:6b:60:49:ad:39:db:8f:48:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6458F32FB7696095A9C07CF1CCA9EFBE8469C19B
        Validity
            Not Before: Dec  9 16:01:55 2022 GMT
            Not After : Dec  8 16:06:55 2023 GMT
        Subject: CN=169573FE615A5B1569028AEFEFF776003E634E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:d3:8f:73:b5:9e:79:44:1a:d4:a0:1c:67:
                    60:80:9b:6a:74:a0:b8:22:76:a1:c7:19:72:08:ae:
                    ac:76:a8:f1:80:ad:9e:78:f9:3d:3d:a4:28:a1:e1:
                    d1:ce:60:5f:4a:a8:5f:ea:48:d9:ad:7d:da:cd:94:
                    5a:dc:9f:4e:10:54:66:07:4e:8f:b5:b2:f2:95:82:
                    9e:25:f0:2a:2a:27:67:c2:33:70:f4:08:8b:62:6e:
                    34:d7:5f:60:4d:44:66:ec:c5:00:27:2f:fb:26:31:
                    02:2e:77:e7:82:f1:59:ec:d0:32:10:14:07:12:c1:
                    73:9f:9f:87:b5:9a:39:8d:0b:47:bf:18:aa:bf:ba:
                    f8:10:13:7e:a4:31:dd:0f:3f:2a:a5:18:ef:dc:b5:
                    66:a6:1a:f9:19:0c:db:a7:60:af:6b:27:19:81:5f:
                    10:80:e1:84:d9:87:74:d2:3e:d0:ac:25:95:1c:2a:
                    43:1e:12:46:fd:9c:89:86:11:d7:91:21:3e:f1:8b:
                    87:0c:5e:b9:23:54:bd:36:39:c7:3e:43:e2:78:5d:
                    4d:94:c3:e1:25:6b:3d:94:d7:b7:24:14:09:fb:14:
                    67:92:f8:fe:ba:0c:32:1a:d6:37:18:1d:13:7e:94:
                    8e:ab:ee:7e:fe:54:b0:4f:01:63:4b:9f:69:bb:dc:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:95:73:FE:61:5A:5B:15:69:02:8A:EF:EF:F7:76:00:3E:63:4E:5C
            X509v3 Authority Key Identifier:
                keyid:64:58:F3:2F:B7:69:60:95:A9:C0:7C:F1:CC:A9:EF:BE:84:69:C1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/6458F32FB7696095A9C07CF1CCA9EFBE8469C19B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6458F32FB7696095A9C07CF1CCA9EFBE8469C19B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3234203d3e20323731353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:d6:1d:99:0e:60:de:57:83:bb:39:f5:22:a8:90:59:d4:ca:
         b8:4c:d2:f0:39:b4:30:b3:40:6a:b9:1d:a1:fa:a7:f3:62:b0:
         76:72:e2:fc:a4:09:98:c7:f3:68:b2:c9:ec:0a:63:2f:3e:70:
         d1:8f:d2:13:6a:10:44:1c:e4:df:8a:c6:8e:ff:76:02:43:2d:
         83:3b:9c:3c:38:72:a5:c5:3a:f3:ea:4c:f7:de:31:e9:6d:3a:
         5f:69:1e:b6:1a:14:3d:b2:4d:b9:1d:52:97:ae:e8:d1:4a:da:
         26:60:8c:bf:d6:1e:71:87:fb:82:8c:8c:a5:7b:17:cc:30:fe:
         89:76:90:ca:18:b9:45:f1:f2:71:4a:a6:f4:12:3e:76:69:b7:
         55:bc:42:93:a8:95:a9:6f:05:1a:4c:c1:eb:1f:fd:ed:6e:99:
         4d:47:04:0b:50:75:4e:86:63:85:5d:47:6d:eb:ef:bf:39:86:
         2b:01:21:1e:b4:20:8e:fe:f3:d4:4d:6d:4b:1e:39:c2:f4:35:
         19:86:c9:c6:fb:27:88:35:76:ca:0b:5f:aa:5e:36:c2:4f:9e:
         db:c0:fe:b8:6c:c7:ef:c6:4a:0b:86:f1:48:de:47:b0:25:9e:
         b4:b5:49:ed:75:32:5d:5e:76:5a:6e:29:5b:bb:72:52:d6:f1:
         96:b7:3c:bf
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUcqZKSqyxjcYUqGhrYEmtOduPSIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ1OEYzMkZCNzY5NjA5NUE5QzA3Q0YxQ0NBOUVGQkU4
NDY5QzE5QjAeFw0yMjEyMDkxNjAxNTVaFw0yMzEyMDgxNjA2NTVaMDMxMTAvBgNV
BAMTKDE2OTU3M0ZFNjE1QTVCMTU2OTAyOEFFRkVGRjc3NjAwM0U2MzRFNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaxNOPc7WeeUQa1KAcZ2CAm2p0
oLgidqHHGXIIrqx2qPGArZ54+T09pCih4dHOYF9KqF/qSNmtfdrNlFrcn04QVGYH
To+1svKVgp4l8CoqJ2fCM3D0CItibjTXX2BNRGbsxQAnL/smMQIud+eC8Vns0DIQ
FAcSwXOfn4e1mjmNC0e/GKq/uvgQE36kMd0PPyqlGO/ctWamGvkZDNunYK9rJxmB
XxCA4YTZh3TSPtCsJZUcKkMeEkb9nImGEdeRIT7xi4cMXrkjVL02Occ+Q+J4XU2U
w+Elaz2U17ckFAn7FGeS+P66DDIa1jcYHRN+lI6r7n7+VLBPAWNLn2m73DdpAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUFpVz/mFaWxVpAorv7/d2AD5jTlwwHwYDVR0j
BBgwFoAUZFjzL7dpYJWpwHzxzKnvvoRpwZswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XOGI3OEZYdmtRV0F1aDE1Z2locHI5WFJybTNKQUU3YmpITWlaTDFEWXdB
LzAvNjQ1OEYzMkZCNzY5NjA5NUE5QzA3Q0YxQ0NBOUVGQkU4NDY5QzE5Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82NDU4RjMyRkI3Njk2MDk1QTlD
MDdDRjFDQ0E5RUZCRTg0NjlDMTlCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
OGI3OEZYdmtRV0F1aDE1Z2locHI5WFJybTNKQUU3YmpITWlaTDFEWXdBLzAvMzQz
NTJlMzEzNjM1MmUzMTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzEz
NTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAItpbQwDQYJKoZIhvcNAQELBQADggEBAKrWHZkOYN5X
g7s59SKokFnUyrhM0vA5tDCzQGq5HaH6p/NisHZy4vykCZjH82iyyewKYy8+cNGP
0hNqEEQc5N+Kxo7/dgJDLYM7nDw4cqXFOvPqTPfeMeltOl9pHrYaFD2yTbkdUpeu
6NFK2iZgjL/WHnGH+4KMjKV7F8ww/ol2kMoYuUXx8nFKpvQSPnZpt1W8QpOolalv
BRpMwesf/e1umU1HBAtQdU6GY4VdR23r7785hisBIR60II7+89RNbUseOcL0NRmG
ycb7J4g1dsoLX6peNsJPntvA/rhsx+/GSguG8UjeR7AlnrS1Se11Ml1edlpuKVu7
clLW8Za3PL8=
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:40:53 2025 by rpki-client