Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32342d3332203d3e20323731353832.roa
File:                     34352e3136352e3138302e302f32342d3332203d3e20323731353832.roa (raw, json)
Hash identifier:          9CYN+BWZnYmHPaSXCAajMxmVwOWhW+J1vOyOz66nWFY=
Subject key identifier:   C9:9F:09:2A:1B:49:85:C3:36:2D:D3:F8:B3:77:24:36:CB:33:77:55
Certificate issuer:       /CN=42580E647D96523C34EBD7D8F6B91281804DC276
Certificate serial:       748D2A4BDB7C7030CC657341A422D980C87829C8
Authority key identifier: 42:58:0E:64:7D:96:52:3C:34:EB:D7:D8:F6:B9:12:81:80:4D:C2:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42580E647D96523C34EBD7D8F6B91281804DC276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32342d3332203d3e20323731353832.roa
Signing time:             Wed 24 Jul 2024 11:24:59 +0000
ROA not before:           Wed 24 Jul 2024 11:19:59 +0000
ROA not after:            Wed 23 Jul 2025 11:24:59 +0000
asID:                     271582
IP address blocks:        45.165.180.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8d:2a:4b:db:7c:70:30:cc:65:73:41:a4:22:d9:80:c8:78:29:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42580E647D96523C34EBD7D8F6B91281804DC276
        Validity
            Not Before: Jul 24 11:19:59 2024 GMT
            Not After : Jul 23 11:24:59 2025 GMT
        Subject: CN=C99F092A1B4985C3362DD3F8B3772436CB337755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:b1:b0:06:3a:1f:df:84:bf:30:10:b8:42:
                    1c:62:27:9d:21:c9:11:4b:c3:d6:04:d6:79:20:7a:
                    48:0a:88:f6:40:fe:d8:2b:c9:1a:93:80:56:61:17:
                    73:d6:d4:c0:83:3a:ea:c6:3e:91:e0:ba:c2:a7:01:
                    a2:fe:12:96:4a:a9:3e:e4:c7:86:b2:c6:0d:fb:bd:
                    c9:c0:24:f7:6a:fb:8e:27:5e:6b:80:ab:d7:3e:f0:
                    88:f9:74:15:43:df:4b:5a:ac:fd:55:ef:a7:5c:f3:
                    a7:5c:61:9a:0f:01:8e:2e:03:2d:1b:9e:71:a2:95:
                    ef:eb:54:fb:3b:5e:37:61:ab:1f:b8:22:9e:4f:f5:
                    b1:d6:4a:36:b9:3c:0a:e9:73:c8:ce:54:1e:ff:f4:
                    8e:89:79:b2:44:92:77:b6:ea:38:48:cd:8c:f8:29:
                    0a:f7:2b:84:f5:fe:7e:6b:bf:cf:aa:47:33:fe:c9:
                    b5:17:78:c1:d8:94:39:cf:a2:65:f2:2a:6e:68:36:
                    d9:e8:0a:98:53:f9:f0:c7:39:e0:d5:49:91:a1:a4:
                    4d:96:88:d7:f5:66:19:9a:3a:31:b5:49:19:ff:73:
                    4a:9f:81:81:a0:38:05:91:0c:b1:83:f1:a4:a2:21:
                    62:c1:fa:87:25:40:33:ba:a4:cb:9c:fa:60:37:40:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9F:09:2A:1B:49:85:C3:36:2D:D3:F8:B3:77:24:36:CB:33:77:55
            X509v3 Authority Key Identifier:
                keyid:42:58:0E:64:7D:96:52:3C:34:EB:D7:D8:F6:B9:12:81:80:4D:C2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/42580E647D96523C34EBD7D8F6B91281804DC276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42580E647D96523C34EBD7D8F6B91281804DC276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32342d3332203d3e20323731353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:b3:a6:3f:eb:31:e0:d9:b9:6e:b2:55:99:60:ae:e9:dc:f9:
         f0:53:ba:02:e9:8d:eb:e0:64:ba:f0:44:cd:1f:70:e6:f5:bd:
         e5:f4:be:49:6b:e0:5e:e3:f7:c9:7c:55:f1:6e:4e:77:eb:c7:
         e8:ec:c8:51:1e:06:59:f0:2f:fe:17:be:48:34:81:72:4b:cc:
         e2:b5:94:e3:24:7d:28:f9:d1:ec:53:7c:d0:02:20:95:31:0f:
         4c:ad:a8:6e:72:11:29:6b:f7:f1:d4:62:4b:c0:0d:3f:c6:f1:
         f3:3a:d9:e5:cb:30:60:10:84:98:e5:fb:73:2c:63:80:45:db:
         98:c6:79:b6:aa:bb:8e:b6:20:29:b9:46:2d:29:0b:05:70:1f:
         ad:1a:2a:30:8e:a8:14:ea:86:d3:ad:30:c6:74:66:7b:7d:d1:
         59:a7:46:8e:a4:3c:03:b1:fd:12:86:fc:98:06:c8:72:b8:8d:
         27:7c:db:7d:de:d2:e6:19:6c:bb:da:48:ec:05:b5:95:7e:06:
         d4:d0:86:5e:4a:30:56:44:8d:01:41:18:a5:bf:6b:c8:05:04:
         a3:fa:f9:73:6a:e4:8a:34:5e:3b:a1:a9:5a:29:a6:01:c1:1e:
         1c:78:ac:6a:cf:e4:3f:c8:e2:21:da:b8:c6:b4:1f:88:6c:d1:
         b3:95:86:12
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUdI0qS9t8cDDMZXNBpCLZgMh4KcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI1ODBFNjQ3RDk2NTIzQzM0RUJEN0Q4RjZCOTEyODE4
MDREQzI3NjAeFw0yNDA3MjQxMTE5NTlaFw0yNTA3MjMxMTI0NTlaMDMxMTAvBgNV
BAMTKEM5OUYwOTJBMUI0OTg1QzMzNjJERDNGOEIzNzcyNDM2Q0IzMzc3NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWbGwBjof34S/MBC4QhxiJ50h
yRFLw9YE1nkgekgKiPZA/tgryRqTgFZhF3PW1MCDOurGPpHgusKnAaL+EpZKqT7k
x4ayxg37vcnAJPdq+44nXmuAq9c+8Ij5dBVD30tarP1V76dc86dcYZoPAY4uAy0b
nnGile/rVPs7Xjdhqx+4Ip5P9bHWSja5PArpc8jOVB7/9I6JebJEkne26jhIzYz4
KQr3K4T1/n5rv8+qRzP+ybUXeMHYlDnPomXyKm5oNtnoCphT+fDHOeDVSZGhpE2W
iNf1ZhmaOjG1SRn/c0qfgYGgOAWRDLGD8aSiIWLB+oclQDO6pMuc+mA3QDKdAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUyZ8JKhtJhcM2LdP4s3ckNsszd1UwHwYDVR0j
BBgwFoAUQlgOZH2WUjw069fY9rkSgYBNwnYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XOGI3OEZYdmtRV0F1aDE1Z2locHI5WFJybTNKQUU3YmpITWlaTDFEWXdB
LzAvNDI1ODBFNjQ3RDk2NTIzQzM0RUJEN0Q4RjZCOTEyODE4MDREQzI3Ni5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80MjU4MEU2NDdEOTY1MjNDMzRF
QkQ3RDhGNkI5MTI4MTgwNERDMjc2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
OGI3OEZYdmtRV0F1aDE1Z2locHI5WFJybTNKQUU3YmpITWlaTDFEWXdBLzAvMzQz
NTJlMzEzNjM1MmUzMTM4MzAyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM3MzEz
NTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAtpbQwDQYJKoZIhvcNAQELBQADggEBAKWzpj/rMeDZ
uW6yVZlgrunc+fBTugLpjevgZLrwRM0fcOb1veX0vklr4F7j98l8VfFuTnfrx+js
yFEeBlnwL/4Xvkg0gXJLzOK1lOMkfSj50exTfNACIJUxD0ytqG5yESlr9/HUYkvA
DT/G8fM62eXLMGAQhJjl+3MsY4BF25jGebaqu462ICm5Ri0pCwVwH60aKjCOqBTq
htOtMMZ0Znt90VmnRo6kPAOx/RKG/JgGyHK4jSd8233e0uYZbLvaSOwFtZV+BtTQ
hl5KMFZEjQFBGKW/a8gFBKP6+XNq5Io0XjuhqVoppgHBHhx4rGrP5D/I4iHauMa0
H4hs0bOVhhI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:55 2025 by rpki-client