Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36342e302f32322d3234203d3e20323637393436.roa
File:                     34352e3136362e36342e302f32322d3234203d3e20323637393436.roa (raw, json)
Hash identifier:          tCLSc118shGYXWPdy0cLkqqo1GQVGcivGk93ekpphW0=
Subject key identifier:   53:AF:3E:B4:E9:80:4A:AA:FC:30:AD:92:75:2B:CF:5D:9B:31:A0:7C
Certificate issuer:       /CN=AFE278875684A95688481FDA0240406D1EA7F004
Certificate serial:       3EC3F71FFFB92138765C126ACAAE7185482C62FB
Authority key identifier: AF:E2:78:87:56:84:A9:56:88:48:1F:DA:02:40:40:6D:1E:A7:F0:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE278875684A95688481FDA0240406D1EA7F004.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36342e302f32322d3234203d3e20323637393436.roa
Signing time:             Wed 29 Mar 2023 15:53:46 +0000
ROA not before:           Wed 29 Mar 2023 15:48:46 +0000
ROA not after:            Wed 27 Mar 2024 15:53:46 +0000
asID:                     267946
IP address blocks:        45.166.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c3:f7:1f:ff:b9:21:38:76:5c:12:6a:ca:ae:71:85:48:2c:62:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFE278875684A95688481FDA0240406D1EA7F004
        Validity
            Not Before: Mar 29 15:48:46 2023 GMT
            Not After : Mar 27 15:53:46 2024 GMT
        Subject: CN=53AF3EB4E9804AAAFC30AD92752BCF5D9B31A07C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:20:aa:e1:45:96:ea:d6:ae:9d:d4:e7:82:
                    e5:e6:0e:fe:67:20:d0:3d:04:f4:ed:49:53:4d:1a:
                    20:a4:43:b0:7e:8f:19:a3:a8:6b:b7:85:c0:dc:bb:
                    63:5e:04:68:22:c0:39:50:48:f3:5f:41:a9:38:bc:
                    9f:7f:94:9e:6c:f4:df:d1:94:a1:fd:0d:99:8a:eb:
                    b0:0d:fc:3a:88:9b:38:05:3f:4b:f1:71:49:4c:33:
                    7d:9a:78:a9:d0:19:83:b2:08:08:74:8b:bb:5b:5f:
                    3b:ba:52:b6:49:29:44:36:fe:78:2b:84:e8:8a:12:
                    ad:a2:62:5a:e0:33:92:dc:c0:67:c3:69:ca:be:62:
                    13:c7:6e:f1:b5:b7:3c:2b:7b:41:b4:32:e4:20:3c:
                    f2:23:8e:68:30:d9:4c:5d:7d:e3:7b:11:48:07:04:
                    ca:78:fa:07:0e:1d:62:6e:40:3b:bd:6a:76:5e:16:
                    40:03:da:c6:31:02:70:51:63:bf:e7:1a:d7:04:15:
                    44:b8:29:c9:4a:ed:93:27:9e:71:9d:a4:81:b5:60:
                    81:30:76:33:59:86:63:1c:e0:bc:c9:16:44:34:e1:
                    d0:f0:15:7c:ba:d9:94:fd:d7:6a:15:e8:b9:91:22:
                    84:f1:2c:73:8e:dd:a0:49:a6:4d:0c:ac:10:5d:97:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AF:3E:B4:E9:80:4A:AA:FC:30:AD:92:75:2B:CF:5D:9B:31:A0:7C
            X509v3 Authority Key Identifier:
                keyid:AF:E2:78:87:56:84:A9:56:88:48:1F:DA:02:40:40:6D:1E:A7:F0:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/AFE278875684A95688481FDA0240406D1EA7F004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE278875684A95688481FDA0240406D1EA7F004.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36342e302f32322d3234203d3e20323637393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:dd:e2:da:ea:b4:e3:e2:af:b4:61:38:da:1f:27:3a:c7:e2:
         08:80:31:e0:7b:9d:0d:e8:ae:ee:57:36:36:6c:22:79:03:3a:
         04:5f:4e:df:fe:98:a5:ba:f1:21:c0:d4:96:63:6f:18:63:20:
         78:00:75:d4:2e:52:a8:ce:06:4d:cb:a3:46:b6:30:12:79:4e:
         1a:ff:c5:9d:af:d9:2b:b9:6c:0f:05:14:83:08:9b:d6:25:ca:
         f6:bc:45:43:55:61:55:2e:32:2e:db:09:a7:bd:0a:4e:eb:44:
         b8:1c:05:ed:d1:16:50:5b:b4:c1:dd:92:f2:0d:d5:83:36:9a:
         22:76:57:81:35:07:70:d3:b8:78:bd:fa:9b:d4:68:10:05:c1:
         b0:98:f4:2a:38:1b:b7:ab:72:69:b2:ba:9f:70:32:2c:59:2e:
         24:a2:62:37:eb:78:99:04:21:e8:55:5e:1a:07:7c:88:e9:96:
         ab:fd:aa:91:50:ce:b4:68:f8:20:68:60:1a:5b:e2:26:39:67:
         dc:47:4a:c5:35:cf:15:10:74:18:85:21:f8:91:1b:86:96:31:
         3e:23:44:12:58:6d:1c:f8:24:25:3d:c9:8e:f0:72:96:3c:8c:
         04:d2:42:29:4d:18:23:a4:e7:9b:9f:2a:e6:0c:c4:7d:74:d7:
         bc:7b:c0:da
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUPsP3H/+5ITh2XBJqyq5xhUgsYvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZFMjc4ODc1Njg0QTk1Njg4NDgxRkRBMDI0MDQwNkQx
RUE3RjAwNDAeFw0yMzAzMjkxNTQ4NDZaFw0yNDAzMjcxNTUzNDZaMDMxMTAvBgNV
BAMTKDUzQUYzRUI0RTk4MDRBQUFGQzMwQUQ5Mjc1MkJDRjVEOUIzMUEwN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7SCq4UWW6taundTnguXmDv5n
INA9BPTtSVNNGiCkQ7B+jxmjqGu3hcDcu2NeBGgiwDlQSPNfQak4vJ9/lJ5s9N/R
lKH9DZmK67AN/DqImzgFP0vxcUlMM32aeKnQGYOyCAh0i7tbXzu6UrZJKUQ2/ngr
hOiKEq2iYlrgM5LcwGfDacq+YhPHbvG1tzwre0G0MuQgPPIjjmgw2UxdfeN7EUgH
BMp4+gcOHWJuQDu9anZeFkAD2sYxAnBRY7/nGtcEFUS4KclK7ZMnnnGdpIG1YIEw
djNZhmMc4LzJFkQ04dDwFXy62ZT912oV6LmRIoTxLHOO3aBJpk0MrBBdl2FpAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUU68+tOmASqr8MK2SdSvPXZsxoHwwHwYDVR0j
BBgwFoAUr+J4h1aEqVaISB/aAkBAbR6n8AQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94ZUhZV2hRR0o1TVBqRVp1WnRwWEF1WXQ0UzFia0pOTG9pWnkza29YbXNI
LzAvQUZFMjc4ODc1Njg0QTk1Njg4NDgxRkRBMDI0MDQwNkQxRUE3RjAwNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9BRkUyNzg4NzU2ODRBOTU2ODg0
ODFGREEwMjQwNDA2RDFFQTdGMDA0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
ZUhZV2hRR0o1TVBqRVp1WnRwWEF1WXQ0UzFia0pOTG9pWnkza29YbXNILzAvMzQz
NTJlMzEzNjM2MmUzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3Mzkz
NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCLaZAMA0GCSqGSIb3DQEBCwUAA4IBAQBg3eLa6rTj4q+0
YTjaHyc6x+IIgDHge50N6K7uVzY2bCJ5AzoEX07f/piluvEhwNSWY28YYyB4AHXU
LlKozgZNy6NGtjASeU4a/8Wdr9kruWwPBRSDCJvWJcr2vEVDVWFVLjIu2wmnvQpO
60S4HAXt0RZQW7TB3ZLyDdWDNpoidleBNQdw07h4vfqb1GgQBcGwmPQqOBu3q3Jp
srqfcDIsWS4komI363iZBCHoVV4aB3yI6Zar/aqRUM60aPggaGAaW+ImOWfcR0rF
Nc8VEHQYhSH4kRuGljE+I0QSWG0c+CQlPcmO8HKWPIwE0kIpTRgjpOebnyrmDMR9
dNe8e8Da
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:43 2025 by rpki-client