Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3234203d3e20323633333332.roa
File:                     34352e3137382e3230382e302f32322d3234203d3e20323633333332.roa (raw, json)
Hash identifier:          ROEwcs6t5sVgA1PxDofFidDHtRe6THnJmRMqOCfewjE=
Subject key identifier:   A7:7C:94:86:61:CC:F0:64:CC:89:7F:93:22:59:12:82:2B:4F:78:A9
Certificate issuer:       /CN=2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7
Certificate serial:       591724233F1C3B9EEA80B8CF856B229255B17AB4
Authority key identifier: 2E:D1:24:5F:F6:C4:F5:B8:0F:5F:20:6D:C7:AA:8F:A7:65:63:3A:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3234203d3e20323633333332.roa
Signing time:             Thu 20 Mar 2025 17:23:09 +0000
ROA not before:           Thu 20 Mar 2025 17:18:09 +0000
ROA not after:            Thu 19 Mar 2026 17:23:09 +0000
asID:                     263332
IP address blocks:        45.178.208.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:17:24:23:3f:1c:3b:9e:ea:80:b8:cf:85:6b:22:92:55:b1:7a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7
        Validity
            Not Before: Mar 20 17:18:09 2025 GMT
            Not After : Mar 19 17:23:09 2026 GMT
        Subject: CN=A77C948661CCF064CC897F93225912822B4F78A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a1:c0:01:db:e6:c1:f8:0a:b7:93:4a:e4:8d:
                    10:7b:33:d3:23:60:3f:56:de:32:cb:0d:93:a2:8b:
                    d0:a7:9a:08:c3:ed:76:36:3e:d5:81:55:9e:14:16:
                    91:27:e7:93:d5:42:76:fa:c8:da:45:d0:1d:97:e5:
                    e8:18:67:b9:2e:f8:e6:20:58:bb:9d:c2:b1:d8:9e:
                    b3:4f:95:a2:56:77:52:15:d6:6a:d8:eb:ce:54:85:
                    88:7f:57:00:b5:18:b3:9f:cb:23:37:6c:46:39:aa:
                    71:5b:90:74:eb:3e:ea:7a:38:2d:d1:96:7d:20:92:
                    92:dd:7f:bf:95:e6:e9:d0:d1:a8:6e:8b:d1:11:d1:
                    70:98:bb:92:9e:85:a1:20:5b:d0:22:e1:96:26:5d:
                    eb:be:35:fc:a8:cb:0e:31:fd:35:01:79:33:8e:9a:
                    21:4f:64:6e:9d:fd:79:44:9b:20:65:52:78:30:e6:
                    86:76:30:95:5f:93:7f:c6:dd:ea:18:73:16:37:69:
                    f3:b6:20:50:10:34:3a:9f:3f:8f:ff:1d:ee:ff:7a:
                    4d:5c:c2:d6:20:ab:b2:52:fd:16:96:aa:0e:03:72:
                    47:58:2f:18:6f:89:8d:dd:de:60:53:19:67:3c:8b:
                    58:e5:53:a5:cd:55:c5:40:86:2b:7d:cc:7b:ac:5a:
                    71:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7C:94:86:61:CC:F0:64:CC:89:7F:93:22:59:12:82:2B:4F:78:A9
            X509v3 Authority Key Identifier:
                keyid:2E:D1:24:5F:F6:C4:F5:B8:0F:5F:20:6D:C7:AA:8F:A7:65:63:3A:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3234203d3e20323633333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:27:a1:5f:49:10:0c:74:42:e2:e2:03:77:fd:6b:dc:c3:0a:
         7d:fb:1e:60:23:16:4f:d6:99:dc:d7:d3:37:a4:2d:e3:d6:b2:
         d9:bf:44:ac:ad:11:80:2c:a8:19:0c:75:39:ec:6d:63:4c:83:
         cf:2d:38:33:ce:4c:68:76:20:7a:20:e8:6a:e9:5d:4f:c3:fc:
         bb:2d:5c:a5:4d:5a:d2:86:69:52:c0:26:cb:f8:cd:cb:14:e6:
         36:86:3a:e8:26:b2:c1:8c:1c:0a:c1:3f:ec:ce:80:d4:8c:e2:
         63:b2:6a:2f:97:fc:c1:87:8a:92:6a:67:e0:b7:48:79:4e:0a:
         4f:e4:a4:7a:22:c0:c8:a7:87:72:d1:80:6a:81:66:7b:73:eb:
         93:50:0f:e3:98:aa:a6:04:66:24:5b:33:38:55:31:90:7a:a3:
         50:96:4e:d6:1d:a5:a0:e6:35:7a:a4:ad:c2:cd:8c:8b:89:0e:
         19:8f:81:e0:45:3f:53:07:f4:5c:ca:f7:73:fb:9d:50:fc:34:
         f3:c3:de:55:cf:70:6a:2a:07:ea:0b:c6:36:18:a9:db:39:61:
         33:47:2d:e9:f5:55:b2:c9:68:05:82:2f:32:40:68:c5:00:4c:
         6b:a5:1b:5e:14:8d:86:10:3f:1d:1f:28:11:5d:88:4c:59:bf:
         8c:d4:ed:e5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWRckIz8cO57qgLjPhWsiklWxerQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVEMTI0NUZGNkM0RjVCODBGNUYyMDZEQzdBQThGQTc2
NTYzM0FDNzAeFw0yNTAzMjAxNzE4MDlaFw0yNjAzMTkxNzIzMDlaMDMxMTAvBgNV
BAMTKEE3N0M5NDg2NjFDQ0YwNjRDQzg5N0Y5MzIyNTkxMjgyMkI0Rjc4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLocAB2+bB+Aq3k0rkjRB7M9Mj
YD9W3jLLDZOii9CnmgjD7XY2PtWBVZ4UFpEn55PVQnb6yNpF0B2X5egYZ7ku+OYg
WLudwrHYnrNPlaJWd1IV1mrY685UhYh/VwC1GLOfyyM3bEY5qnFbkHTrPup6OC3R
ln0gkpLdf7+V5unQ0ahui9ER0XCYu5KehaEgW9Ai4ZYmXeu+Nfyoyw4x/TUBeTOO
miFPZG6d/XlEmyBlUngw5oZ2MJVfk3/G3eoYcxY3afO2IFAQNDqfP4//He7/ek1c
wtYgq7JS/RaWqg4DckdYLxhviY3d3mBTGWc8i1jlU6XNVcVAhit9zHusWnFLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUp3yUhmHM8GTMiX+TIlkSgitPeKkwHwYDVR0j
BBgwFoAULtEkX/bE9bgPXyBtx6qPp2VjOscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm40NFZKU2F5RzJDZmcxdGNxMVdEZWNKYjliVlZ6aXZ3QnBFNUdQa042
ZWovMC8yRUQxMjQ1RkY2QzRGNUI4MEY1RjIwNkRDN0FBOEZBNzY1NjMzQUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRDEyNDVGRjZDNEY1Qjgw
RjVGMjA2REM3QUE4RkE3NjU2MzNBQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuNDRWSlNheUcyQ2ZnMXRjcTFXRGVjSmI5YlZWeml2d0JwRTVHUGtONmVqLzAv
MzQzNTJlMzEzNzM4MmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItstAwDQYJKoZIhvcNAQELBQADggEBADgnoV9J
EAx0QuLiA3f9a9zDCn37HmAjFk/WmdzX0zekLePWstm/RKytEYAsqBkMdTnsbWNM
g88tODPOTGh2IHog6GrpXU/D/LstXKVNWtKGaVLAJsv4zcsU5jaGOugmssGMHArB
P+zOgNSM4mOyai+X/MGHipJqZ+C3SHlOCk/kpHoiwMinh3LRgGqBZntz65NQD+OY
qqYEZiRbMzhVMZB6o1CWTtYdpaDmNXqkrcLNjIuJDhmPgeBFP1MH9FzK93P7nVD8
NPPD3lXPcGoqB+oLxjYYqds5YTNHLen1VbLJaAWCLzJAaMUATGulG14UjYYQPx0f
KBFdiExZv4zU7eU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:25:59 2025 by rpki-client