Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31392f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e31392f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          AB4CjqhRniQxeJA6hf7Jj6bGROgdVzFJgZeRGjFFQw4=
Subject key identifier:   B4:1F:F1:53:5A:3C:56:20:36:22:C6:A7:FB:DB:6A:71:45:AF:BE:99
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       3DD721E465B86719B8F3EF07AFD87EB5481C21D5
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31392f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:27:49 +0000
ROA not before:           Sun 11 Sep 2022 23:22:49 +0000
ROA not after:            Sun 10 Sep 2023 23:27:49 +0000
asID:                     267256
IP address blocks:        45.232.50.19/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d7:21:e4:65:b8:67:19:b8:f3:ef:07:af:d8:7e:b5:48:1c:21:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:22:49 2022 GMT
            Not After : Sep 10 23:27:49 2023 GMT
        Subject: CN=B41FF1535A3C56203622C6A7FBDB6A7145AFBE99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:73:47:0c:bc:01:2a:b4:75:60:9e:4d:7a:3a:
                    f6:91:34:c1:90:73:ea:a4:95:d2:1e:01:3b:28:18:
                    6e:22:8d:84:37:ec:80:cd:39:59:fa:b8:2f:1a:56:
                    41:1b:eb:06:59:f0:2b:8a:58:44:8b:98:e5:7f:0c:
                    c8:1a:3f:ef:4a:e3:19:67:0d:f7:f4:31:17:9b:f0:
                    64:d1:23:02:36:51:5d:fd:da:0b:f8:db:95:bc:07:
                    3c:b6:92:66:58:75:c2:10:79:39:7f:f5:0d:bc:30:
                    71:9e:ff:87:05:95:8e:94:51:fd:88:ba:86:83:17:
                    1c:37:64:00:d7:77:e2:0b:80:f9:59:cc:4a:7b:13:
                    d9:e8:5a:07:bd:07:1e:07:f2:8f:42:ac:bb:82:32:
                    1c:56:54:2b:4f:23:8f:7d:ed:d6:4f:db:dc:a1:f7:
                    9a:0b:f2:bd:0f:a9:39:6b:64:48:80:75:db:d5:4b:
                    f9:87:87:a1:14:12:ba:d5:e8:36:cb:97:1d:95:ef:
                    30:6a:48:63:a9:10:ea:ea:05:e0:93:4d:9c:62:db:
                    ea:d1:25:a7:69:fa:48:70:b8:fd:2a:69:61:1f:51:
                    4e:02:fc:a0:59:20:2c:3b:b7:6c:e7:a0:27:41:0e:
                    76:c1:31:c6:30:c5:7e:1c:39:07:b0:97:89:85:cb:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1F:F1:53:5A:3C:56:20:36:22:C6:A7:FB:DB:6A:71:45:AF:BE:99
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31392f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.19/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:33:90:5e:e5:69:7d:c2:44:c2:10:11:cf:71:d3:1d:cd:35:
         4a:07:1b:10:59:5d:24:1e:8a:97:e9:28:16:6f:2f:ee:6d:bc:
         0c:78:9f:1e:40:1b:00:3e:40:d1:4c:25:02:29:e3:28:ec:73:
         12:db:0e:d0:5b:21:2c:fb:bb:bf:b2:0e:8a:6c:24:92:6c:ee:
         c3:7d:61:55:7c:bf:4f:cf:89:ae:99:b5:b6:b1:63:ef:e8:84:
         a7:94:95:65:f1:7d:09:ec:37:66:81:09:20:00:39:b1:af:f5:
         31:62:18:79:70:5e:0b:51:cb:02:4b:c7:b0:5c:3f:91:89:ee:
         6f:b1:81:dc:3c:94:9a:4b:31:37:81:a3:25:40:43:dc:bd:13:
         32:ed:dd:bf:93:a8:37:b4:69:4b:ed:39:27:8d:cd:7f:f4:99:
         4c:a4:26:8d:da:2f:0d:b4:14:90:96:d8:59:67:47:e5:c1:40:
         59:6a:7a:98:32:21:74:a1:00:65:d6:38:8e:f4:15:aa:c5:1a:
         db:d6:bc:fb:2c:ef:da:4b:2e:47:b4:50:61:b5:91:1e:bf:9b:
         37:2d:c7:41:48:c9:48:88:7c:7a:a1:58:1f:fd:63:82:18:02:
         de:b8:d2:e0:77:2f:1b:09:9e:f1:55:19:21:51:92:0f:06:da:
         07:bd:cd:4b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPdch5GW4Zxm48+8Hr9h+tUgcIdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERDMzMwMUZDQkRFMkJBM0M0RDI5QUY1OERBNjE0NTA3
MkQxMDA2QjAeFw0yMjA5MTEyMzIyNDlaFw0yMzA5MTAyMzI3NDlaMDMxMTAvBgNV
BAMTKEI0MUZGMTUzNUEzQzU2MjAzNjIyQzZBN0ZCREI2QTcxNDVBRkJFOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvc0cMvAEqtHVgnk16OvaRNMGQ
c+qkldIeATsoGG4ijYQ37IDNOVn6uC8aVkEb6wZZ8CuKWESLmOV/DMgaP+9K4xln
Dff0MReb8GTRIwI2UV392gv425W8Bzy2kmZYdcIQeTl/9Q28MHGe/4cFlY6UUf2I
uoaDFxw3ZADXd+ILgPlZzEp7E9noWge9Bx4H8o9CrLuCMhxWVCtPI4997dZP29yh
95oL8r0PqTlrZEiAddvVS/mHh6EUErrV6DbLlx2V7zBqSGOpEOrqBeCTTZxi2+rR
Jadp+khwuP0qaWEfUU4C/KBZICw7t2znoCdBDnbBMcYwxX4cOQewl4mFy6wHAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUtB/xU1o8ViA2Isan+9tqcUWvvpkwHwYDVR0j
BBgwFoAUDcMwH8veK6PE0pr1jaYUUHLRAGswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC8wREMzMzAxRkNCREUyQkEzQzREMjlBRjU4REE2MTQ1MDcyRDEwMDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEQzMzMDFGQ0JERTJCQTND
NEQyOUFGNThEQTYxNDUwNzJEMTAwNkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzQzNTJlMzIzMzMyMmUzNTMwMmUzMTM5MmYzMzMyMmQzMzMyMjAzZDNlMjAzMjM2
MzczMjM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgABMAcDBQAt6DITMA0GCSqGSIb3DQEBCwUAA4IBAQCxM5Be
5Wl9wkTCEBHPcdMdzTVKBxsQWV0kHoqX6SgWby/ubbwMeJ8eQBsAPkDRTCUCKeMo
7HMS2w7QWyEs+7u/sg6KbCSSbO7DfWFVfL9Pz4mumbW2sWPv6ISnlJVl8X0J7Ddm
gQkgADmxr/UxYhh5cF4LUcsCS8ewXD+Rie5vsYHcPJSaSzE3gaMlQEPcvRMy7d2/
k6g3tGlL7Tknjc1/9JlMpCaN2i8NtBSQlthZZ0flwUBZanqYMiF0oQBl1jiO9BWq
xRrb1rz7LO/aSy5HtFBhtZEev5s3LcdBSMlIiHx6oVgf/WOCGALeuNLgdy8bCZ7x
VRkhUZIPBtoHvc1L
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:24 2025 by rpki-client