Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa
File:                     34352e3136352e39322e302f32322d3234203d3e20323638363831.roa (raw, json)
Hash identifier:          e42qa4ZirzmViW/mg4s2WzUMylsRuYScINGVfvZMrjA=
Subject key identifier:   DB:A3:06:85:80:14:2E:15:79:57:D9:90:A2:9E:02:82:E4:7E:13:9B
Certificate issuer:       /CN=9EDB0501E421814D3BCB6680196107A93F0BE76B
Certificate serial:       7A63EAE9C7EFE9B0B3279E8B94614FEC1E2F7103
Authority key identifier: 9E:DB:05:01:E4:21:81:4D:3B:CB:66:80:19:61:07:A9:3F:0B:E7:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EDB0501E421814D3BCB6680196107A93F0BE76B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa
Signing time:             Tue 29 Aug 2023 03:00:32 +0000
ROA not before:           Tue 29 Aug 2023 02:55:32 +0000
ROA not after:            Tue 27 Aug 2024 03:00:32 +0000
asID:                     268681
IP address blocks:        45.165.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:63:ea:e9:c7:ef:e9:b0:b3:27:9e:8b:94:61:4f:ec:1e:2f:71:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDB0501E421814D3BCB6680196107A93F0BE76B
        Validity
            Not Before: Aug 29 02:55:32 2023 GMT
            Not After : Aug 27 03:00:32 2024 GMT
        Subject: CN=DBA3068580142E157957D990A29E0282E47E139B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:66:78:a1:fa:f8:d3:58:c1:22:f6:3e:7b:
                    09:fd:9d:de:48:96:12:d6:93:ad:8f:15:de:88:5e:
                    bd:76:7b:5b:7d:35:ab:e3:c6:91:7b:f1:04:36:9a:
                    ea:e7:9d:e5:f7:81:13:ee:eb:8e:a2:5f:14:85:3f:
                    18:e7:bc:ba:06:ec:c0:45:30:7e:11:c3:0b:ef:42:
                    83:38:17:90:9d:9e:7b:25:25:d2:00:aa:55:37:17:
                    0d:dd:73:03:b3:8e:15:30:22:01:44:30:80:91:1e:
                    56:1e:60:e2:f3:98:b9:fe:30:b7:ba:c2:fb:fd:98:
                    9c:e8:2f:a4:e7:73:b7:c0:f3:5f:5b:58:15:be:1c:
                    e9:e5:9c:68:ca:52:fb:8a:a8:bd:8d:0a:e9:16:99:
                    36:af:20:d6:8d:05:e3:07:95:bb:24:81:16:39:fe:
                    21:bd:a7:15:4d:b2:e0:f3:59:a3:34:b7:ba:e9:8b:
                    32:15:23:8c:56:8d:8e:f4:2d:9d:e0:17:f9:4c:a7:
                    c7:2a:0a:b1:88:04:8d:48:37:84:36:2b:bc:df:a5:
                    1f:48:87:a5:17:fb:99:ae:4c:85:54:84:3a:ab:c2:
                    07:43:37:fd:6d:d2:7c:a4:e5:34:de:24:c3:3f:be:
                    79:9a:29:79:0b:79:68:43:c1:37:aa:93:a0:d0:f6:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A3:06:85:80:14:2E:15:79:57:D9:90:A2:9E:02:82:E4:7E:13:9B
            X509v3 Authority Key Identifier:
                keyid:9E:DB:05:01:E4:21:81:4D:3B:CB:66:80:19:61:07:A9:3F:0B:E7:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1/9EDB0501E421814D3BCB6680196107A93F0BE76B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EDB0501E421814D3BCB6680196107A93F0BE76B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:8b:b1:64:06:28:ff:77:ef:b9:14:14:5a:e8:91:9d:be:
         de:f5:d0:5c:fd:26:f8:71:7e:b0:e9:66:41:47:6d:5b:f1:c8:
         2e:cb:be:dc:30:07:1b:5e:34:b7:62:4e:44:d2:3e:74:28:e1:
         ca:e8:90:10:d6:06:28:7f:01:39:40:2f:4c:14:7f:87:f4:05:
         48:f9:e0:5e:82:75:2c:2b:d9:e2:56:96:62:1a:66:11:75:a6:
         2b:d2:bd:c8:06:31:d0:16:b2:63:42:0f:de:85:c4:3a:1a:40:
         13:3c:e5:ac:f6:14:a8:29:d9:5e:a6:f7:a7:48:61:68:1e:fc:
         3f:3c:23:2e:77:40:88:ad:07:99:dd:c6:25:37:e3:18:fe:8a:
         6e:ce:86:a8:2a:28:b3:0d:b4:b7:19:3a:06:6b:69:15:0c:ee:
         7a:6f:1a:5c:ac:c2:ff:a8:94:68:57:29:15:84:85:67:91:0d:
         58:d5:04:9a:e9:57:4d:19:f1:67:d1:48:6f:41:65:e4:a9:c8:
         ec:03:e8:f2:32:14:22:aa:c2:ea:e4:3f:7c:c7:6c:c5:22:4f:
         de:b6:31:94:f8:92:cb:ea:4a:ab:27:18:f7:8d:79:95:b0:27:
         99:e5:5a:8c:6b:8b:f0:bf:6c:a0:a2:f4:6b:47:65:b0:8c:dd:
         54:92:30:42
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUemPq6cfv6bCzJ56LlGFP7B4vcQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVEQjA1MDFFNDIxODE0RDNCQ0I2NjgwMTk2MTA3QTkz
RjBCRTc2QjAeFw0yMzA4MjkwMjU1MzJaFw0yNDA4MjcwMzAwMzJaMDMxMTAvBgNV
BAMTKERCQTMwNjg1ODAxNDJFMTU3OTU3RDk5MEEyOUUwMjgyRTQ3RTEzOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWWZ4ofr401jBIvY+ewn9nd5I
lhLWk62PFd6IXr12e1t9NavjxpF78QQ2murnneX3gRPu646iXxSFPxjnvLoG7MBF
MH4RwwvvQoM4F5CdnnslJdIAqlU3Fw3dcwOzjhUwIgFEMICRHlYeYOLzmLn+MLe6
wvv9mJzoL6Tnc7fA819bWBW+HOnlnGjKUvuKqL2NCukWmTavINaNBeMHlbskgRY5
/iG9pxVNsuDzWaM0t7rpizIVI4xWjY70LZ3gF/lMp8cqCrGIBI1IN4Q2K7zfpR9I
h6UX+5muTIVUhDqrwgdDN/1t0nyk5TTeJMM/vnmaKXkLeWhDwTeqk6DQ9jJJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU26MGhYAULhV5V9mQop4CguR+E5swHwYDVR0j
BBgwFoAUntsFAeQhgU07y2aAGWEHqT8L52swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFU
SGMvMS85RURCMDUwMUU0MjE4MTREM0JDQjY2ODAxOTYxMDdBOTNGMEJFNzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFREIwNTAxRTQyMTgxNEQz
QkNCNjY4MDE5NjEwN0E5M0YwQkU3NkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDTXNZUUVNNFFRdVRjQUtrQVNyZVRHdVR4THpieGZrY1pvYVJndkZBVEhjLzEv
MzQzNTJlMzEzNjM1MmUzOTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzYzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaVcMA0GCSqGSIb3DQEBCwUAA4IBAQB6gouxZAYo
/3fvuRQUWuiRnb7e9dBc/Sb4cX6w6WZBR21b8cguy77cMAcbXjS3Yk5E0j50KOHK
6JAQ1gYofwE5QC9MFH+H9AVI+eBegnUsK9niVpZiGmYRdaYr0r3IBjHQFrJjQg/e
hcQ6GkATPOWs9hSoKdlepvenSGFoHvw/PCMud0CIrQeZ3cYlN+MY/opuzoaoKiiz
DbS3GToGa2kVDO56bxpcrML/qJRoVykVhIVnkQ1Y1QSa6VdNGfFn0UhvQWXkqcjs
A+jyMhQiqsLq5D98x2zFIk/etjGU+JLL6kqrJxj3jXmVsCeZ5VqMa4vwv2ygovRr
R2WwjN1UkjBC
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:54 2025 by rpki-client