Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3131302e302f32332d3233203d3e20323636393131.roa
File:                     34352e3232342e3131302e302f32332d3233203d3e20323636393131.roa (raw, json)
Hash identifier:          3YZWc4v07BV9shr/HY+hsvvDY5rPHie+V7SLuLYSvvg=
Subject key identifier:   98:EA:41:83:49:4D:5C:52:AE:E1:CB:62:68:0A:48:48:77:AC:74:1A
Certificate issuer:       /CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Certificate serial:       33D9266A46B1E23E6E2C2DBD146D6B6DA3938783
Authority key identifier: 29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3131302e302f32332d3233203d3e20323636393131.roa
Signing time:             Wed 16 Aug 2023 13:47:57 +0000
ROA not before:           Wed 16 Aug 2023 13:42:57 +0000
ROA not after:            Wed 14 Aug 2024 13:47:57 +0000
asID:                     266911
IP address blocks:        45.224.110.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d9:26:6a:46:b1:e2:3e:6e:2c:2d:bd:14:6d:6b:6d:a3:93:87:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
        Validity
            Not Before: Aug 16 13:42:57 2023 GMT
            Not After : Aug 14 13:47:57 2024 GMT
        Subject: CN=98EA4183494D5C52AEE1CB62680A484877AC741A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:0c:ec:56:86:7d:d4:05:9d:b3:7d:0f:b3:
                    38:5a:05:92:6e:e0:af:ef:df:a3:1a:d6:52:9b:97:
                    ec:06:74:f7:13:22:1f:d2:18:28:49:7d:58:87:bf:
                    ac:b8:ff:74:29:43:7b:b1:6d:08:6c:cc:4a:05:e4:
                    c4:3b:59:60:24:74:7b:12:c0:21:df:5e:40:88:df:
                    26:42:74:7f:ab:8a:aa:95:24:b9:94:ee:42:f9:1d:
                    81:e7:2e:06:19:29:4d:06:51:66:3d:1a:c9:c8:2f:
                    88:dc:af:63:a1:74:31:bb:4b:8e:8e:d6:7c:0d:a0:
                    70:ea:eb:b3:e6:13:c9:61:c7:4e:ee:53:9e:01:9f:
                    e3:54:ce:5c:c7:b8:c1:96:d4:61:b1:d1:69:bb:32:
                    26:a7:eb:bf:b1:d9:33:5e:eb:79:e2:4b:d0:da:80:
                    9e:d0:65:b8:33:00:92:29:95:09:7b:24:ef:d8:68:
                    59:e3:bc:a9:68:ee:b7:fe:7e:6c:77:10:e0:e7:2c:
                    8b:dd:d7:f5:fd:9b:a9:44:19:26:18:2b:06:d3:53:
                    a3:6b:2c:33:cc:9c:06:3f:f5:42:4e:de:57:b0:f7:
                    dd:3d:a5:ab:a6:61:46:e7:48:79:9a:2f:1b:11:f5:
                    45:0e:0f:5f:2e:7a:63:5f:4a:34:48:20:3f:5a:1f:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EA:41:83:49:4D:5C:52:AE:E1:CB:62:68:0A:48:48:77:AC:74:1A
            X509v3 Authority Key Identifier:
                keyid:29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/34352e3232342e3131302e302f32332d3233203d3e20323636393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:5c:05:f2:9d:80:51:b6:ab:08:2a:2a:c5:c9:34:60:10:6a:
         95:11:fb:17:3e:9d:4c:71:7c:73:fa:35:a6:8a:c4:cb:21:08:
         01:6d:f5:66:63:c5:2c:45:ce:8f:75:6c:91:a8:39:26:eb:a3:
         fa:50:8a:2b:b1:aa:10:f9:61:5d:95:8b:9e:0e:50:0a:9e:16:
         4d:79:54:09:cf:79:78:56:ca:dd:83:08:e2:16:95:21:a4:15:
         a9:eb:36:6d:f3:00:a3:98:78:ce:14:4b:62:98:9b:45:cd:38:
         28:35:b4:07:0d:96:3b:e1:fe:32:2a:4d:5a:d6:10:47:d5:b5:
         58:cb:29:ba:be:f5:85:4a:df:4a:25:10:50:a4:9d:49:f5:ba:
         0f:16:82:7e:47:ae:22:6a:c6:35:32:ea:7e:a6:f6:b7:95:ce:
         0a:ec:e4:05:31:b1:ac:de:3a:82:36:cc:38:97:8a:57:96:ed:
         e6:eb:97:4c:76:01:3f:49:c8:a6:de:a1:56:78:9f:bb:67:cf:
         15:27:8a:4f:35:b6:bf:ed:69:e5:c5:7f:d6:67:34:69:d8:26:
         76:2a:bb:0a:96:7c:c1:1c:d1:5d:b4:e5:dc:10:9f:fb:51:de:
         84:72:57:40:d6:0c:fd:97:e2:cc:cd:4d:8b:2c:c3:1a:9b:f1:
         20:db:08:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM9kmakax4j5uLC29FG1rbaOTh4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk3MEEzNkIwRDQzMDUwMkE1Njk1NTRGRTRGODVFNzM1
MDhFQTdDRjAeFw0yMzA4MTYxMzQyNTdaFw0yNDA4MTQxMzQ3NTdaMDMxMTAvBgNV
BAMTKDk4RUE0MTgzNDk0RDVDNTJBRUUxQ0I2MjY4MEE0ODQ4NzdBQzc0MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8QzsVoZ91AWds30PszhaBZJu
4K/v36Ma1lKbl+wGdPcTIh/SGChJfViHv6y4/3QpQ3uxbQhszEoF5MQ7WWAkdHsS
wCHfXkCI3yZCdH+riqqVJLmU7kL5HYHnLgYZKU0GUWY9GsnIL4jcr2OhdDG7S46O
1nwNoHDq67PmE8lhx07uU54Bn+NUzlzHuMGW1GGx0Wm7Mian67+x2TNe63niS9Da
gJ7QZbgzAJIplQl7JO/YaFnjvKlo7rf+fmx3EODnLIvd1/X9m6lEGSYYKwbTU6Nr
LDPMnAY/9UJO3lew9909paumYUbnSHmaLxsR9UUOD18uemNfSjRIID9aH8LJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmOpBg0lNXFKu4ctiaApISHesdBowHwYDVR0j
BBgwFoAUKXCjaw1DBQKlaVVP5Phec1COp88wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2g5NzZaYlJZY1RUaWVTdWVWQ0FDRkxHRG1SRUREM0N4aGpDSFFUTGVR
WHcvMC8yOTcwQTM2QjBENDMwNTAyQTU2OTU1NEZFNEY4NUU3MzUwOEVBN0NGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI5NzBBMzZCMEQ0MzA1MDJB
NTY5NTU0RkU0Rjg1RTczNTA4RUE3Q0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNoOTc2WmJSWWNUVGllU3VlVkNBQ0ZMR0RtUkVERDNDeGhqQ0hRVExlUVh3LzAv
MzQzNTJlMzIzMjM0MmUzMTMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzOTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt4G4wDQYJKoZIhvcNAQELBQADggEBAH9cBfKd
gFG2qwgqKsXJNGAQapUR+xc+nUxxfHP6NaaKxMshCAFt9WZjxSxFzo91bJGoOSbr
o/pQiiuxqhD5YV2Vi54OUAqeFk15VAnPeXhWyt2DCOIWlSGkFanrNm3zAKOYeM4U
S2KYm0XNOCg1tAcNljvh/jIqTVrWEEfVtVjLKbq+9YVK30olEFCknUn1ug8Wgn5H
riJqxjUy6n6m9reVzgrs5AUxsazeOoI2zDiXileW7ebrl0x2AT9JyKbeoVZ4n7tn
zxUnik81tr/taeXFf9ZnNGnYJnYquwqWfMEc0V205dwQn/tR3oRyV0DWDP2X4szN
TYsswxqb8SDbCKI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:25:21 2025 by rpki-client