Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136302e302f32332d3233203d3e20323639373234.roa
File:                     34352e3138392e3136302e302f32332d3233203d3e20323639373234.roa (raw, json)
Hash identifier:          +K+VLU6Ok6CXcmo2UL5rePvQoRUYBPBjir3kobrqexI=
Subject key identifier:   93:C4:F5:51:F8:04:CF:BC:10:3E:07:0E:DB:5D:EC:B3:BF:52:D3:E3
Certificate issuer:       /CN=E4D6F69AC5581A8F3760E52E48C0A165A0463D57
Certificate serial:       48BB9C187203CF961DAD811A46F447CFC7FAA6E6
Authority key identifier: E4:D6:F6:9A:C5:58:1A:8F:37:60:E5:2E:48:C0:A1:65:A0:46:3D:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136302e302f32332d3233203d3e20323639373234.roa
Signing time:             Tue 04 Feb 2025 19:47:55 +0000
ROA not before:           Tue 04 Feb 2025 19:42:55 +0000
ROA not after:            Tue 03 Feb 2026 19:47:55 +0000
asID:                     269724
IP address blocks:        45.189.160.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bb:9c:18:72:03:cf:96:1d:ad:81:1a:46:f4:47:cf:c7:fa:a6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D6F69AC5581A8F3760E52E48C0A165A0463D57
        Validity
            Not Before: Feb  4 19:42:55 2025 GMT
            Not After : Feb  3 19:47:55 2026 GMT
        Subject: CN=93C4F551F804CFBC103E070EDB5DECB3BF52D3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:21:39:29:a9:85:ab:4f:e7:21:9e:64:c9:
                    3c:a9:00:30:c7:9f:09:8b:69:73:54:b4:91:3e:d0:
                    c0:9c:eb:1c:49:68:f2:b4:2c:fc:f4:9f:49:b0:d9:
                    da:d9:fc:40:06:fe:ce:4b:1a:e2:82:65:ea:da:a9:
                    35:79:42:47:04:03:16:fe:10:92:2b:60:55:c9:f7:
                    35:b6:5b:07:44:02:ef:ca:fc:7c:a1:18:b9:ee:eb:
                    95:14:7f:69:d0:2b:08:8f:6d:0e:ed:b9:e9:e1:97:
                    66:81:af:8f:40:6c:d1:92:b8:0c:c4:0c:4b:72:5d:
                    a0:56:c8:5d:54:ab:1c:f1:7c:df:a7:5b:69:aa:d0:
                    4e:0a:15:54:6c:67:7f:0f:1e:f5:7c:1f:f0:1a:06:
                    92:96:a5:12:e9:69:51:0d:40:99:63:bf:56:f4:70:
                    18:91:c7:37:0d:bf:03:92:14:12:00:d2:33:6e:41:
                    41:c2:e9:70:ed:c0:8b:78:d2:8b:59:da:20:24:f5:
                    c1:67:2b:66:a1:53:f4:53:f0:1d:a1:e7:d8:b6:cf:
                    30:00:87:64:be:64:7a:cf:93:5d:7c:bc:14:4b:0b:
                    44:25:f1:b7:cf:09:2f:4b:60:9f:00:64:9e:f0:03:
                    69:49:fb:49:c6:42:9b:44:84:c2:a1:96:8f:23:37:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C4:F5:51:F8:04:CF:BC:10:3E:07:0E:DB:5D:EC:B3:BF:52:D3:E3
            X509v3 Authority Key Identifier:
                keyid:E4:D6:F6:9A:C5:58:1A:8F:37:60:E5:2E:48:C0:A1:65:A0:46:3D:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136302e302f32332d3233203d3e20323639373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:56:c6:c6:d7:03:35:e5:28:57:0d:7c:9d:3d:f2:fc:c7:9f:
         c3:fd:13:f6:78:cb:08:a2:0f:9e:c8:6e:e8:d3:0d:e8:3c:07:
         00:3b:91:53:28:e0:5a:8c:e3:0b:7f:89:dc:19:e5:96:5f:c5:
         91:75:98:bd:60:5c:0e:3f:7e:f9:0a:7f:c2:6c:c0:05:e9:42:
         32:b4:75:f8:29:7e:4e:ce:63:01:de:5a:e6:ff:49:fd:e0:0b:
         ab:ee:58:74:7a:68:8c:8d:62:a8:81:ae:65:c3:45:df:7c:43:
         d0:7c:9d:b8:4e:78:3b:ad:7a:83:e3:27:26:04:67:b4:a1:15:
         a7:7f:55:92:73:3d:83:29:75:6c:a8:c4:97:ea:b5:23:04:d0:
         bd:d0:50:71:96:21:cf:c5:28:45:de:05:8d:65:56:8e:0e:04:
         2f:85:92:0f:97:ba:4b:4e:43:f0:71:4b:8c:6a:97:3c:8d:ac:
         a2:93:38:72:a2:62:68:d5:63:ad:f3:c9:38:8a:67:fe:eb:20:
         c1:39:93:71:7f:af:1f:7d:55:60:bd:d9:61:0d:0b:14:21:14:
         53:60:b9:73:56:b5:30:07:83:2c:d3:ce:09:05:2d:9f:b3:ed:
         f6:df:27:7f:53:25:71:d5:cd:f9:8d:3e:48:08:e2:7b:2b:d0:
         e9:11:08:b6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSLucGHIDz5YdrYEaRvRHz8f6puYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRENkY2OUFDNTU4MUE4RjM3NjBFNTJFNDhDMEExNjVB
MDQ2M0Q1NzAeFw0yNTAyMDQxOTQyNTVaFw0yNjAyMDMxOTQ3NTVaMDMxMTAvBgNV
BAMTKDkzQzRGNTUxRjgwNENGQkMxMDNFMDcwRURCNURFQ0IzQkY1MkQzRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86iE5KamFq0/nIZ5kyTypADDH
nwmLaXNUtJE+0MCc6xxJaPK0LPz0n0mw2drZ/EAG/s5LGuKCZeraqTV5QkcEAxb+
EJIrYFXJ9zW2WwdEAu/K/HyhGLnu65UUf2nQKwiPbQ7tuenhl2aBr49AbNGSuAzE
DEtyXaBWyF1UqxzxfN+nW2mq0E4KFVRsZ38PHvV8H/AaBpKWpRLpaVENQJljv1b0
cBiRxzcNvwOSFBIA0jNuQUHC6XDtwIt40otZ2iAk9cFnK2ahU/RT8B2h59i2zzAA
h2S+ZHrPk118vBRLC0Ql8bfPCS9LYJ8AZJ7wA2lJ+0nGQptEhMKhlo8jNzm5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUk8T1UfgEz7wQPgcO213ss79S0+MwHwYDVR0j
BBgwFoAU5Nb2msVYGo83YOUuSMChZaBGPVcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3oyWENhSngzRjZyZE05YkJ2YWlMZloxeXE3ZXhGcjNES0VveVFtN3Zh
dlMvMC9FNEQ2RjY5QUM1NTgxQThGMzc2MEU1MkU0OEMwQTE2NUEwNDYzRDU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0RDZGNjlBQzU1ODFBOEYz
NzYwRTUyRTQ4QzBBMTY1QTA0NjNENTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN6MlhDYUp4M0Y2cmRNOWJCdmFpTGZaMXlxN2V4RnIzREtFb3lRbTd2YXZTLzAv
MzQzNTJlMzEzODM5MmUzMTM2MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtvaAwDQYJKoZIhvcNAQELBQADggEBACRWxsbX
AzXlKFcNfJ098vzHn8P9E/Z4ywiiD57IbujTDeg8BwA7kVMo4FqM4wt/idwZ5ZZf
xZF1mL1gXA4/fvkKf8JswAXpQjK0dfgpfk7OYwHeWub/Sf3gC6vuWHR6aIyNYqiB
rmXDRd98Q9B8nbhOeDuteoPjJyYEZ7ShFad/VZJzPYMpdWyoxJfqtSME0L3QUHGW
Ic/FKEXeBY1lVo4OBC+Fkg+XuktOQ/BxS4xqlzyNrKKTOHKiYmjVY63zyTiKZ/7r
IME5k3F/rx99VWC92WENCxQhFFNguXNWtTAHgyzTzgkFLZ+z7fbfJ39TJXHVzfmN
PkgI4nsr0OkRCLY=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:42 2025 by rpki-client