Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32322e302f32342d3332203d3e20323638353038.roa
File:                     34352e3136322e32322e302f32342d3332203d3e20323638353038.roa (raw, json)
Hash identifier:          svBzBtbvPzlx29lkGe67Amwl9jxH/AqRrJ6/cVWixSQ=
Subject key identifier:   E0:F8:D0:A0:F0:E6:58:E7:01:F6:9D:F0:6A:C8:23:2C:03:DA:AF:86
Certificate issuer:       /CN=164DB9886FABFAACFA1B8CEEC56D114EF023AF83
Certificate serial:       6F329EE6B268465EE5EE8D3E54E44C8524C6E110
Authority key identifier: 16:4D:B9:88:6F:AB:FA:AC:FA:1B:8C:EE:C5:6D:11:4E:F0:23:AF:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/164DB9886FABFAACFA1B8CEEC56D114EF023AF83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32322e302f32342d3332203d3e20323638353038.roa
Signing time:             Sat 13 May 2023 11:39:47 +0000
ROA not before:           Sat 13 May 2023 11:34:47 +0000
ROA not after:            Sat 11 May 2024 11:39:47 +0000
asID:                     268508
IP address blocks:        45.162.22.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:32:9e:e6:b2:68:46:5e:e5:ee:8d:3e:54:e4:4c:85:24:c6:e1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164DB9886FABFAACFA1B8CEEC56D114EF023AF83
        Validity
            Not Before: May 13 11:34:47 2023 GMT
            Not After : May 11 11:39:47 2024 GMT
        Subject: CN=E0F8D0A0F0E658E701F69DF06AC8232C03DAAF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ce:3d:59:77:43:5c:3c:c6:e0:d8:fb:a7:94:
                    e2:ea:b1:9b:7f:47:75:cb:b7:d6:b7:27:63:07:a0:
                    c1:3b:98:14:37:07:8d:f0:c6:cd:7c:c2:33:e7:4a:
                    52:55:b3:35:78:37:98:cd:0b:b5:96:9a:a2:4b:00:
                    af:39:ba:f7:d9:63:16:d1:9c:12:94:85:92:b1:a6:
                    db:51:49:86:1a:04:48:a5:87:52:9d:b5:c4:7c:2c:
                    bd:80:24:35:9d:06:bb:35:f3:29:e4:5b:31:b8:05:
                    52:62:f6:d4:4f:83:4a:5d:ac:5c:9b:ed:6d:57:05:
                    90:db:24:9d:a0:95:a4:8a:49:a0:35:ab:17:c7:6c:
                    ce:cc:c6:3d:f6:0e:f2:d9:5d:e7:c7:09:ce:9b:00:
                    12:f1:4f:69:91:55:9c:83:29:66:26:98:b8:17:50:
                    ed:be:f6:0d:cd:a2:c4:2f:5d:b7:f1:15:b1:2c:c6:
                    b7:da:ad:06:54:53:7f:7d:cf:7c:8f:5c:48:fa:d9:
                    80:cf:ec:00:15:f2:61:2c:1a:74:95:53:8e:2e:51:
                    78:4d:dd:9b:3b:93:c6:4e:f3:f7:8e:24:90:55:b6:
                    e3:ee:d8:d5:86:d5:7c:0a:07:64:f5:23:42:01:f6:
                    2d:3a:8c:2d:f6:23:c5:0a:04:7c:ea:c0:57:76:24:
                    a2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F8:D0:A0:F0:E6:58:E7:01:F6:9D:F0:6A:C8:23:2C:03:DA:AF:86
            X509v3 Authority Key Identifier:
                keyid:16:4D:B9:88:6F:AB:FA:AC:FA:1B:8C:EE:C5:6D:11:4E:F0:23:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/164DB9886FABFAACFA1B8CEEC56D114EF023AF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/164DB9886FABFAACFA1B8CEEC56D114EF023AF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32322e302f32342d3332203d3e20323638353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:5e:5a:cc:19:41:26:e6:0a:02:89:77:5e:7a:6f:e3:fc:80:
         a7:a9:b1:56:cf:8e:e3:fd:82:34:c9:69:36:0f:9b:aa:b8:17:
         c3:4c:43:1f:62:2f:0e:85:32:cd:53:ec:59:93:1f:b9:57:6b:
         b0:19:fe:e3:21:95:c1:79:e7:32:5e:53:f1:b0:d5:57:82:88:
         d3:a9:f1:7e:61:2d:3f:a2:a7:9f:b6:3f:58:32:de:0a:4d:af:
         6a:91:35:e7:dc:e2:94:8d:fb:a9:20:56:9b:44:26:2e:1c:b9:
         de:ef:d9:a3:b7:66:7e:fe:26:3f:39:72:93:2f:ab:09:c4:e0:
         ce:f9:00:e6:ff:60:75:d3:bf:ef:3a:ec:97:fd:40:b1:4d:f7:
         5d:62:bf:8f:09:7f:3f:c7:f8:c7:30:27:c8:2e:48:b1:8f:61:
         d0:fe:ec:8b:dd:ff:57:c9:51:98:f6:87:39:0d:b3:0c:fc:cc:
         b5:82:de:39:80:23:9b:0d:9c:50:f4:0c:44:dd:30:65:ac:8d:
         6e:87:b5:30:b3:62:a8:51:dc:55:74:a3:83:c1:d9:5a:85:7c:
         1c:f6:23:6c:b8:4c:10:48:88:d7:b7:04:82:6a:6a:a7:b0:ad:
         cb:29:58:96:da:de:f5:27:7f:fd:3b:c5:6f:a1:14:eb:e6:d2:
         7d:24:9b:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbzKe5rJoRl7l7o0+VORMhSTG4RAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0REI5ODg2RkFCRkFBQ0ZBMUI4Q0VFQzU2RDExNEVG
MDIzQUY4MzAeFw0yMzA1MTMxMTM0NDdaFw0yNDA1MTExMTM5NDdaMDMxMTAvBgNV
BAMTKEUwRjhEMEEwRjBFNjU4RTcwMUY2OURGMDZBQzgyMzJDMDNEQUFGODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzj1Zd0NcPMbg2PunlOLqsZt/
R3XLt9a3J2MHoME7mBQ3B43wxs18wjPnSlJVszV4N5jNC7WWmqJLAK85uvfZYxbR
nBKUhZKxpttRSYYaBEilh1KdtcR8LL2AJDWdBrs18ynkWzG4BVJi9tRPg0pdrFyb
7W1XBZDbJJ2glaSKSaA1qxfHbM7Mxj32DvLZXefHCc6bABLxT2mRVZyDKWYmmLgX
UO2+9g3NosQvXbfxFbEsxrfarQZUU399z3yPXEj62YDP7AAV8mEsGnSVU44uUXhN
3Zs7k8ZO8/eOJJBVtuPu2NWG1XwKB2T1I0IB9i06jC32I8UKBHzqwFd2JKLnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4PjQoPDmWOcB9p3wasgjLAPar4YwHwYDVR0j
BBgwFoAUFk25iG+r+qz6G4zuxW0RTvAjr4MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENoc2NhRFNGNWlvYVRyUzlzUTV0eHVWdHNiMlpjVlFhcEZ5akgydGtl
MVYvMC8xNjREQjk4ODZGQUJGQUFDRkExQjhDRUVDNTZEMTE0RUYwMjNBRjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2NERCOTg4NkZBQkZBQUNG
QTFCOENFRUM1NkQxMTRFRjAyM0FGODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDaHNjYURTRjVpb2FUclM5c1E1dHh1VnRzYjJaY1ZRYXBGeWpIMnRrZTFWLzAv
MzQzNTJlMzEzNjMyMmUzMjMyMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNjM4
MzUzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaIWMA0GCSqGSIb3DQEBCwUAA4IBAQAAXlrMGUEm
5goCiXdeem/j/ICnqbFWz47j/YI0yWk2D5uquBfDTEMfYi8OhTLNU+xZkx+5V2uw
Gf7jIZXBeecyXlPxsNVXgojTqfF+YS0/oqeftj9YMt4KTa9qkTXn3OKUjfupIFab
RCYuHLne79mjt2Z+/iY/OXKTL6sJxODO+QDm/2B107/vOuyX/UCxTfddYr+PCX8/
x/jHMCfILkixj2HQ/uyL3f9XyVGY9oc5DbMM/My1gt45gCObDZxQ9AxE3TBlrI1u
h7Uws2KoUdxVdKODwdlahXwc9iNsuEwQSIjXtwSCamqnsK3LKViW2t71J3/9O8Vv
oRTr5tJ9JJta
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:31:32 2025 by rpki-client