Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/34352e3138302e3231322e302f32322d3234203d3e203532393830.roa
File:                     34352e3138302e3231322e302f32322d3234203d3e203532393830.roa (raw, json)
Hash identifier:          E63KkO5irEP/Lqq9LGmZMIeqZGcRCMSK2SBIWXJgbkE=
Subject key identifier:   4A:3E:97:FC:21:77:53:F4:48:FC:2F:7A:62:D5:9F:B3:6F:FD:F9:3D
Certificate issuer:       /CN=D2D2D71D988525073935916EEBCA45B03AB78E14
Certificate serial:       1F74ED4B22F01AFB1A6AFE0CE153113264BC913A
Authority key identifier: D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D2D71D988525073935916EEBCA45B03AB78E14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/34352e3138302e3231322e302f32322d3234203d3e203532393830.roa
Signing time:             Fri 11 Aug 2023 15:00:00 +0000
ROA not before:           Fri 11 Aug 2023 14:55:00 +0000
ROA not after:            Sun 11 Aug 2024 15:00:00 +0000
asID:                     52980
IP address blocks:        45.180.212.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:74:ed:4b:22:f0:1a:fb:1a:6a:fe:0c:e1:53:11:32:64:bc:91:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D2D71D988525073935916EEBCA45B03AB78E14
        Validity
            Not Before: Aug 11 14:55:00 2023 GMT
            Not After : Aug 11 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:59:ea:9e:3d:e2:5b:04:49:76:81:ff:a8:
                    63:81:4b:0c:76:42:83:c9:a7:8a:20:00:74:5d:b5:
                    c8:5e:60:a4:4b:e9:0d:ea:a9:b6:fd:5f:de:c9:4f:
                    5a:b3:78:bb:97:7f:9d:a2:d4:6d:3d:13:66:dc:b5:
                    cb:4b:a0:60:5a:6b:6a:04:17:63:e3:60:5f:b4:86:
                    14:7f:fa:87:48:76:39:8d:35:72:da:96:6c:46:fb:
                    f1:5c:91:a4:41:58:5c:a1:7f:b6:45:af:f5:14:a9:
                    02:1c:bb:2a:35:e3:71:a7:31:f9:10:41:f6:94:f3:
                    a0:34:37:62:80:de:75:1c:93:cd:64:ef:e0:61:35:
                    3d:c3:fd:cb:3f:cc:18:74:f9:66:d0:d7:a9:87:94:
                    39:75:13:0e:d2:83:35:7e:c5:48:e3:62:ac:30:f0:
                    f9:2d:94:99:30:84:57:f3:f7:96:07:ca:57:44:67:
                    f4:fe:b9:fe:b4:25:87:f3:34:d4:d2:74:76:fd:4b:
                    e6:5b:db:81:4a:8a:89:d9:c2:9e:1e:49:6e:d2:48:
                    81:ad:3a:88:eb:c3:89:42:cd:12:00:38:1a:52:af:
                    c1:f5:f5:fd:e6:7c:a4:8d:a1:32:c7:a7:36:3c:81:
                    38:19:e3:d9:e3:f3:fd:19:ff:a9:5a:e0:8c:14:e1:
                    75:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3E:97:FC:21:77:53:F4:48:FC:2F:7A:62:D5:9F:B3:6F:FD:F9:3D
            X509v3 Authority Key Identifier:
                keyid:D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/D2D2D71D988525073935916EEBCA45B03AB78E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D2D71D988525073935916EEBCA45B03AB78E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/34352e3138302e3231322e302f32322d3234203d3e203532393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:89:a1:33:f5:43:f9:ce:43:c4:ca:94:c6:90:c9:dd:48:57:
         69:0e:21:1f:10:fe:37:d7:3d:a2:49:91:91:25:f6:dc:e8:01:
         3c:57:ee:dd:9d:cd:3d:55:87:03:eb:e4:07:d8:37:f3:e0:a2:
         44:90:4a:fb:2e:03:71:f6:c5:7c:4a:e5:23:52:68:7a:23:f5:
         ef:17:de:f9:0e:0f:49:12:0a:b9:77:c9:da:b1:bf:9a:5e:85:
         f6:a1:82:8d:92:3c:d1:8b:39:26:49:52:95:2f:a8:d3:ee:ef:
         c6:43:26:31:83:bf:83:f4:49:2a:1f:ea:fa:db:b8:ee:b5:4f:
         ee:09:f1:1b:fb:a0:43:80:70:60:52:b4:a0:35:f0:7e:2b:53:
         b3:62:f5:a8:44:45:36:1c:5d:4a:73:1d:61:6f:11:c2:8d:79:
         e6:94:2d:c7:53:9a:b0:47:15:3b:df:0a:0c:3f:a1:5a:47:ba:
         6e:ac:1b:da:a3:c9:97:62:e4:37:ba:cd:90:a9:2c:48:ce:9a:
         06:13:aa:56:03:41:bc:61:c5:5d:97:81:40:de:ae:d2:20:25:
         65:26:6c:b7:a2:20:1a:ec:70:82:e2:3e:af:b2:28:8f:ba:b2:
         32:66:16:39:5a:a2:6f:15:cd:63:b5:bc:22:27:20:a3:35:fc:
         ee:72:4b:aa
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUH3TtSyLwGvsaav4M4VMRMmS8kTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJEMkQ3MUQ5ODg1MjUwNzM5MzU5MTZFRUJDQTQ1QjAz
QUI3OEUxNDAeFw0yMzA4MTExNDU1MDBaFw0yNDA4MTExNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUM0NDU5RUE5RTNERTI1QjA0
NDk3NjgxRkZBODYzODE0QjBDNzY0MjgzQzlBNzhBMjAwMDc0NURCNUM4NUU2MEE0
NEJFOTBERUFBOUI2RkQ1RkRFQzk0RjVBQjM3OEJCOTc3RjlEQTJENDZEM0QxMzY2
RENCNUNCNEJBMDYwNUE2QjZBMDQxNzYzRTM2MDVGQjQ4NjE0N0ZGQTg3NDg3NjM5
OEQzNTcyREE5NjZDNDZGQkYxNUM5MUE0NDE1ODVDQTE3RkI2NDVBRkY1MTRBOTAy
MUNCQjJBMzVFMzcxQTczMUY5MTA0MUY2OTRGM0EwMzQzNzYyODBERTc1MUM5M0NE
NjRFRkUwNjEzNTNEQzNGRENCM0ZDQzE4NzRGOTY2RDBEN0E5ODc5NDM5NzUxMzBF
RDI4MzM1N0VDNTQ4RTM2MkFDMzBGMEY5MkQ5NDk5MzA4NDU3RjNGNzk2MDdDQTU3
NDQ2N0Y0RkVCOUZFQjQyNTg3RjMzNEQ0RDI3NDc2RkQ0QkU2NUJEQjgxNEE4QTg5
RDlDMjlFMUU0OTZFRDI0ODgxQUQzQTg4RUJDMzg5NDJDRDEyMDAzODFBNTJBRkMx
RjVGNUZERTY3Q0E0OERBMTMyQzdBNzM2M0M4MTM4MTlFM0Q5RTNGM0ZEMTlGRkE5
NUFFMDhDMTRFMTc1N0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArERZ6p494lsESXaB/6hjgUsMdkKDyaeKIAB0XbXIXmCkS+kN6qm2
/V/eyU9as3i7l3+dotRtPRNm3LXLS6BgWmtqBBdj42BftIYUf/qHSHY5jTVy2pZs
RvvxXJGkQVhcoX+2Ra/1FKkCHLsqNeNxpzH5EEH2lPOgNDdigN51HJPNZO/gYTU9
w/3LP8wYdPlm0Neph5Q5dRMO0oM1fsVI42KsMPD5LZSZMIRX8/eWB8pXRGf0/rn+
tCWH8zTU0nR2/UvmW9uBSoqJ2cKeHklu0kiBrTqI68OJQs0SADgaUq/B9fX95nyk
jaEyx6c2PIE4GePZ4/P9Gf+pWuCMFOF1fQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FEo+l/whd1P0SPwvemLVn7Nv/fk9MB8GA1UdIwQYMBaAFNLS1x2YhSUHOTWRbuvK
RbA6t44UMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU3YUxOZWMxajVLYzVN
dzd1NE1CaVlBNEFLVXlqSjFVQ2NmekpSd0NHQ2hxLzAvRDJEMkQ3MUQ5ODg1MjUw
NzM5MzU5MTZFRUJDQTQ1QjAzQUI3OEUxNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMkQyRDcxRDk4ODUyNTA3MzkzNTkxNkVFQkNBNDVCMDNBQjc4
RTE0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81N2FMTmVjMWo1S2M1TXc3dTRN
QmlZQTRBS1V5akoxVUNjZnpKUndDR0NocS8wLzM0MzUyZTMxMzgzMDJlMzIzMTMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM5MzgzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi20
1DANBgkqhkiG9w0BAQsFAAOCAQEAnomhM/VD+c5DxMqUxpDJ3UhXaQ4hHxD+N9c9
okmRkSX23OgBPFfu3Z3NPVWHA+vkB9g38+CiRJBK+y4DcfbFfErlI1JoeiP17xfe
+Q4PSRIKuXfJ2rG/ml6F9qGCjZI80Ys5JklSlS+o0+7vxkMmMYO/g/RJKh/q+tu4
7rVP7gnxG/ugQ4BwYFK0oDXwfitTs2L1qERFNhxdSnMdYW8Rwo155pQtx1OasEcV
O98KDD+hWke6bqwb2qPJl2LkN7rNkKksSM6aBhOqVgNBvGHFXZeBQN6u0iAlZSZs
t6IgGuxwguI+r7Ioj7qyMmYWOVqibxXNY7W8IicgozX87nJLqg==
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:42:30 2025 by rpki-client