Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/34352e362e3139372e302f32342d3234203d3e20323636353633.roa
File:                     34352e362e3139372e302f32342d3234203d3e20323636353633.roa (raw, json)
Hash identifier:          obQAudearuEmYYOIebCmWwdCRc1ga7SDraGNLbLIOrs=
Subject key identifier:   90:1A:71:9A:08:EA:9B:33:51:13:67:7B:AA:B1:A8:82:1D:02:E2:49
Certificate issuer:       /CN=2C8F79E76852475DDED25004F5D935390FAB63C4
Certificate serial:       77C6ED4C89E0B4E7A44E708243D9C9130C41541C
Authority key identifier: 2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8F79E76852475DDED25004F5D935390FAB63C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/34352e362e3139372e302f32342d3234203d3e20323636353633.roa
Signing time:             Thu 20 Apr 2023 13:54:44 +0000
ROA not before:           Thu 20 Apr 2023 13:49:44 +0000
ROA not after:            Thu 18 Apr 2024 13:54:44 +0000
asID:                     266563
IP address blocks:        45.6.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c6:ed:4c:89:e0:b4:e7:a4:4e:70:82:43:d9:c9:13:0c:41:54:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C8F79E76852475DDED25004F5D935390FAB63C4
        Validity
            Not Before: Apr 20 13:49:44 2023 GMT
            Not After : Apr 18 13:54:44 2024 GMT
        Subject: CN=901A719A08EA9B335113677BAAB1A8821D02E249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e6:ab:9d:cd:18:36:86:32:56:57:04:c5:cb:
                    db:09:2f:c4:47:3e:91:54:89:ab:0b:29:5f:7a:99:
                    65:eb:26:12:05:01:16:d4:e3:00:0e:a2:77:6f:0c:
                    dd:36:4d:b6:d6:2e:45:61:a0:b4:79:77:ad:94:7c:
                    73:da:cc:75:64:57:d6:7e:16:d7:37:4e:24:4b:ab:
                    31:4e:7d:bd:e8:7e:ee:e1:b9:91:45:7d:2c:d7:e9:
                    59:e0:1c:c3:d2:62:13:d0:bd:fa:bf:60:dd:cf:80:
                    ac:82:a1:25:33:84:2f:18:1a:68:e4:b0:1b:d2:8b:
                    e6:e0:5d:f4:50:38:a4:3c:96:be:8e:b1:a1:a1:b9:
                    d1:2c:49:f5:98:b4:4f:65:95:c4:79:de:74:0b:53:
                    5d:03:89:f1:a0:35:94:d4:e3:5c:86:17:0f:20:07:
                    ab:06:2b:e7:0a:28:eb:af:7f:c5:7d:a2:55:2f:cb:
                    99:a0:62:8c:0e:be:53:d8:18:81:38:ea:93:33:2e:
                    5d:54:2a:79:c9:ca:d8:52:43:31:0f:45:92:7d:55:
                    10:3e:6b:b8:03:73:20:14:66:ad:02:f6:20:e0:6f:
                    69:2f:0f:0a:1c:5f:17:c4:4f:a3:88:4a:71:14:4d:
                    a1:3a:ef:3b:33:0b:c1:f0:8a:5f:c9:1d:1b:e0:f9:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1A:71:9A:08:EA:9B:33:51:13:67:7B:AA:B1:A8:82:1D:02:E2:49
            X509v3 Authority Key Identifier:
                keyid:2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/2C8F79E76852475DDED25004F5D935390FAB63C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8F79E76852475DDED25004F5D935390FAB63C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/34352e362e3139372e302f32342d3234203d3e20323636353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:fb:f3:15:22:8e:08:8b:6d:db:0c:17:74:3f:e9:16:3d:ab:
         0f:42:21:46:cd:13:7c:0e:80:bf:43:77:54:e0:12:42:73:3c:
         f8:3a:eb:05:09:aa:da:df:8d:7e:b0:d2:00:46:8c:49:ec:fb:
         e0:1d:61:ba:81:13:77:17:57:ba:2f:55:3d:5d:a9:7e:f0:89:
         aa:a4:bb:36:2e:6e:03:6e:de:7e:43:19:69:5f:4c:a1:bf:34:
         d8:40:2f:9f:30:5e:ec:4f:4b:fa:20:b0:18:09:d4:48:35:8e:
         2d:d2:4e:a6:05:db:51:ea:e3:0c:f0:01:76:b8:5b:2d:b8:37:
         f3:56:70:e8:17:d7:59:49:5a:31:4a:8e:54:e1:26:ff:1d:90:
         1c:21:00:4c:de:7c:38:d1:0e:95:f7:16:ff:a8:5c:e0:7c:67:
         c3:5b:3b:07:61:b6:eb:d6:4f:ce:e9:a5:60:8e:ec:f5:14:ab:
         4f:9b:26:18:8c:35:f4:6f:4b:64:af:bb:44:76:2c:8c:f7:12:
         73:0f:d0:76:d9:c1:40:f2:c3:4d:3c:9a:22:e7:ca:e7:af:c7:
         eb:b5:0c:08:06:cd:ea:e2:07:90:bf:e6:91:31:bb:f1:af:64:
         d8:31:53:50:de:19:69:78:b7:e3:12:02:db:82:da:53:52:61:
         91:9a:42:01
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUd8btTIngtOekTnCCQ9nJEwxBVBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM4Rjc5RTc2ODUyNDc1RERFRDI1MDA0RjVEOTM1Mzkw
RkFCNjNDNDAeFw0yMzA0MjAxMzQ5NDRaFw0yNDA0MTgxMzU0NDRaMDMxMTAvBgNV
BAMTKDkwMUE3MTlBMDhFQTlCMzM1MTEzNjc3QkFBQjFBODgyMUQwMkUyNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw5qudzRg2hjJWVwTFy9sJL8RH
PpFUiasLKV96mWXrJhIFARbU4wAOondvDN02TbbWLkVhoLR5d62UfHPazHVkV9Z+
Ftc3TiRLqzFOfb3ofu7huZFFfSzX6VngHMPSYhPQvfq/YN3PgKyCoSUzhC8YGmjk
sBvSi+bgXfRQOKQ8lr6OsaGhudEsSfWYtE9llcR53nQLU10DifGgNZTU41yGFw8g
B6sGK+cKKOuvf8V9olUvy5mgYowOvlPYGIE46pMzLl1UKnnJythSQzEPRZJ9VRA+
a7gDcyAUZq0C9iDgb2kvDwocXxfET6OISnEUTaE67zszC8Hwil/JHRvg+ffJAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkBpxmgjqmzNRE2d7qrGogh0C4kkwHwYDVR0j
BBgwFoAULI9552hSR13e0lAE9dk1OQ+rY8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXFiaVQ2Uk1wOXRoQ24xR29mVWFQcWhMN1N3Vlp4VTZYVjVHWXVOOXM4
Qm8vMS8yQzhGNzlFNzY4NTI0NzVEREVEMjUwMDRGNUQ5MzUzOTBGQUI2M0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDOEY3OUU3Njg1MjQ3NURE
RUQyNTAwNEY1RDkzNTM5MEZBQjYzQzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVxYmlUNlJNcDl0aENuMUdvZlVhUHFoTDdTd1ZaeFU2WFY1R1l1TjlzOEJvLzEv
MzQzNTJlMzYyZTMxMzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM1
MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0GxTANBgkqhkiG9w0BAQsFAAOCAQEAfPvzFSKOCItt
2wwXdD/pFj2rD0IhRs0TfA6Av0N3VOASQnM8+DrrBQmq2t+NfrDSAEaMSez74B1h
uoETdxdXui9VPV2pfvCJqqS7Ni5uA27efkMZaV9Mob802EAvnzBe7E9L+iCwGAnU
SDWOLdJOpgXbUerjDPABdrhbLbg381Zw6BfXWUlaMUqOVOEm/x2QHCEATN58ONEO
lfcW/6hc4Hxnw1s7B2G269ZPzumlYI7s9RSrT5smGIw19G9LZK+7RHYsjPcScw/Q
dtnBQPLDTTyaIufK56/H67UMCAbN6uIHkL/mkTG78a9k2DFTUN4ZaXi34xIC24La
U1JhkZpCAQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:44:37 2025 by rpki-client