Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zQFUkkPm5skNgfG4Mb5obtq9SDj9PtnpEj4w4dJ9MD5/0/34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa
File:                     34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa (raw, json)
Hash identifier:          U+vv3DT4IKEVbalLJJjsapufW74V5AnD+skqHp8Pg9s=
Subject key identifier:   60:BA:35:99:AE:D4:70:DE:B6:17:37:FA:BE:80:12:7A:FC:4F:13:AC
Certificate issuer:       /CN=124670631864DC8EBFAC80DD7900F6827B97FE6D
Certificate serial:       7B851C3A6FEA9A81FFC6EE417FC1C7CA010E3499
Authority key identifier: 12:46:70:63:18:64:DC:8E:BF:AC:80:DD:79:00:F6:82:7B:97:FE:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/124670631864DC8EBFAC80DD7900F6827B97FE6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zQFUkkPm5skNgfG4Mb5obtq9SDj9PtnpEj4w4dJ9MD5/0/34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa
Signing time:             Tue 23 May 2023 17:26:34 +0000
ROA not before:           Tue 23 May 2023 17:21:34 +0000
ROA not after:            Tue 21 May 2024 17:26:34 +0000
asID:                     267933
IP address blocks:        45.165.220.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:85:1c:3a:6f:ea:9a:81:ff:c6:ee:41:7f:c1:c7:ca:01:0e:34:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=124670631864DC8EBFAC80DD7900F6827B97FE6D
        Validity
            Not Before: May 23 17:21:34 2023 GMT
            Not After : May 21 17:26:34 2024 GMT
        Subject: CN=60BA3599AED470DEB61737FABE80127AFC4F13AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:97:69:95:4d:74:83:08:7a:e6:1d:1c:b3:
                    b5:9a:c5:35:a2:74:f5:a4:03:12:05:07:25:4f:95:
                    65:bc:03:71:a9:5d:3a:da:a3:b4:34:c1:f1:17:2e:
                    e3:6c:e5:22:57:63:91:ef:23:10:64:d6:4f:ad:fe:
                    fd:31:6f:40:d9:80:2a:48:82:10:f8:d4:52:0a:26:
                    f8:75:d7:c1:ca:bc:2d:eb:32:75:73:6e:80:17:51:
                    06:28:fa:7e:ef:99:6e:0b:a7:99:8b:f2:d3:56:92:
                    f9:41:5c:ae:9c:a0:ae:4e:c5:cc:cb:47:92:b4:d0:
                    e9:da:6e:2c:c1:6d:fd:33:cb:94:75:d4:58:73:03:
                    50:df:94:f5:40:4d:ad:72:c6:61:80:ae:aa:1f:5e:
                    be:b3:a2:f6:cc:e1:ca:f9:88:a9:e3:7c:27:eb:25:
                    18:08:31:21:c3:d5:af:99:5b:7d:88:ea:11:bf:45:
                    a8:87:15:82:79:57:04:96:8f:6d:a7:d6:bc:8f:da:
                    ff:e4:00:d7:75:05:3b:01:a2:f6:60:a7:05:34:8d:
                    50:67:b4:d7:a8:a8:c1:48:9f:aa:3e:36:31:c2:ec:
                    dd:19:f1:ce:08:4d:60:02:7d:58:34:a3:4d:7a:4c:
                    27:77:a0:1b:62:31:92:1e:a2:08:30:7c:fb:12:d5:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BA:35:99:AE:D4:70:DE:B6:17:37:FA:BE:80:12:7A:FC:4F:13:AC
            X509v3 Authority Key Identifier:
                keyid:12:46:70:63:18:64:DC:8E:BF:AC:80:DD:79:00:F6:82:7B:97:FE:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zQFUkkPm5skNgfG4Mb5obtq9SDj9PtnpEj4w4dJ9MD5/0/124670631864DC8EBFAC80DD7900F6827B97FE6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/124670631864DC8EBFAC80DD7900F6827B97FE6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zQFUkkPm5skNgfG4Mb5obtq9SDj9PtnpEj4w4dJ9MD5/0/34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:dd:56:ec:fb:8a:53:d5:7d:60:6a:12:98:68:57:12:97:b6:
         37:5f:b3:66:71:22:61:20:43:6b:4d:76:12:51:05:94:8a:34:
         f3:60:35:5d:8e:97:a4:7a:51:83:2f:8f:ca:4f:d9:fd:56:83:
         b5:0d:b4:dc:99:90:46:f1:50:78:6c:f0:36:59:99:5b:02:99:
         96:79:99:07:a3:14:39:9e:9b:ed:87:fc:9d:2f:91:4b:19:8e:
         e3:56:e4:6e:88:26:db:de:57:76:14:de:b8:f1:64:a2:15:85:
         f3:13:52:77:08:56:7e:95:0b:27:3b:42:d9:eb:d9:b9:44:07:
         27:22:47:c4:4c:ea:f5:46:49:4b:6d:1c:41:9e:2d:63:06:da:
         06:83:07:6b:84:16:9c:16:1e:a3:2c:e4:d3:3c:7b:25:f2:c8:
         e4:24:a5:fe:b6:ed:20:12:a6:a1:52:52:05:fb:f7:e5:68:f0:
         78:da:8c:cd:a5:17:bc:3d:67:9c:b0:65:66:7f:25:89:d0:22:
         41:08:95:db:46:68:55:ab:d6:64:b2:99:86:04:cb:43:9a:a5:
         1d:86:65:8f:5c:c2:3a:7e:82:dc:9b:d9:4d:a8:e9:44:39:f7:
         72:f7:5f:8f:1b:3d:dc:53:f3:2f:9b:8a:a2:1d:35:c8:7b:1a:
         1a:65:de:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe4UcOm/qmoH/xu5Bf8HHygEONJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI0NjcwNjMxODY0REM4RUJGQUM4MERENzkwMEY2ODI3
Qjk3RkU2RDAeFw0yMzA1MjMxNzIxMzRaFw0yNDA1MjExNzI2MzRaMDMxMTAvBgNV
BAMTKDYwQkEzNTk5QUVENDcwREVCNjE3MzdGQUJFODAxMjdBRkM0RjEzQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnmJdplU10gwh65h0cs7WaxTWi
dPWkAxIFByVPlWW8A3GpXTrao7Q0wfEXLuNs5SJXY5HvIxBk1k+t/v0xb0DZgCpI
ghD41FIKJvh118HKvC3rMnVzboAXUQYo+n7vmW4Lp5mL8tNWkvlBXK6coK5OxczL
R5K00OnabizBbf0zy5R11FhzA1DflPVATa1yxmGArqofXr6zovbM4cr5iKnjfCfr
JRgIMSHD1a+ZW32I6hG/RaiHFYJ5VwSWj22n1ryP2v/kANd1BTsBovZgpwU0jVBn
tNeoqMFIn6o+NjHC7N0Z8c4ITWACfVg0o016TCd3oBtiMZIeoggwfPsS1bilAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYLo1ma7UcN62Fzf6voASevxPE6wwHwYDVR0j
BBgwFoAUEkZwYxhk3I6/rIDdeQD2gnuX/m0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXpRRlVra1BtNXNrTmdmRzRNYjVvYnRxOVNEajlQdG5wRWo0dzRkSjlN
RDUvMC8xMjQ2NzA2MzE4NjREQzhFQkZBQzgwREQ3OTAwRjY4MjdCOTdGRTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyNDY3MDYzMTg2NERDOEVC
RkFDODBERDc5MDBGNjgyN0I5N0ZFNkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV6UUZVa2tQbTVza05nZkc0TWI1b2J0cTlTRGo5UHRucEVqNHc0ZEo5TUQ1LzAv
MzQzNTJlMzEzNjM1MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczOTMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpdwwDQYJKoZIhvcNAQELBQADggEBABbdVuz7
ilPVfWBqEphoVxKXtjdfs2ZxImEgQ2tNdhJRBZSKNPNgNV2Ol6R6UYMvj8pP2f1W
g7UNtNyZkEbxUHhs8DZZmVsCmZZ5mQejFDmem+2H/J0vkUsZjuNW5G6IJtveV3YU
3rjxZKIVhfMTUncIVn6VCyc7Qtnr2blEByciR8RM6vVGSUttHEGeLWMG2gaDB2uE
FpwWHqMs5NM8eyXyyOQkpf627SASpqFSUgX79+Vo8HjajM2lF7w9Z5ywZWZ/JYnQ
IkEIldtGaFWr1mSymYYEy0OapR2GZY9cwjp+gtyb2U2o6UQ593L3X48bPdxT8y+b
iqIdNch7Ghpl3u4=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:59 2025 by rpki-client