Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3130382e302f32322d3232203d3e20323632343831.roa
File:                     34352e3233372e3130382e302f32322d3232203d3e20323632343831.roa (raw, json)
Hash identifier:          Dsowua6LDLvoPGWkguLpvez+uOJspdyafUjG8fkqbtI=
Subject key identifier:   70:F3:1D:D7:8E:CF:83:66:6A:A7:6D:D0:70:4E:F2:3D:D2:34:4B:43
Certificate issuer:       /CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
Certificate serial:       2FCCFFAE2BE0372ACA45B23CF17DC030D6358225
Authority key identifier: E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3130382e302f32322d3232203d3e20323632343831.roa
Signing time:             Tue 12 Oct 2021 12:36:00 +0000
ROA not before:           Tue 12 Oct 2021 12:31:00 +0000
ROA not after:            Tue 11 Oct 2022 12:36:00 +0000
asID:                     262481
IP address blocks:        45.237.108.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cc:ff:ae:2b:e0:37:2a:ca:45:b2:3c:f1:7d:c0:30:d6:35:82:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Validity
            Not Before: Oct 12 12:31:00 2021 GMT
            Not After : Oct 11 12:36:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:11:ef:b0:a5:0d:e2:13:2e:e6:9d:f8:52:
                    33:0c:23:e5:77:40:6c:91:64:7a:6a:3f:10:a8:c9:
                    5c:07:b5:d1:70:ad:8d:b6:8c:59:7f:65:73:3a:29:
                    b5:d6:b8:6b:2c:89:1e:78:bd:43:d1:7e:c9:34:ff:
                    da:97:34:eb:51:82:7c:9f:3e:0b:65:cd:df:19:5e:
                    5b:0f:2c:17:a6:cd:9e:a5:83:4e:f7:7f:c8:ab:98:
                    ca:dc:1d:85:9d:c1:bb:f7:d4:8c:c5:15:07:12:d3:
                    43:a7:fc:39:1d:07:b9:90:12:68:e8:9e:dc:a4:9a:
                    18:77:e7:6e:6d:89:9f:a0:a8:b5:9a:ca:e9:93:78:
                    94:93:2c:ee:ca:7e:ad:75:10:6d:9a:5e:b3:2b:fc:
                    ce:55:32:73:b2:3b:bb:18:81:cf:c8:54:c4:54:2a:
                    68:84:45:7b:cf:bc:0b:ee:66:b6:0c:e2:de:2f:4c:
                    07:25:26:ed:cf:ef:f7:c6:93:5c:3d:76:0c:60:a6:
                    8c:74:6e:86:c1:40:10:cb:fd:a7:f9:1a:d3:b9:5e:
                    75:9e:30:e9:eb:77:c3:18:5c:bc:e9:0f:fa:b5:44:
                    0b:c3:12:5b:55:38:64:84:cd:6a:c1:c4:5f:6a:8d:
                    8f:0d:66:d1:b6:7e:4e:95:9d:d0:f4:41:53:ae:dd:
                    5a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F3:1D:D7:8E:CF:83:66:6A:A7:6D:D0:70:4E:F2:3D:D2:34:4B:43
            X509v3 Authority Key Identifier:
                keyid:E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3130382e302f32322d3232203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:6b:14:46:ab:43:45:16:66:cc:62:e6:5d:f9:4b:87:d2:e3:
         62:f0:43:b1:74:ad:6b:08:cc:5e:9c:58:e5:49:44:54:60:51:
         e8:05:c7:f3:a0:d5:66:c9:a8:0f:5b:b5:d5:ea:aa:c0:84:2f:
         bd:98:8c:02:24:85:6e:b7:bc:48:8e:e3:44:a9:fc:75:b8:e3:
         85:34:30:27:ab:0c:aa:3e:ff:03:8a:ef:05:c7:4d:b6:6b:fc:
         b9:9c:27:ca:4a:14:ad:d6:01:b6:4f:80:67:1a:68:b3:d4:e9:
         f3:30:ca:51:19:ee:e4:b0:a3:92:a5:a3:a3:e9:4a:d5:85:b5:
         77:d8:f3:e1:b7:61:83:a6:d2:cb:52:fb:96:0d:68:4b:34:0d:
         ce:80:11:cf:e6:79:ba:c7:05:17:ee:bc:80:95:5b:a4:a9:22:
         4c:8c:0c:12:0d:0f:50:f9:53:44:1c:3c:77:a7:f3:a1:47:cc:
         72:ec:fb:41:59:2d:40:74:99:24:e5:38:e9:24:a3:33:0a:71:
         6c:69:4c:46:5a:45:1a:42:16:ef:95:9a:55:f2:32:8a:3c:69:
         54:56:fd:a4:b9:21:e3:3b:3e:68:ca:39:3f:ff:7d:1c:2f:d1:
         f4:0c:81:6e:a3:ac:c6:c3:78:a8:fb:85:2a:61:05:5d:d1:bd:
         2d:6e:fd:99
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUL8z/rivgNyrKRbI88X3AMNY1giUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFBQTY1QTUyNzFEMzFCMTQ4NjAyNDM3QUM2Mzg1RkU5
NkI0QUM2MDAeFw0yMTEwMTIxMjMxMDBaFw0yMjEwMTExMjM2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjMwRDExRUZCMEE1MERFMjEz
MkVFNjlERjg1MjMzMEMyM0U1Nzc0MDZDOTE2NDdBNkEzRjEwQThDOTVDMDdCNUQx
NzBBRDhEQjY4QzU5N0Y2NTczM0EyOUI1RDZCODZCMkM4OTFFNzhCRDQzRDE3RUM5
MzRGRkRBOTczNEVCNTE4MjdDOUYzRTBCNjVDRERGMTk1RTVCMEYyQzE3QTZDRDlF
QTU4MzRFRjc3RkM4QUI5OENBREMxRDg1OURDMUJCRjdENDhDQzUxNTA3MTJEMzQz
QTdGQzM5MUQwN0I5OTAxMjY4RTg5RURDQTQ5QTE4NzdFNzZFNkQ4OTlGQTBBOEI1
OUFDQUU5OTM3ODk0OTMyQ0VFQ0E3RUFENzUxMDZEOUE1RUIzMkJGQ0NFNTUzMjcz
QjIzQkJCMTg4MUNGQzg1NEM0NTQyQTY4ODQ0NTdCQ0ZCQzBCRUU2NkI2MENFMkRF
MkY0QzA3MjUyNkVEQ0ZFRkY3QzY5MzVDM0Q3NjBDNjBBNjhDNzQ2RTg2QzE0MDEw
Q0JGREE3RjkxQUQzQjk1RTc1OUUzMEU5RUI3N0MzMTg1Q0JDRTkwRkZBQjU0NDBC
QzMxMjVCNTUzODY0ODRDRDZBQzFDNDVGNkE4RDhGMEQ2NkQxQjY3RTRFOTU5REQw
RjQ0MTUzQUVERDVBQTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsw0R77ClDeITLuad+FIzDCPld0BskWR6aj8QqMlcB7XRcK2NtoxZ
f2VzOim11rhrLIkeeL1D0X7JNP/alzTrUYJ8nz4LZc3fGV5bDywXps2epYNO93/I
q5jK3B2FncG799SMxRUHEtNDp/w5HQe5kBJo6J7cpJoYd+dubYmfoKi1msrpk3iU
kyzuyn6tdRBtml6zK/zOVTJzsju7GIHPyFTEVCpohEV7z7wL7ma2DOLeL0wHJSbt
z+/3xpNcPXYMYKaMdG6GwUAQy/2n+RrTuV51njDp63fDGFy86Q/6tUQLwxJbVThk
hM1qwcRfao2PDWbRtn5OlZ3Q9EFTrt1aowIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHDzHdeOz4Nmaqdt0HBO8j3SNEtDMB8GA1UdIwQYMBaAFOGqZaUnHTGxSGAkN6xj
hf6WtKxgMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdTYkNYajlpN3RRMUZj
WEdtNjVvRlRHMWt1ZUpqUkR3ZEtOczlrUHE4eU1OLzAvRTFBQTY1QTUyNzFEMzFC
MTQ4NjAyNDM3QUM2Mzg1RkU5NkI0QUM2MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMUFBNjVBNTI3MUQzMUIxNDg2MDI0MzdBQzYzODVGRTk2QjRB
QzYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83U2JDWGo5aTd0UTFGY1hHbTY1
b0ZURzFrdWVKalJEd2RLTnM5a1BxOHlNTi8wLzM0MzUyZTMyMzMzNzJlMzEzMDM4
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMyMzQzODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
Le1sMA0GCSqGSIb3DQEBCwUAA4IBAQABaxRGq0NFFmbMYuZd+UuH0uNi8EOxdK1r
CMxenFjlSURUYFHoBcfzoNVmyagPW7XV6qrAhC+9mIwCJIVut7xIjuNEqfx1uOOF
NDAnqwyqPv8Diu8Fx022a/y5nCfKShSt1gG2T4BnGmiz1OnzMMpRGe7ksKOSpaOj
6UrVhbV32PPht2GDptLLUvuWDWhLNA3OgBHP5nm6xwUX7ryAlVukqSJMjAwSDQ9Q
+VNEHDx3p/OhR8xy7PtBWS1AdJkk5TjpJKMzCnFsaUxGWkUaQhbvlZpV8jKKPGlU
Vv2kuSHjOz5oyjk//30cL9H0DIFuo6zGw3io+4UqYQVd0b0tbv2Z
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:38:54 2025 by rpki-client