Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32342d3234203d3e20323637323232.roa
File:                     34352e3232392e36382e302f32342d3234203d3e20323637323232.roa (raw, json)
Hash identifier:          h7RhHOax/f6eZ9BAoGBXX5tfSjmbAsSwm0mYXgNjETc=
Subject key identifier:   A6:FC:50:5E:85:D2:AE:87:DD:76:A9:59:ED:E1:1C:12:82:6E:31:7F
Certificate issuer:       /CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
Certificate serial:       4855046B8CF45D1BB626AD7CE8FBA12F80C33A60
Authority key identifier: 57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32342d3234203d3e20323637323232.roa
Signing time:             Fri 25 Aug 2023 14:55:07 +0000
ROA not before:           Fri 25 Aug 2023 14:50:07 +0000
ROA not after:            Fri 23 Aug 2024 14:55:07 +0000
asID:                     267222
IP address blocks:        45.229.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:55:04:6b:8c:f4:5d:1b:b6:26:ad:7c:e8:fb:a1:2f:80:c3:3a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
        Validity
            Not Before: Aug 25 14:50:07 2023 GMT
            Not After : Aug 23 14:55:07 2024 GMT
        Subject: CN=A6FC505E85D2AE87DD76A959EDE11C12826E317F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:2c:39:55:78:b0:90:28:45:3e:df:4b:db:
                    5a:0a:f4:fb:30:6f:8c:7b:7c:5f:ce:5d:b0:cf:bc:
                    f9:54:49:2e:b2:e7:cc:b4:04:a2:13:15:74:dd:54:
                    16:11:2a:0a:0f:aa:bc:04:3f:bc:7a:ff:3e:9a:cf:
                    76:13:7a:d1:30:9c:82:0d:e2:1e:e6:7d:b1:87:83:
                    8f:e5:6e:95:fd:2c:3f:93:67:77:f1:37:19:4a:f6:
                    b3:b4:ef:97:fe:c2:52:9d:25:d6:39:fb:35:e4:39:
                    c3:92:68:d4:48:63:11:3a:a4:9f:c2:07:88:c7:bf:
                    2a:64:6d:39:45:62:3c:6d:7a:69:8b:30:28:71:79:
                    3d:6a:a3:fe:76:2e:41:4e:7d:e4:62:3c:6e:5c:be:
                    b1:66:d9:df:9c:31:ec:67:bc:ed:99:c3:cc:a3:eb:
                    5e:87:80:0f:60:39:54:96:65:3e:a1:4b:d3:7c:a6:
                    1b:7b:fe:47:a7:30:b7:98:1e:1f:c7:cd:4c:f8:d5:
                    dc:06:dd:d6:c4:1a:bd:19:27:61:79:f6:48:78:75:
                    d6:f5:98:94:cb:9c:6d:37:be:ac:99:96:a3:46:58:
                    1c:53:5c:f0:fe:95:bf:da:62:34:68:66:fd:bf:d2:
                    ed:d7:76:7f:24:2e:b3:eb:72:20:82:85:ae:69:a5:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FC:50:5E:85:D2:AE:87:DD:76:A9:59:ED:E1:1C:12:82:6E:31:7F
            X509v3 Authority Key Identifier:
                keyid:57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32342d3234203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ea:78:ec:8d:f5:26:15:f7:9e:e7:db:1c:0e:ec:f5:97:82:
         c6:73:58:da:70:a5:d3:78:d6:1b:4a:bb:c4:61:b5:cb:56:35:
         cd:78:93:c3:30:50:eb:d2:4f:0d:45:fa:0b:c8:63:27:c6:7f:
         db:81:f6:35:6b:3e:e9:04:74:71:0f:a7:67:7c:79:71:cc:cf:
         f8:15:8e:60:16:b2:fa:24:81:5b:31:c7:2e:29:5e:a8:ae:04:
         56:30:fe:09:f0:e0:04:dc:17:16:88:b2:a8:89:14:50:af:2d:
         87:be:b9:a7:f9:7f:44:8f:77:4e:ab:e7:d0:8f:84:a6:02:02:
         a9:65:68:42:02:29:5d:78:e9:c8:be:57:13:6e:21:1f:34:58:
         1b:c3:fb:9b:a9:7d:62:80:fd:79:78:c4:c3:69:59:e0:ea:7c:
         c6:61:05:2f:7c:c5:2f:c1:32:81:be:45:06:7a:e9:96:b4:20:
         6d:cd:72:63:92:c7:f7:b1:e6:33:7b:86:cb:ce:31:ac:32:47:
         21:7c:56:9f:04:27:4f:3a:af:b9:fe:12:8c:a5:a0:e3:2b:17:
         1f:f0:df:06:d2:be:83:3b:cf:f2:71:c8:e8:26:a8:7d:7a:00:
         42:29:2a:a3:18:80:61:f1:e2:13:62:ad:f2:00:dc:7c:17:d8:
         53:8d:f8:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSFUEa4z0XRu2Jq186PuhL4DDOmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdFMUVGNEJGMzNBNEI2QkFERjYyNjI4RjMxNjBEMDI2
NEY0MDhCOTAeFw0yMzA4MjUxNDUwMDdaFw0yNDA4MjMxNDU1MDdaMDMxMTAvBgNV
BAMTKEE2RkM1MDVFODVEMkFFODdERDc2QTk1OUVERTExQzEyODI2RTMxN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Byw5VXiwkChFPt9L21oK9Psw
b4x7fF/OXbDPvPlUSS6y58y0BKITFXTdVBYRKgoPqrwEP7x6/z6az3YTetEwnIIN
4h7mfbGHg4/lbpX9LD+TZ3fxNxlK9rO075f+wlKdJdY5+zXkOcOSaNRIYxE6pJ/C
B4jHvypkbTlFYjxtemmLMChxeT1qo/52LkFOfeRiPG5cvrFm2d+cMexnvO2Zw8yj
616HgA9gOVSWZT6hS9N8pht7/kenMLeYHh/HzUz41dwG3dbEGr0ZJ2F59kh4ddb1
mJTLnG03vqyZlqNGWBxTXPD+lb/aYjRoZv2/0u3Xdn8kLrPrciCCha5ppdYvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpvxQXoXSrofddqlZ7eEcEoJuMX8wHwYDVR0j
BBgwFoAUV+HvS/M6S2ut9iYo8xYNAmT0CLkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o
a2UvMC81N0UxRUY0QkYzM0E0QjZCQURGNjI2MjhGMzE2MEQwMjY0RjQwOEI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU3RTFFRjRCRjMzQTRCNkJB
REY2MjYyOEYzMTYwRDAyNjRGNDA4QjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdlM3FUUFpwRGNibW9admhteGZCd1kzc2RSdnR2NlZzS1R5NDR5eVFNaGtlLzAv
MzQzNTJlMzIzMjM5MmUzNjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeVEMA0GCSqGSIb3DQEBCwUAA4IBAQCg6njsjfUm
Ffee59scDuz1l4LGc1jacKXTeNYbSrvEYbXLVjXNeJPDMFDr0k8NRfoLyGMnxn/b
gfY1az7pBHRxD6dnfHlxzM/4FY5gFrL6JIFbMccuKV6orgRWMP4J8OAE3BcWiLKo
iRRQry2Hvrmn+X9Ej3dOq+fQj4SmAgKpZWhCAildeOnIvlcTbiEfNFgbw/ubqX1i
gP15eMTDaVng6nzGYQUvfMUvwTKBvkUGeumWtCBtzXJjksf3seYze4bLzjGsMkch
fFafBCdPOq+5/hKMpaDjKxcf8N8G0r6DO8/yccjoJqh9egBCKSqjGIBh8eITYq3y
ANx8F9hTjfia
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:46 2025 by rpki-client