Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136322e302f32342d3234203d3e20323639303032.roa
File:                     34352e3137362e3136322e302f32342d3234203d3e20323639303032.roa (raw, json)
Hash identifier:          Bg8XkAgzYZSXSyFW/LGu85h0Pxe+Vgxnz3KUmnQkgIE=
Subject key identifier:   97:35:2C:91:45:83:80:3F:3E:70:60:C4:74:54:0B:5C:66:40:C6:34
Certificate issuer:       /CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
Certificate serial:       2E6F095F86875A41CE6082E2C4BD72A795C60763
Authority key identifier: F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136322e302f32342d3234203d3e20323639303032.roa
Signing time:             Thu 15 Feb 2024 21:51:35 +0000
ROA not before:           Thu 15 Feb 2024 21:46:35 +0000
ROA not after:            Thu 13 Feb 2025 21:51:35 +0000
asID:                     269002
IP address blocks:        45.176.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6f:09:5f:86:87:5a:41:ce:60:82:e2:c4:bd:72:a7:95:c6:07:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
        Validity
            Not Before: Feb 15 21:46:35 2024 GMT
            Not After : Feb 13 21:51:35 2025 GMT
        Subject: CN=97352C914583803F3E7060C474540B5C6640C634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bd:a2:d1:11:c8:36:21:e3:f7:70:5c:6f:80:
                    39:db:e8:de:5a:5f:4c:35:af:a0:29:7b:ab:db:08:
                    1d:2d:90:6e:8c:a2:4c:2c:ad:9d:1d:d5:fb:8b:d9:
                    af:64:77:d4:d6:49:f5:18:8d:8d:49:bf:2c:9e:8a:
                    47:3c:59:64:c7:a0:67:14:5e:0a:ab:19:87:0e:3b:
                    0c:be:b3:2a:b8:27:bf:74:08:d5:76:21:07:2f:10:
                    0b:41:62:23:2c:8b:a6:1a:74:bf:5c:09:b2:64:10:
                    05:ae:e1:6a:a3:61:c1:4d:d4:e5:c4:ee:8e:7c:74:
                    d5:c3:83:e3:b5:a3:77:85:f1:4f:a1:d0:33:e1:6f:
                    78:cf:fe:4a:85:53:00:6c:4a:5c:12:f8:02:59:f5:
                    e6:7d:6b:2c:08:31:e2:61:2f:9a:1b:6d:c0:2e:81:
                    cd:16:f1:fb:ab:24:86:5d:f5:ec:c3:40:37:a2:97:
                    f0:26:53:ce:3f:35:71:3e:c6:4c:bb:3b:35:1a:61:
                    3a:36:18:e2:4c:e1:bf:40:2b:d1:97:4e:e0:25:ce:
                    56:b3:d2:79:ab:13:c1:d6:01:b4:83:58:dd:8d:ce:
                    5e:d9:9a:b4:b8:cd:9a:47:e4:3c:47:c7:fb:cd:77:
                    b1:a2:13:ca:11:58:95:c5:20:75:8c:1c:f0:f4:37:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:35:2C:91:45:83:80:3F:3E:70:60:C4:74:54:0B:5C:66:40:C6:34
            X509v3 Authority Key Identifier:
                keyid:F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136322e302f32342d3234203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4f:6b:f0:49:72:eb:ec:70:63:e4:64:8e:41:2d:c6:14:f1:
         39:5f:71:bf:8b:60:d2:65:05:a9:56:85:30:44:ff:7d:a2:ba:
         53:87:d4:67:55:f9:7e:3f:44:48:81:46:b3:f0:ba:2f:9c:1f:
         9c:3b:14:00:b4:f2:e7:e3:3c:7c:71:39:8b:83:d1:b5:b1:1f:
         8e:11:27:7c:25:df:ec:61:07:92:f3:cd:b4:87:8c:56:fa:2a:
         e2:1c:41:9b:77:89:df:13:70:9a:bb:cc:a9:22:6c:1e:99:e5:
         02:50:73:77:4e:67:00:9d:af:e1:f8:e4:dd:a8:39:51:e6:57:
         b6:a9:f1:7d:b3:81:dd:e7:16:d9:11:38:3d:62:8b:f6:51:de:
         6f:ea:dd:3d:33:e6:f3:01:60:17:db:cb:93:20:8a:f5:33:30:
         39:c6:64:22:3e:4d:3e:50:15:ae:e7:8e:96:61:5b:ed:ce:62:
         17:20:18:e2:a3:6f:81:8f:2c:cf:52:89:8a:c8:28:5c:b3:01:
         60:ee:41:c0:2d:51:24:76:98:68:79:9f:ec:24:55:22:73:65:
         06:c8:2d:45:6c:ab:74:14:d9:1f:7f:8b:01:c3:13:99:55:e7:
         16:ff:28:9c:9e:22:52:f7:e7:4b:2d:60:df:f6:da:38:f6:39:
         5e:0d:b6:1e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULm8JX4aHWkHOYILixL1yp5XGB2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5OEE4M0Q3OEREMTJBM0NEOTVFNTIxNzYwRjk3OEUx
RjJCODgxOTAeFw0yNDAyMTUyMTQ2MzVaFw0yNTAyMTMyMTUxMzVaMDMxMTAvBgNV
BAMTKDk3MzUyQzkxNDU4MzgwM0YzRTcwNjBDNDc0NTQwQjVDNjY0MEM2MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhvaLREcg2IeP3cFxvgDnb6N5a
X0w1r6Ape6vbCB0tkG6MokwsrZ0d1fuL2a9kd9TWSfUYjY1Jvyyeikc8WWTHoGcU
XgqrGYcOOwy+syq4J790CNV2IQcvEAtBYiMsi6YadL9cCbJkEAWu4WqjYcFN1OXE
7o58dNXDg+O1o3eF8U+h0DPhb3jP/kqFUwBsSlwS+AJZ9eZ9aywIMeJhL5obbcAu
gc0W8furJIZd9ezDQDeil/AmU84/NXE+xky7OzUaYTo2GOJM4b9AK9GXTuAlzlaz
0nmrE8HWAbSDWN2Nzl7ZmrS4zZpH5DxHx/vNd7GiE8oRWJXFIHWMHPD0N6HLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlzUskUWDgD8+cGDEdFQLXGZAxjQwHwYDVR0j
BBgwFoAU85ioPXjdEqPNleUhdg+Xjh8riBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2tBTHRDV2RaVTczVUhkQnlDcUwxQ21BblFrYnM2UGJxZDlWRGgyeHVO
bU0vMC9GMzk4QTgzRDc4REQxMkEzQ0Q5NUU1MjE3NjBGOTc4RTFGMkI4ODE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YzOThBODNENzhERDEyQTND
RDk1RTUyMTc2MEY5NzhFMUYyQjg4MTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdrQUx0Q1dkWlU3M1VIZEJ5Q3FMMUNtQW5Ra2JzNlBicWQ5VkRoMnh1Tm1NLzAv
MzQzNTJlMzEzNzM2MmUzMTM2MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtsKIwDQYJKoZIhvcNAQELBQADggEBAA5Pa/BJ
cuvscGPkZI5BLcYU8Tlfcb+LYNJlBalWhTBE/32iulOH1GdV+X4/REiBRrPwui+c
H5w7FAC08ufjPHxxOYuD0bWxH44RJ3wl3+xhB5LzzbSHjFb6KuIcQZt3id8TcJq7
zKkibB6Z5QJQc3dOZwCdr+H45N2oOVHmV7ap8X2zgd3nFtkROD1ii/ZR3m/q3T0z
5vMBYBfby5MgivUzMDnGZCI+TT5QFa7njpZhW+3OYhcgGOKjb4GPLM9SiYrIKFyz
AWDuQcAtUSR2mGh5n+wkVSJzZQbILUVsq3QU2R9/iwHDE5lV5xb/KJyeIlL350st
YN/22jj2OV4Nth4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:05:35 2025 by rpki-client