Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oL6TaSqFQN4Sd1ZGBUpXBcfnXtLLCebAFCLSGVwhFRv/0/34352e3232342e3232352e302f32342d3234203d3e20323637363734.roa
File:                     34352e3232342e3232352e302f32342d3234203d3e20323637363734.roa (raw, json)
Hash identifier:          g1l5SONAYjZVZY8GEhJiJyq/DlfZktZ8mmVldNK0ZgQ=
Subject key identifier:   AA:29:F0:D5:F1:DF:50:55:BC:06:A7:C7:F2:0C:6F:C8:AB:89:1F:63
Certificate issuer:       /CN=F89ACA79D380A76BC4DC8409375ABD77314F0F50
Certificate serial:       2DD3182F7841325E342077095651BFEFBCA76C24
Authority key identifier: F8:9A:CA:79:D3:80:A7:6B:C4:DC:84:09:37:5A:BD:77:31:4F:0F:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F89ACA79D380A76BC4DC8409375ABD77314F0F50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oL6TaSqFQN4Sd1ZGBUpXBcfnXtLLCebAFCLSGVwhFRv/0/34352e3232342e3232352e302f32342d3234203d3e20323637363734.roa
Signing time:             Sat 06 Aug 2022 14:04:02 +0000
ROA not before:           Sat 06 Aug 2022 13:59:02 +0000
ROA not after:            Sat 05 Aug 2023 14:04:02 +0000
asID:                     267674
IP address blocks:        45.224.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d3:18:2f:78:41:32:5e:34:20:77:09:56:51:bf:ef:bc:a7:6c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89ACA79D380A76BC4DC8409375ABD77314F0F50
        Validity
            Not Before: Aug  6 13:59:02 2022 GMT
            Not After : Aug  5 14:04:02 2023 GMT
        Subject: CN=AA29F0D5F1DF5055BC06A7C7F20C6FC8AB891F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:4d:e7:9b:1d:c6:f3:0f:8b:3b:f4:a9:19:
                    47:2e:50:4c:7e:28:c2:73:a4:37:c3:65:6b:f7:9a:
                    e3:25:29:c4:50:47:1a:c5:44:da:dd:87:86:6e:2a:
                    72:5e:0e:ff:64:ba:ba:e2:9b:90:fb:82:06:da:50:
                    aa:bd:f9:43:f6:f2:5c:d3:d4:95:4a:7b:41:72:4a:
                    44:f6:19:ef:29:90:2d:32:26:72:e6:a6:15:bf:62:
                    90:33:dd:5a:aa:f8:1b:19:95:5f:e2:49:c2:a2:a6:
                    e5:20:dc:80:44:66:41:f8:d4:d7:03:48:38:fb:9f:
                    24:9d:e6:50:e8:95:6d:cd:a4:a7:d2:17:32:7b:05:
                    6d:a3:03:ce:ba:52:dd:c3:cc:65:c3:2b:cd:3c:bb:
                    35:eb:32:a1:f8:f7:7f:6a:34:6e:18:5b:e6:55:e6:
                    ed:4e:d1:2e:58:dc:e7:82:db:63:dd:d8:c7:4c:9a:
                    c1:a4:e7:7d:ec:47:11:67:46:d9:f0:c1:a1:a3:1e:
                    0f:71:7d:9e:6c:eb:5c:28:db:f2:48:8a:4b:a7:37:
                    48:49:dd:d7:95:e1:e7:7d:8b:36:8b:32:7b:f6:71:
                    f5:ed:6b:ce:74:2b:90:ec:02:5c:40:0d:da:42:5d:
                    b2:ce:6c:6f:2c:fa:1b:bb:63:c4:34:28:d5:42:e9:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:29:F0:D5:F1:DF:50:55:BC:06:A7:C7:F2:0C:6F:C8:AB:89:1F:63
            X509v3 Authority Key Identifier:
                keyid:F8:9A:CA:79:D3:80:A7:6B:C4:DC:84:09:37:5A:BD:77:31:4F:0F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oL6TaSqFQN4Sd1ZGBUpXBcfnXtLLCebAFCLSGVwhFRv/0/F89ACA79D380A76BC4DC8409375ABD77314F0F50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F89ACA79D380A76BC4DC8409375ABD77314F0F50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oL6TaSqFQN4Sd1ZGBUpXBcfnXtLLCebAFCLSGVwhFRv/0/34352e3232342e3232352e302f32342d3234203d3e20323637363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:6f:1d:52:8e:ec:60:bb:53:b1:2e:bd:d0:24:1a:34:8b:
         33:45:2a:3e:e8:a4:e9:a6:e9:df:79:77:37:b3:0c:ed:a6:4d:
         59:26:1a:ff:c5:d3:7d:c0:65:6e:17:ae:02:40:2e:71:c8:1b:
         7c:a8:65:0c:22:71:0d:6e:5e:df:bf:68:d5:e7:01:3b:0f:87:
         94:b1:29:3e:70:14:d6:52:a1:1c:a3:9f:21:12:91:a1:eb:72:
         f0:82:e9:9e:7c:ae:91:0a:c9:ac:a7:41:4b:a5:ba:3f:4a:61:
         68:89:d7:45:2c:d6:1f:55:6e:c4:cc:7a:f3:a4:b3:69:85:0f:
         b3:43:6e:61:ab:ce:3a:a2:f0:c1:2a:22:b7:f9:da:c7:c2:c2:
         e5:58:a0:6b:3f:53:cc:3c:fa:cf:15:d6:27:1b:22:f6:b3:b2:
         d4:86:9e:dd:0c:f4:28:b5:19:a2:16:4d:5e:82:54:38:db:b5:
         c7:9c:00:7a:9b:5e:f8:65:3b:1c:3d:03:22:01:28:cd:f9:f3:
         a2:ea:90:f6:b9:33:09:95:08:90:0b:a4:c3:d7:e1:77:51:5d:
         e4:2b:c1:01:55:b8:7e:7e:2a:ae:ac:a4:46:dd:20:ea:43:8d:
         1a:91:78:c2:d5:87:99:f0:f0:20:ea:1d:33:a1:bb:37:db:52:
         d9:5e:de:40
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULdMYL3hBMl40IHcJVlG/77ynbCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg5QUNBNzlEMzgwQTc2QkM0REM4NDA5Mzc1QUJENzcz
MTRGMEY1MDAeFw0yMjA4MDYxMzU5MDJaFw0yMzA4MDUxNDA0MDJaMDMxMTAvBgNV
BAMTKEFBMjlGMEQ1RjFERjUwNTVCQzA2QTdDN0YyMEM2RkM4QUI4OTFGNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLU3nmx3G8w+LO/SpGUcuUEx+
KMJzpDfDZWv3muMlKcRQRxrFRNrdh4ZuKnJeDv9kurrim5D7ggbaUKq9+UP28lzT
1JVKe0FySkT2Ge8pkC0yJnLmphW/YpAz3Vqq+BsZlV/iScKipuUg3IBEZkH41NcD
SDj7nySd5lDolW3NpKfSFzJ7BW2jA866Ut3DzGXDK808uzXrMqH4939qNG4YW+ZV
5u1O0S5Y3OeC22Pd2MdMmsGk533sRxFnRtnwwaGjHg9xfZ5s61wo2/JIikunN0hJ
3deV4ed9izaLMnv2cfXta850K5DsAlxADdpCXbLObG8s+hu7Y8Q0KNVC6TDRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqinw1fHfUFW8BqfH8gxvyKuJH2MwHwYDVR0j
BBgwFoAU+JrKedOAp2vE3IQJN1q9dzFPD1AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29MNlRhU3FGUU40U2QxWkdCVXBYQmNmblh0TExDZWJBRkNMU0dWd2hG
UnYvMC9GODlBQ0E3OUQzODBBNzZCQzREQzg0MDkzNzVBQkQ3NzMxNEYwRjUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y4OUFDQTc5RDM4MEE3NkJD
NERDODQwOTM3NUFCRDc3MzE0RjBGNTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdvTDZUYVNxRlFONFNkMVpHQlVwWEJjZm5YdExMQ2ViQUZDTFNHVndoRlJ2LzAv
MzQzNTJlMzIzMjM0MmUzMjMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNjM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt4OEwDQYJKoZIhvcNAQELBQADggEBACfBbx1S
juxgu1OxLr3QJBo0izNFKj7opOmm6d95dzezDO2mTVkmGv/F033AZW4XrgJALnHI
G3yoZQwicQ1uXt+/aNXnATsPh5SxKT5wFNZSoRyjnyESkaHrcvCC6Z58rpEKyayn
QUuluj9KYWiJ10Us1h9VbsTMevOks2mFD7NDbmGrzjqi8MEqIrf52sfCwuVYoGs/
U8w8+s8V1icbIvazstSGnt0M9Ci1GaIWTV6CVDjbtcecAHqbXvhlOxw9AyIBKM35
86LqkPa5MwmVCJALpMPX4XdRXeQrwQFVuH5+Kq6spEbdIOpDjRqReMLVh5nw8CDq
HTOhuzfbUtle3kA=
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:25:10 2025 by rpki-client