Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa
File:                     34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa (raw, json)
Hash identifier:          Ev7k/0Z/euV4Q2GhoimUlecZQe8xwwzmeRYzoYIJnXA=
Subject key identifier:   4A:03:15:2B:79:41:48:58:93:05:52:CC:F4:73:86:A9:5E:D7:5F:52
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       2E2CC17122AC6D5F0245C7F8E633D08E33B51F0A
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa
Signing time:             Thu 06 Mar 2025 07:25:40 +0000
ROA not before:           Thu 06 Mar 2025 07:20:40 +0000
ROA not after:            Thu 05 Mar 2026 07:25:40 +0000
asID:                     267024
IP address blocks:        45.227.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2c:c1:71:22:ac:6d:5f:02:45:c7:f8:e6:33:d0:8e:33:b5:1f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Mar  6 07:20:40 2025 GMT
            Not After : Mar  5 07:25:40 2026 GMT
        Subject: CN=4A03152B79414858930552CCF47386A95ED75F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:6c:5c:db:62:b5:86:92:8e:13:42:84:ff:
                    2a:6c:2d:ac:6e:7d:0e:43:54:86:5e:85:d9:78:5b:
                    5c:7e:d0:fd:05:3b:63:52:18:88:dc:e5:24:5e:72:
                    18:54:fb:c4:ef:e5:9e:77:14:fa:f6:fe:9d:fd:4d:
                    23:6d:63:2d:ce:2d:31:24:a7:18:4c:8e:41:27:33:
                    66:cf:55:33:87:85:03:b9:62:59:51:2c:93:d8:3e:
                    94:90:6e:d3:0c:ea:f3:49:69:c2:d3:92:8e:af:be:
                    10:62:11:bc:bf:eb:77:ad:68:d6:bc:ea:4e:e1:e7:
                    16:d4:41:af:07:bc:59:d8:8f:c0:11:69:1b:af:f3:
                    8d:6b:71:7e:72:a5:7b:1b:ac:c1:8c:f4:fe:43:ef:
                    e6:b3:1e:32:78:69:76:64:1c:f1:79:e8:8d:cd:29:
                    ef:d6:f1:2e:4e:24:1a:6e:78:0c:79:cc:5a:81:9f:
                    60:ff:d5:9f:ab:88:8b:66:8e:df:52:1a:60:84:4a:
                    2a:ac:41:35:d7:a3:2d:6a:4f:b4:a6:be:62:d9:5e:
                    e6:de:52:ec:a8:b7:7d:91:6b:80:89:25:4f:07:20:
                    cf:9a:a4:52:36:c7:14:d4:b1:c7:5f:2e:91:d8:49:
                    d6:98:63:68:ad:41:82:62:4c:3d:64:84:95:a6:c8:
                    e3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:03:15:2B:79:41:48:58:93:05:52:CC:F4:73:86:A9:5E:D7:5F:52
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:7a:58:e6:af:6d:f0:87:e1:12:d6:b6:c8:a0:3d:12:e7:fe:
         18:13:ae:49:d4:4e:4e:ed:ad:4a:dc:57:86:00:e3:97:bd:85:
         05:76:1e:7b:d3:4a:59:e8:d5:64:be:14:18:20:14:4b:50:23:
         00:76:32:3e:07:21:5b:da:9d:5a:24:35:9c:74:50:9b:5e:ee:
         ff:50:b2:03:09:0f:40:50:1e:ec:cb:3d:54:d8:31:a9:89:da:
         b1:da:f3:7d:c1:84:a2:c5:c7:ab:6e:24:de:f6:34:57:72:2a:
         a2:e7:e2:0e:25:9a:90:22:55:6b:b5:7b:f1:ed:5c:7c:25:2c:
         14:a0:fd:72:01:ab:c3:56:b3:91:14:6f:04:57:e8:f7:32:f8:
         f8:46:79:cf:b5:29:03:27:2c:a8:c2:bb:e2:be:2c:0c:d1:c5:
         79:d6:83:65:a6:d7:f7:d3:ab:ad:c9:dc:b9:30:69:db:6b:81:
         7b:2e:4b:b4:c3:f9:53:54:4b:ad:7f:c3:be:4b:10:4a:84:21:
         9d:3a:3b:71:50:5c:5f:4c:26:1f:35:bb:f0:f4:9a:64:14:44:
         93:72:0b:8c:48:71:a3:e1:70:12:69:51:4e:6c:1a:9b:33:43:
         ba:8a:f8:0d:b6:fa:7c:9d:ed:37:1a:50:61:0c:19:f8:79:a6:
         aa:62:15:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULizBcSKsbV8CRcf45jPQjjO1HwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMwQzE2RUEzQTNCODI2NTAxRDAyQUMyRTYyRUY5QTFD
RDk3MTIwQzAeFw0yNTAzMDYwNzIwNDBaFw0yNjAzMDUwNzI1NDBaMDMxMTAvBgNV
BAMTKDRBMDMxNTJCNzk0MTQ4NTg5MzA1NTJDQ0Y0NzM4NkE5NUVENzVGNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKmxc22K1hpKOE0KE/ypsLaxu
fQ5DVIZehdl4W1x+0P0FO2NSGIjc5SRechhU+8Tv5Z53FPr2/p39TSNtYy3OLTEk
pxhMjkEnM2bPVTOHhQO5YllRLJPYPpSQbtMM6vNJacLTko6vvhBiEby/63etaNa8
6k7h5xbUQa8HvFnYj8ARaRuv841rcX5ypXsbrMGM9P5D7+azHjJ4aXZkHPF56I3N
Ke/W8S5OJBpueAx5zFqBn2D/1Z+riItmjt9SGmCESiqsQTXXoy1qT7SmvmLZXube
Uuyot32Ra4CJJU8HIM+apFI2xxTUscdfLpHYSdaYY2itQYJiTD1khJWmyOPfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSgMVK3lBSFiTBVLM9HOGqV7XX1IwHwYDVR0j
BBgwFoAU3AwW6jo7gmUB0CrC5i75oc2XEgwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZ3dEM1b2g0OFpqR2FFS211SFJEUmo0Y05VN3M0U3ZhVXY2dnd0V3Vn
MU4vMS9EQzBDMTZFQTNBM0I4MjY1MDFEMDJBQzJFNjJFRjlBMUNEOTcxMjBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMEMxNkVBM0EzQjgyNjUw
MUQwMkFDMkU2MkVGOUExQ0Q5NzEyMEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGd3RDNW9oNDhaakdhRUttdUhSRFJqNGNOVTdzNFN2YVV2NnZ3dFd1ZzFOLzEv
MzQzNTJlMzIzMjM3MmUzMTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt43IwDQYJKoZIhvcNAQELBQADggEBAD56WOav
bfCH4RLWtsigPRLn/hgTrknUTk7trUrcV4YA45e9hQV2HnvTSlno1WS+FBggFEtQ
IwB2Mj4HIVvanVokNZx0UJte7v9QsgMJD0BQHuzLPVTYMamJ2rHa833BhKLFx6tu
JN72NFdyKqLn4g4lmpAiVWu1e/HtXHwlLBSg/XIBq8NWs5EUbwRX6Pcy+PhGec+1
KQMnLKjCu+K+LAzRxXnWg2Wm1/fTq63J3LkwadtrgXsuS7TD+VNUS61/w75LEEqE
IZ06O3FQXF9MJh81u/D0mmQURJNyC4xIcaPhcBJpUU5sGpszQ7qK+A22+nyd7Tca
UGEMGfh5pqpiFZI=
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:37:21 2025 by rpki-client