Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa
File:                     34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (raw, json)
Hash identifier:          ck/wto6hC7sNi0OXu5AMM3yal24R06TFa53ZEY3XJLQ=
Subject key identifier:   B2:C4:9A:03:77:DF:0A:B6:E5:10:EA:0B:F9:3C:06:1D:2A:C5:29:D5
Certificate issuer:       /CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
Certificate serial:       7210A7CD04F216C3FDF3D94249012B0A95F73B75
Authority key identifier: 7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa
Signing time:             Wed 20 Mar 2024 18:37:08 +0000
ROA not before:           Wed 20 Mar 2024 18:32:08 +0000
ROA not after:            Wed 19 Mar 2025 18:37:08 +0000
asID:                     269647
IP address blocks:        45.190.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:10:a7:cd:04:f2:16:c3:fd:f3:d9:42:49:01:2b:0a:95:f7:3b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
        Validity
            Not Before: Mar 20 18:32:08 2024 GMT
            Not After : Mar 19 18:37:08 2025 GMT
        Subject: CN=B2C49A0377DF0AB6E510EA0BF93C061D2AC529D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a1:ef:ba:cc:4c:e8:b4:fd:09:a9:65:e6:4f:
                    00:10:8e:62:21:fa:98:58:5c:7b:8f:0d:dc:a2:36:
                    72:ec:4b:67:75:2f:06:c1:66:9b:fb:d2:57:e0:20:
                    e9:aa:fb:50:e3:e8:a1:9d:9a:50:a7:13:71:68:df:
                    2e:f1:31:9c:e3:3d:47:e1:f4:7c:d8:3b:82:15:fd:
                    42:32:a6:08:11:04:a2:fb:3e:ec:f3:c2:2d:a5:44:
                    32:dc:f1:55:d4:d6:49:9d:66:9b:96:dd:76:a2:b8:
                    3e:37:74:4c:aa:c7:d0:bd:62:06:b2:0a:bc:54:d3:
                    e6:e7:31:61:3e:27:f2:b6:3b:7e:78:45:1a:90:84:
                    06:af:f7:08:30:d9:42:23:e3:91:b7:4b:35:6f:e2:
                    5c:cc:cb:31:98:7f:03:14:41:39:69:ca:0b:44:8b:
                    96:a8:b2:00:ba:2e:55:7a:1c:6f:98:46:1e:11:54:
                    9c:e1:12:ca:12:15:49:25:6f:c1:ab:fa:b5:00:c9:
                    ed:1e:ca:fb:43:d7:f3:7d:08:fd:8b:17:6e:48:f6:
                    0a:56:80:b4:0a:bb:87:04:af:c8:48:5f:3f:d0:78:
                    12:aa:1a:69:dd:b2:78:33:6d:0a:1e:34:02:ae:7a:
                    06:4f:30:04:71:c5:4c:16:d2:50:50:16:11:4f:ea:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C4:9A:03:77:DF:0A:B6:E5:10:EA:0B:F9:3C:06:1D:2A:C5:29:D5
            X509v3 Authority Key Identifier:
                keyid:7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:8a:4a:91:a7:0a:a1:a5:dd:a3:06:05:74:93:24:a8:78:e2:
         6c:e6:d8:ce:00:e4:aa:42:f2:d4:8c:13:28:ac:86:b5:05:2e:
         d0:b1:66:41:51:cb:63:17:6a:3f:8e:98:ae:3d:30:97:ec:70:
         0e:13:71:6b:15:a2:99:55:bd:c5:29:fc:0f:ac:8c:66:d8:4f:
         a5:7c:71:8e:fe:3e:05:90:b5:09:91:5d:59:3f:5d:b1:2a:92:
         c6:cf:cf:c6:2b:62:a5:b0:8f:d4:0f:9a:1b:32:29:4f:c8:98:
         8b:e4:20:fb:e1:a8:f2:d0:1e:25:d5:e9:86:4c:77:6c:8f:1e:
         57:b9:24:cc:c1:90:22:07:97:2b:1d:65:d9:2a:24:28:ff:61:
         85:06:37:26:28:8b:da:f2:c7:80:4d:e4:3a:9a:84:8e:4b:0d:
         70:40:8e:63:91:f3:82:b3:9b:ab:d8:ae:2a:fb:bf:70:72:bc:
         56:4e:40:fe:0b:6b:5e:d4:4c:32:a2:b7:50:d4:23:72:3f:ee:
         d9:e9:8b:21:10:0a:5c:be:dc:f7:9f:8d:d9:94:fc:ee:af:39:
         7e:a0:78:03:bb:d3:41:2e:25:dc:8b:62:23:bd:2b:8b:c5:93:
         b9:4e:41:fb:6d:eb:a1:24:57:68:64:b5:58:ba:b0:8d:6e:94:
         5d:7c:d3:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUchCnzQTyFsP989lCSQErCpX3O3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZDQkQ3RTVGQkVFOTc1ODE1MTc2ODA1RDBDQzZFQjc1
QTM2RjQwQjAeFw0yNDAzMjAxODMyMDhaFw0yNTAzMTkxODM3MDhaMDMxMTAvBgNV
BAMTKEIyQzQ5QTAzNzdERjBBQjZFNTEwRUEwQkY5M0MwNjFEMkFDNTI5RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmoe+6zEzotP0JqWXmTwAQjmIh
+phYXHuPDdyiNnLsS2d1LwbBZpv70lfgIOmq+1Dj6KGdmlCnE3Fo3y7xMZzjPUfh
9HzYO4IV/UIypggRBKL7Puzzwi2lRDLc8VXU1kmdZpuW3XaiuD43dEyqx9C9Ygay
CrxU0+bnMWE+J/K2O354RRqQhAav9wgw2UIj45G3SzVv4lzMyzGYfwMUQTlpygtE
i5aosgC6LlV6HG+YRh4RVJzhEsoSFUklb8Gr+rUAye0eyvtD1/N9CP2LF25I9gpW
gLQKu4cEr8hIXz/QeBKqGmndsngzbQoeNAKuegZPMARxxUwW0lBQFhFP6i3TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUssSaA3ffCrblEOoL+TwGHSrFKdUwHwYDVR0j
BBgwFoAUf8vX5fvul1gVF2gF0Mxut1o29AswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFRGOFdYR0hXZVBkekZNOUEzanU4VGVnNUNSUHM0THFVS2NXelZhcXBR
TDUvMC83RkNCRDdFNUZCRUU5NzU4MTUxNzY4MDVEMENDNkVCNzVBMzZGNDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGQ0JEN0U1RkJFRTk3NTgx
NTE3NjgwNUQwQ0M2RUI3NUEzNkY0MEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhURjhXWEdIV2VQZHpGTTlBM2p1OFRlZzVDUlBzNExxVUtjV3pWYXFwUUw1LzAv
MzQzNTJlMzEzOTMwMmUzMTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNjM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtvokwDQYJKoZIhvcNAQELBQADggEBAC2KSpGn
CqGl3aMGBXSTJKh44mzm2M4A5KpC8tSMEyishrUFLtCxZkFRy2MXaj+OmK49MJfs
cA4TcWsVoplVvcUp/A+sjGbYT6V8cY7+PgWQtQmRXVk/XbEqksbPz8YrYqWwj9QP
mhsyKU/ImIvkIPvhqPLQHiXV6YZMd2yPHle5JMzBkCIHlysdZdkqJCj/YYUGNyYo
i9ryx4BN5DqahI5LDXBAjmOR84Kzm6vYrir7v3ByvFZOQP4La17UTDKit1DUI3I/
7tnpiyEQCly+3PefjdmU/O6vOX6geAO700EuJdyLYiO9K4vFk7lOQftt66EkV2hk
tVi6sI1ulF18050=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:51 2025 by rpki-client