Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa
File:                     34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa (raw, json)
Hash identifier:          BK3UsZG79+wrzBvGJAegOW801kgPf0I8HLvmTsY0nyQ=
Subject key identifier:   22:3C:0B:4F:44:C8:AB:AC:63:F6:F3:C0:63:02:8C:19:4A:F7:B6:6D
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       3B8B10CB54E1D25AAC1C97D629A6CEEE43C9B949
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     269195
IP address blocks:        45.179.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8b:10:cb:54:e1:d2:5a:ac:1c:97:d6:29:a6:ce:ee:43:c9:b9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=223C0B4F44C8ABAC63F6F3C063028C194AF7B66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:d1:09:27:71:69:5f:93:49:d4:01:ec:e7:
                    fa:f3:67:17:b1:13:c4:93:4c:8c:01:9a:ae:3c:18:
                    75:f9:fb:8c:fa:af:e1:6d:16:4f:8a:07:55:c3:b8:
                    c7:23:96:38:38:0e:d6:6b:e6:0a:ba:d6:e8:3b:c4:
                    c6:a7:fc:3c:61:a2:db:5f:20:a0:c0:eb:50:3f:35:
                    26:79:76:94:e6:49:6e:58:0c:c0:9d:2a:24:42:9b:
                    05:d7:0d:23:6f:05:50:a9:22:c7:a5:46:73:84:3d:
                    3e:9a:c3:e0:fa:7a:ee:01:01:d5:ea:9a:d2:d4:9a:
                    eb:8d:bd:71:02:b6:32:64:79:b1:61:12:bb:37:cc:
                    5e:5e:bd:6c:a8:d4:1f:52:f9:7e:b0:62:f4:2c:40:
                    f3:4a:19:50:64:a4:51:94:2d:13:59:0b:43:79:2d:
                    80:57:e5:0f:5f:a4:13:c2:15:b5:74:92:dc:f6:39:
                    c6:7b:d5:0a:d6:cd:42:d6:63:ce:b4:49:dc:3e:c6:
                    30:42:55:e1:7d:49:86:24:f0:b2:ea:70:47:ed:bd:
                    b2:9d:c5:70:8b:28:90:e9:94:06:06:cd:50:66:10:
                    2f:f7:d1:30:43:cd:2b:b6:73:9a:0a:4d:26:dc:8f:
                    36:8f:92:8b:25:d8:b5:eb:44:88:ea:ed:1c:80:bc:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3C:0B:4F:44:C8:AB:AC:63:F6:F3:C0:63:02:8C:19:4A:F7:B6:6D
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:2e:c6:d2:68:af:84:d7:26:e7:21:af:e9:9c:d4:c3:f5:f8:
         b2:69:76:ad:f3:47:39:4c:9f:e6:ad:f0:49:5f:da:eb:f0:68:
         22:2d:f5:b6:14:c3:df:a1:85:5c:bc:95:1e:f7:71:1d:f6:45:
         65:20:4c:aa:a6:24:17:60:1f:70:d7:59:c5:b5:d9:27:71:af:
         f8:e1:b0:8c:cb:21:e2:4b:ae:10:e7:d8:b0:24:a4:05:67:a4:
         49:76:f9:d7:55:1a:7f:36:13:f3:90:35:23:81:26:25:96:37:
         f0:f3:1a:e9:fc:84:9e:52:5e:cb:ee:25:e9:6f:41:16:eb:52:
         cf:6a:c4:9f:94:dd:a4:18:e9:6f:d6:3f:31:2c:4f:e6:05:c5:
         1d:0b:9c:c5:b7:75:b2:63:d9:e1:05:56:aa:d5:8c:0e:db:7c:
         a0:0f:dc:8d:b2:aa:fa:d6:20:e0:af:77:03:9c:6a:e4:fe:7b:
         66:e1:e3:d6:7b:e5:79:86:e9:03:af:2c:06:c9:e7:80:0e:55:
         e5:15:83:6d:39:9e:42:d3:05:d2:74:43:17:2d:99:81:5e:9d:
         2c:f8:23:62:18:51:f9:d7:f9:28:17:6e:ac:ea:f4:0e:35:3f:
         45:5b:0c:2b:eb:09:08:d1:58:1b:4c:53:a1:f2:4a:9e:86:e8:
         40:ab:65:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO4sQy1Th0lqsHJfWKabO7kPJuUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4MjQyRTg1QzZDOEQ1RTBFMTZGQTNGOUI3NUQ3N0ND
RjQ0OEE5RDAeFw0yNTAzMDUxODU1MDJaFw0yNjAzMDQxOTAwMDJaMDMxMTAvBgNV
BAMTKDIyM0MwQjRGNDRDOEFCQUM2M0Y2RjNDMDYzMDI4QzE5NEFGN0I2NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14NEJJ3FpX5NJ1AHs5/rzZxex
E8STTIwBmq48GHX5+4z6r+FtFk+KB1XDuMcjljg4DtZr5gq61ug7xMan/Dxhottf
IKDA61A/NSZ5dpTmSW5YDMCdKiRCmwXXDSNvBVCpIselRnOEPT6aw+D6eu4BAdXq
mtLUmuuNvXECtjJkebFhErs3zF5evWyo1B9S+X6wYvQsQPNKGVBkpFGULRNZC0N5
LYBX5Q9fpBPCFbV0ktz2OcZ71QrWzULWY860Sdw+xjBCVeF9SYYk8LLqcEftvbKd
xXCLKJDplAYGzVBmEC/30TBDzSu2c5oKTSbcjzaPkosl2LXrRIjq7RyAvIn9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIjwLT0TIq6xj9vPAYwKMGUr3tm0wHwYDVR0j
BBgwFoAUVYJC6FxsjV4OFvo/m3XXfM9Eip0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOURBUWQyeTNHZ2FpOFJKRXNMZnRGdHJVYTladkdyeTM5Rk1WWVFQSGtu
TG4vMS81NTgyNDJFODVDNkM4RDVFMEUxNkZBM0Y5Qjc1RDc3Q0NGNDQ4QTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1ODI0MkU4NUM2QzhENUUw
RTE2RkEzRjlCNzVENzdDQ0Y0NDhBOUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlEQVFkMnkzR2dhaThSSkVzTGZ0RnRyVWE5WnZHcnkzOUZNVllRUEhrbkxuLzEv
MzQzNTJlMzEzNzM5MmUzMTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAts74wDQYJKoZIhvcNAQELBQADggEBAEUuxtJo
r4TXJuchr+mc1MP1+LJpdq3zRzlMn+at8Elf2uvwaCIt9bYUw9+hhVy8lR73cR32
RWUgTKqmJBdgH3DXWcW12Sdxr/jhsIzLIeJLrhDn2LAkpAVnpEl2+ddVGn82E/OQ
NSOBJiWWN/DzGun8hJ5SXsvuJelvQRbrUs9qxJ+U3aQY6W/WPzEsT+YFxR0LnMW3
dbJj2eEFVqrVjA7bfKAP3I2yqvrWIOCvdwOcauT+e2bh49Z75XmG6QOvLAbJ54AO
VeUVg205nkLTBdJ0QxctmYFenSz4I2IYUfnX+SgXbqzq9A41P0VbDCvrCQjRWBtM
U6HySp6G6ECrZaI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:10 2025 by rpki-client