Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37342e302f32342d3234203d3e20323638333238.roa
File:                     34352e3233382e37342e302f32342d3234203d3e20323638333238.roa (raw, json)
Hash identifier:          LYgqIWyNbWjNMwVPi+/kXUjE2W42eBLvEuwL03Um6tM=
Subject key identifier:   67:B8:09:E2:61:D0:2A:95:8C:FF:A1:4B:32:ED:4D:2F:39:7D:31:5A
Certificate issuer:       /CN=B20C19BE837487F270BE3762AA874E14A967E6EC
Certificate serial:       18BB36DB367C313E590BCB76E08291E6F4E2792C
Authority key identifier: B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37342e302f32342d3234203d3e20323638333238.roa
Signing time:             Thu 11 Apr 2024 16:43:47 +0000
ROA not before:           Thu 11 Apr 2024 16:38:47 +0000
ROA not after:            Thu 10 Apr 2025 16:43:47 +0000
asID:                     268328
IP address blocks:        45.238.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bb:36:db:36:7c:31:3e:59:0b:cb:76:e0:82:91:e6:f4:e2:79:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B20C19BE837487F270BE3762AA874E14A967E6EC
        Validity
            Not Before: Apr 11 16:38:47 2024 GMT
            Not After : Apr 10 16:43:47 2025 GMT
        Subject: CN=67B809E261D02A958CFFA14B32ED4D2F397D315A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:5c:7e:da:ed:d0:1c:4d:fd:fb:22:8e:06:
                    15:ef:a9:72:ea:3e:09:c5:ec:d8:7a:f2:d4:9e:b4:
                    6b:c3:e2:fb:f7:39:55:0e:33:50:97:89:a9:6a:64:
                    d1:12:6d:51:2d:cd:9a:c4:2a:23:63:7b:ab:f4:fb:
                    ed:f7:28:2e:ce:40:5e:20:79:95:aa:1e:a3:92:94:
                    a0:84:34:eb:02:8a:8d:13:c8:cb:7f:b4:44:88:7d:
                    23:d7:62:75:50:87:0f:77:57:15:ec:24:80:a5:03:
                    6d:1e:30:de:f3:41:d6:1b:23:77:b7:5a:d2:d1:21:
                    fb:fa:12:e3:98:f0:83:e1:0d:07:17:1d:de:8e:48:
                    5e:6e:aa:17:72:9e:82:81:b0:4c:52:95:ab:b1:66:
                    b3:a5:b9:e1:98:90:a2:e3:55:4d:f2:69:cd:41:f1:
                    7f:04:4f:bc:3d:7b:54:a5:10:05:8e:52:66:3a:f4:
                    f9:1e:2a:9a:4b:f3:28:ef:2b:67:8d:82:e5:84:6a:
                    31:8b:a3:42:70:6f:92:fa:2b:fe:ad:bb:9d:13:f4:
                    e6:b0:23:50:a5:fa:ae:af:1e:2d:fb:99:c2:82:39:
                    6a:ac:e2:40:3e:0d:26:9d:f2:b3:f9:88:d5:9c:bf:
                    91:58:3c:64:26:9a:c7:9e:f4:0e:44:2d:93:e7:6c:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B8:09:E2:61:D0:2A:95:8C:FF:A1:4B:32:ED:4D:2F:39:7D:31:5A
            X509v3 Authority Key Identifier:
                keyid:B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/B20C19BE837487F270BE3762AA874E14A967E6EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37342e302f32342d3234203d3e20323638333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:af:35:0f:bf:cd:aa:15:1c:fc:b0:b1:bd:ad:82:47:15:
         4d:67:12:30:fe:91:d9:f1:81:70:41:a5:a4:26:c2:3e:18:2e:
         af:08:46:e2:a0:c0:b7:5c:c1:d0:5d:f5:54:b4:4b:8c:89:f5:
         17:be:49:07:2a:e4:06:23:9d:b3:ef:73:7f:a4:19:3c:33:58:
         8f:41:d1:79:4a:aa:4c:ac:43:1f:17:9c:fd:97:cd:6a:3c:9e:
         61:b4:f5:e5:07:aa:75:18:7a:82:98:48:43:b2:2d:5f:6b:5a:
         5f:b9:98:bb:98:e2:35:e7:6d:74:ee:fb:47:94:08:89:fd:50:
         59:ef:4d:68:a4:45:76:27:1e:4f:52:65:b6:b3:e3:1e:89:fd:
         5f:fc:97:74:79:93:e8:59:e7:42:2c:22:2f:8d:b2:77:3c:fc:
         2b:a4:c3:4b:e8:97:bd:58:30:5b:16:21:0f:73:e8:ed:59:5f:
         c0:14:99:82:2d:8d:58:a6:0a:e7:9c:5a:41:68:9a:04:9f:61:
         94:ba:2c:01:d4:28:65:5a:e9:24:7c:3b:3b:d5:4d:72:0b:f2:
         f8:e6:22:79:7b:76:ea:1e:4c:c4:c6:62:a2:89:28:37:ed:f2:
         62:b5:5b:31:03:9e:6a:91:a2:95:46:24:c3:80:37:83:f8:b5:
         e5:3e:d1:56
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGLs22zZ8MT5ZC8t24IKR5vTieSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjIwQzE5QkU4Mzc0ODdGMjcwQkUzNzYyQUE4NzRFMTRB
OTY3RTZFQzAeFw0yNDA0MTExNjM4NDdaFw0yNTA0MTAxNjQzNDdaMDMxMTAvBgNV
BAMTKDY3QjgwOUUyNjFEMDJBOTU4Q0ZGQTE0QjMyRUQ0RDJGMzk3RDMxNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnVx+2u3QHE39+yKOBhXvqXLq
PgnF7Nh68tSetGvD4vv3OVUOM1CXialqZNESbVEtzZrEKiNje6v0++33KC7OQF4g
eZWqHqOSlKCENOsCio0TyMt/tESIfSPXYnVQhw93VxXsJIClA20eMN7zQdYbI3e3
WtLRIfv6EuOY8IPhDQcXHd6OSF5uqhdynoKBsExSlauxZrOlueGYkKLjVU3yac1B
8X8ET7w9e1SlEAWOUmY69PkeKppL8yjvK2eNguWEajGLo0Jwb5L6K/6tu50T9Oaw
I1Cl+q6vHi37mcKCOWqs4kA+DSad8rP5iNWcv5FYPGQmmsee9A5ELZPnbDwjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZ7gJ4mHQKpWM/6FLMu1NLzl9MVowHwYDVR0j
BBgwFoAUsgwZvoN0h/JwvjdiqodOFKln5uwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW9lc3RnZEpXTnBUZXBIRGIxRXc0U3ZSa3BRWXU2QVFvS3JIc1Z0OVYy
TFgvMS9CMjBDMTlCRTgzNzQ4N0YyNzBCRTM3NjJBQTg3NEUxNEE5NjdFNkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyMEMxOUJFODM3NDg3RjI3
MEJFMzc2MkFBODc0RTE0QTk2N0U2RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlvZXN0Z2RKV05wVGVwSERiMUV3NFN2UmtwUVl1NkFRb0tySHNWdDlWMkxYLzEv
MzQzNTJlMzIzMzM4MmUzNzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe5KMA0GCSqGSIb3DQEBCwUAA4IBAQCcfK81D7/N
qhUc/LCxva2CRxVNZxIw/pHZ8YFwQaWkJsI+GC6vCEbioMC3XMHQXfVUtEuMifUX
vkkHKuQGI52z73N/pBk8M1iPQdF5SqpMrEMfF5z9l81qPJ5htPXlB6p1GHqCmEhD
si1fa1pfuZi7mOI152107vtHlAiJ/VBZ701opEV2Jx5PUmW2s+Meif1f/Jd0eZPo
WedCLCIvjbJ3PPwrpMNL6Je9WDBbFiEPc+jtWV/AFJmCLY1YpgrnnFpBaJoEn2GU
uiwB1ChlWukkfDs71U1yC/L45iJ5e3bqHkzExmKiiSg37fJitVsxA55qkaKVRiTD
gDeD+LXlPtFW
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:13:47 2025 by rpki-client