Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38372e302f32342d3234203d3e20323637313839.roa
File:                     34352e3233312e38372e302f32342d3234203d3e20323637313839.roa (raw, json)
Hash identifier:          74vea877bsFZfn1ZryKfsl2W9uGaW/mB4mtS+o+NxqU=
Subject key identifier:   1A:A5:64:4B:A2:21:03:7D:D2:7A:F3:B8:E4:38:0D:1A:6B:0D:D9:E9
Certificate issuer:       /CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
Certificate serial:       4D0A1EB9B3D94B18FDC64B84591A3DE68D50F6FB
Authority key identifier: C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38372e302f32342d3234203d3e20323637313839.roa
Signing time:             Mon 07 Feb 2022 12:09:24 +0000
ROA not before:           Mon 07 Feb 2022 12:04:24 +0000
ROA not after:            Mon 06 Feb 2023 12:09:24 +0000
asID:                     267189
IP address blocks:        45.231.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0a:1e:b9:b3:d9:4b:18:fd:c6:4b:84:59:1a:3d:e6:8d:50:f6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
        Validity
            Not Before: Feb  7 12:04:24 2022 GMT
            Not After : Feb  6 12:09:24 2023 GMT
        Subject: CN=1AA5644BA221037DD27AF3B8E4380D1A6B0DD9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:8e:02:cb:ec:e2:73:c7:01:cc:a0:3f:d3:
                    fb:fd:20:1d:6d:86:40:a5:f4:dd:dc:d4:e5:b6:5a:
                    82:f1:2c:c5:2b:fb:3e:56:da:0a:8f:20:70:38:36:
                    8e:cd:48:3c:8d:17:72:6a:99:f5:03:21:87:06:5b:
                    06:b4:13:64:ad:d7:7b:ec:36:d9:e9:78:01:41:57:
                    67:d1:ed:db:cc:cf:a1:5a:16:c3:28:b9:d2:c2:0a:
                    07:0d:26:31:48:a4:1d:92:dc:63:d5:81:3c:4a:e6:
                    bf:3b:93:ac:7a:d6:0b:13:d6:1a:b2:17:b3:27:9a:
                    46:11:04:2b:b3:7f:c7:96:d3:cb:e1:30:74:ed:20:
                    40:13:ae:2c:e3:d4:d5:ed:25:7a:9e:0b:b6:cf:88:
                    c1:df:9a:9e:08:63:c8:19:43:32:3f:63:1c:4b:a8:
                    ad:65:77:49:3f:b1:df:d8:4a:09:c6:58:04:eb:f9:
                    2e:50:40:92:97:38:35:91:af:6a:fb:94:7e:5f:fc:
                    b7:0a:4c:ef:02:2e:92:b1:43:4c:e2:14:3b:cc:d0:
                    82:b8:c2:56:6c:12:f3:b9:6e:33:87:3a:5c:4d:9f:
                    fa:54:3b:23:ec:2b:08:ee:88:17:49:41:02:5b:2d:
                    98:2a:1e:60:99:d6:04:69:93:b8:a1:88:f6:d2:fa:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A5:64:4B:A2:21:03:7D:D2:7A:F3:B8:E4:38:0D:1A:6B:0D:D9:E9
            X509v3 Authority Key Identifier:
                keyid:C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38372e302f32342d3234203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:52:b3:65:c7:56:2c:42:52:4b:da:b7:0c:2f:02:12:8c:ac:
         25:d2:19:1d:da:b3:f4:09:e9:c4:7a:69:c6:d5:2c:37:0f:1a:
         fa:5d:f8:b8:2e:ff:96:d3:62:a1:39:ed:e6:3d:d0:02:76:22:
         7e:c6:b6:26:23:70:bf:20:fd:a9:fc:65:4f:ca:b3:8b:37:17:
         c6:c4:8d:6d:d1:88:20:ca:3c:2d:a0:a9:32:53:8d:d8:02:31:
         9e:55:d9:dc:d6:9b:e3:72:bc:7b:c5:33:a0:c1:e4:34:e7:e0:
         a6:b8:2b:2e:8d:ba:2d:bd:af:b7:be:f3:c3:f3:f4:09:dd:3f:
         c3:9d:00:8f:61:57:8d:4b:e9:88:d0:64:78:c2:8a:8d:e7:80:
         c2:44:81:41:16:8e:5a:53:23:83:a0:6b:fe:e3:5a:45:db:3d:
         33:7c:ee:62:70:1b:76:d4:3e:f9:48:64:b9:ef:59:b2:16:ad:
         cc:7a:b0:f9:fa:a2:16:10:68:87:d4:cf:a5:93:01:6f:84:4f:
         90:f2:a5:df:32:32:2f:bf:69:4c:b2:6d:2b:bd:c4:3a:c4:28:
         6d:b6:75:78:38:2a:88:d6:91:77:d6:7c:31:d9:bd:4e:63:91:
         77:10:7b:a2:cb:78:8a:04:4c:c3:45:0a:aa:da:f7:0c:98:d5:
         64:8c:36:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTQoeubPZSxj9xkuEWRo95o1Q9vswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZEMjIwMTU5RTA4MUJEODlEQ0UzNTY3MjhFMDRDN0VD
MTQ0MURGQjAeFw0yMjAyMDcxMjA0MjRaFw0yMzAyMDYxMjA5MjRaMDMxMTAvBgNV
BAMTKDFBQTU2NDRCQTIyMTAzN0REMjdBRjNCOEU0MzgwRDFBNkIwREQ5RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNz44Cy+zic8cBzKA/0/v9IB1t
hkCl9N3c1OW2WoLxLMUr+z5W2gqPIHA4No7NSDyNF3JqmfUDIYcGWwa0E2St13vs
NtnpeAFBV2fR7dvMz6FaFsMoudLCCgcNJjFIpB2S3GPVgTxK5r87k6x61gsT1hqy
F7MnmkYRBCuzf8eW08vhMHTtIEATrizj1NXtJXqeC7bPiMHfmp4IY8gZQzI/YxxL
qK1ld0k/sd/YSgnGWATr+S5QQJKXODWRr2r7lH5f/LcKTO8CLpKxQ0ziFDvM0IK4
wlZsEvO5bjOHOlxNn/pUOyPsKwjuiBdJQQJbLZgqHmCZ1gRpk7ihiPbS+omRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGqVkS6IhA33SevO45DgNGmsN2ekwHwYDVR0j
BBgwFoAUxtIgFZ4IG9idzjVnKOBMfsFEHfswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUVQS3hCWVNZU2hOd1F4TkpXNlY1cEtIMWtXM0pQb0FhR3dyc2FLNUN5
eEovMC9DNkQyMjAxNTlFMDgxQkQ4OURDRTM1NjcyOEUwNEM3RUMxNDQxREZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2RDIyMDE1OUUwODFCRDg5
RENFMzU2NzI4RTA0QzdFQzE0NDFERkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FFUEt4QllTWVNoTndReE5KVzZWNXBLSDFrVzNKUG9BYUd3cnNhSzVDeXhKLzAv
MzQzNTJlMzIzMzMxMmUzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALedXMA0GCSqGSIb3DQEBCwUAA4IBAQAvUrNlx1Ys
QlJL2rcMLwISjKwl0hkd2rP0CenEemnG1Sw3Dxr6Xfi4Lv+W02KhOe3mPdACdiJ+
xrYmI3C/IP2p/GVPyrOLNxfGxI1t0YggyjwtoKkyU43YAjGeVdnc1pvjcrx7xTOg
weQ05+CmuCsujbotva+3vvPD8/QJ3T/DnQCPYVeNS+mI0GR4woqN54DCRIFBFo5a
UyODoGv+41pF2z0zfO5icBt21D75SGS571myFq3MerD5+qIWEGiH1M+lkwFvhE+Q
8qXfMjIvv2lMsm0rvcQ6xChttnV4OCqI1pF31nwx2b1OY5F3EHuiy3iKBEzDRQqq
2vcMmNVkjDbd
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:36 2025 by rpki-client