Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/34352e3138302e3131352e302f32342d3234203d3e20323731353036.roa
File:                     34352e3138302e3131352e302f32342d3234203d3e20323731353036.roa (raw, json)
Hash identifier:          Goy7sYR6quJdXXJo4xk3mFunnrF9tuOmS1Y/raH7Nvc=
Subject key identifier:   AD:DA:22:54:5C:05:34:CB:A2:9F:80:7B:A6:0D:8C:00:43:D7:87:F8
Certificate issuer:       /CN=9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D
Certificate serial:       7AFDAE8C253520544F24772951520E1C69C0EA76
Authority key identifier: 9E:9B:34:E6:6E:A4:1B:1D:67:A0:A0:3F:CF:EC:C7:46:38:C5:C5:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/34352e3138302e3131352e302f32342d3234203d3e20323731353036.roa
Signing time:             Fri 03 Mar 2023 14:52:00 +0000
ROA not before:           Fri 03 Mar 2023 14:47:00 +0000
ROA not after:            Fri 01 Mar 2024 14:52:00 +0000
asID:                     271506
IP address blocks:        45.180.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fd:ae:8c:25:35:20:54:4f:24:77:29:51:52:0e:1c:69:c0:ea:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D
        Validity
            Not Before: Mar  3 14:47:00 2023 GMT
            Not After : Mar  1 14:52:00 2024 GMT
        Subject: CN=3082010A0282010100C22FAB5BEBC6CE64CAD44C1833C309DDED2DC267CB2E66683F4C621BCB7E31984189D0A4F9A114B784A627DF5A18BC133DFA0FE15531AE21D058828AEF92DDC6B167D2515F27D0AA9552967A0B89CD2EBD8433B91C1765883366F005E741F4EFA4BCCF3571B16E08B4EC94B937D982C44F9829B2F36720DDEBA581C16BF2DE53015B42EB720198EA6440DF0CD0326EA605DB34A200A0BFF515A935C39B1886D3A1942FE1E309C92B3867F0A9C1882D705C293B774ABDF9FC30512559E6749F9DDE3328A9A439AF3B0DC969633795B7809F419B7F70FCEEEBF136F57B94C5E4E3BE73B044353E4ACA42858D0470A609CC01105EFB6BC32AF84E13109ACF4433090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:ab:5b:eb:c6:ce:64:ca:d4:4c:18:33:c3:
                    09:dd:ed:2d:c2:67:cb:2e:66:68:3f:4c:62:1b:cb:
                    7e:31:98:41:89:d0:a4:f9:a1:14:b7:84:a6:27:df:
                    5a:18:bc:13:3d:fa:0f:e1:55:31:ae:21:d0:58:82:
                    8a:ef:92:dd:c6:b1:67:d2:51:5f:27:d0:aa:95:52:
                    96:7a:0b:89:cd:2e:bd:84:33:b9:1c:17:65:88:33:
                    66:f0:05:e7:41:f4:ef:a4:bc:cf:35:71:b1:6e:08:
                    b4:ec:94:b9:37:d9:82:c4:4f:98:29:b2:f3:67:20:
                    dd:eb:a5:81:c1:6b:f2:de:53:01:5b:42:eb:72:01:
                    98:ea:64:40:df:0c:d0:32:6e:a6:05:db:34:a2:00:
                    a0:bf:f5:15:a9:35:c3:9b:18:86:d3:a1:94:2f:e1:
                    e3:09:c9:2b:38:67:f0:a9:c1:88:2d:70:5c:29:3b:
                    77:4a:bd:f9:fc:30:51:25:59:e6:74:9f:9d:de:33:
                    28:a9:a4:39:af:3b:0d:c9:69:63:37:95:b7:80:9f:
                    41:9b:7f:70:fc:ee:eb:f1:36:f5:7b:94:c5:e4:e3:
                    be:73:b0:44:35:3e:4a:ca:42:85:8d:04:70:a6:09:
                    cc:01:10:5e:fb:6b:c3:2a:f8:4e:13:10:9a:cf:44:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:22:54:5C:05:34:CB:A2:9F:80:7B:A6:0D:8C:00:43:D7:87:F8
            X509v3 Authority Key Identifier:
                keyid:9E:9B:34:E6:6E:A4:1B:1D:67:A0:A0:3F:CF:EC:C7:46:38:C5:C5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/34352e3138302e3131352e302f32342d3234203d3e20323731353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:f9:f5:0a:78:9f:b8:03:b4:a9:4b:cc:1e:e1:a8:44:47:96:
         53:4f:f8:53:cb:7b:5c:cc:9a:a5:b3:5f:5e:e2:d3:39:a2:12:
         c1:91:9a:23:53:a0:61:39:07:02:94:20:a8:fe:cc:36:47:8b:
         82:53:f1:79:12:32:a7:45:e5:62:0c:74:82:bb:3b:ea:da:e5:
         e3:98:94:eb:7b:6d:73:64:81:90:ba:38:76:4a:03:a0:5a:cd:
         5e:1c:ca:32:77:d4:83:20:bb:4c:47:32:cc:64:ab:a0:a2:26:
         73:dd:50:63:3b:98:e8:d1:c1:2a:c1:9d:91:21:31:fe:0a:1d:
         67:c5:ac:07:7e:fe:a3:b0:83:ef:19:3b:68:9a:f4:fa:e2:1e:
         c1:42:93:08:d2:62:6a:10:a7:3d:0c:ea:49:96:7f:87:f9:95:
         61:b1:22:d3:78:50:98:92:1b:72:52:04:1a:c8:f9:62:1b:7e:
         d1:4f:61:97:21:73:69:5b:d4:27:8f:59:73:52:b5:9c:7b:fe:
         60:3c:72:28:5f:23:14:80:f3:da:58:06:7c:25:ab:ed:6d:88:
         b3:d5:1d:75:e6:bc:5c:49:2e:49:0c:4b:c8:6b:8c:cb:87:fa:
         e9:a9:13:63:c1:ea:46:d8:32:86:ed:e3:6c:1f:87:fa:df:ae:
         db:f3:99:c5
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUev2ujCU1IFRPJHcpUVIOHGnA6nYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU5QjM0RTY2RUE0MUIxRDY3QTBBMDNGQ0ZFQ0M3NDYz
OEM1QzUwRDAeFw0yMzAzMDMxNDQ3MDBaFw0yNDAzMDExNDUyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzIyRkFCNUJFQkM2Q0U2NENB
RDQ0QzE4MzNDMzA5RERFRDJEQzI2N0NCMkU2NjY4M0Y0QzYyMUJDQjdFMzE5ODQx
ODlEMEE0RjlBMTE0Qjc4NEE2MjdERjVBMThCQzEzM0RGQTBGRTE1NTMxQUUyMUQw
NTg4MjhBRUY5MkREQzZCMTY3RDI1MTVGMjdEMEFBOTU1Mjk2N0EwQjg5Q0QyRUJE
ODQzM0I5MUMxNzY1ODgzMzY2RjAwNUU3NDFGNEVGQTRCQ0NGMzU3MUIxNkUwOEI0
RUM5NEI5MzdEOTgyQzQ0Rjk4MjlCMkYzNjcyMERERUJBNTgxQzE2QkYyREU1MzAx
NUI0MkVCNzIwMTk4RUE2NDQwREYwQ0QwMzI2RUE2MDVEQjM0QTIwMEEwQkZGNTE1
QTkzNUMzOUIxODg2RDNBMTk0MkZFMUUzMDlDOTJCMzg2N0YwQTlDMTg4MkQ3MDVD
MjkzQjc3NEFCREY5RkMzMDUxMjU1OUU2NzQ5RjlEREUzMzI4QTlBNDM5QUYzQjBE
Qzk2OTYzMzc5NUI3ODA5RjQxOUI3RjcwRkNFRUVCRjEzNkY1N0I5NEM1RTRFM0JF
NzNCMDQ0MzUzRTRBQ0E0Mjg1OEQwNDcwQTYwOUNDMDExMDVFRkI2QkMzMkFGODRF
MTMxMDlBQ0Y0NDMzMDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwi+rW+vGzmTK1EwYM8MJ3e0twmfLLmZoP0xiG8t+MZhBidCk+aEU
t4SmJ99aGLwTPfoP4VUxriHQWIKK75LdxrFn0lFfJ9CqlVKWeguJzS69hDO5HBdl
iDNm8AXnQfTvpLzPNXGxbgi07JS5N9mCxE+YKbLzZyDd66WBwWvy3lMBW0LrcgGY
6mRA3wzQMm6mBds0ogCgv/UVqTXDmxiG06GUL+HjCckrOGfwqcGILXBcKTt3Sr35
/DBRJVnmdJ+d3jMoqaQ5rzsNyWljN5W3gJ9Bm39w/O7r8Tb1e5TF5OO+c7BENT5K
ykKFjQRwpgnMARBe+2vDKvhOExCaz0QzCQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FK3aIlRcBTTLop+Ae6YNjABD14f4MB8GA1UdIwQYMBaAFJ6bNOZupBsdZ6CgP8/s
x0Y4xcUNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F4bzFoRkdtYVFiWnI1
c0dMUWp4RnloalFwdVR4Z3hrVkpwQnBKZ3Y2bXVkLzAvOUU5QjM0RTY2RUE0MUIx
RDY3QTBBMDNGQ0ZFQ0M3NDYzOEM1QzUwRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85RTlCMzRFNjZFQTQxQjFENjdBMEEwM0ZDRkVDQzc0NjM4QzVD
NTBELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BeG8xaEZHbWFRYlpyNXNHTFFq
eEZ5aGpRcHVUeGd4a1ZKcEJwSmd2Nm11ZC8wLzM0MzUyZTMxMzgzMDJlMzEzMTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzUzMDM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LbRzMA0GCSqGSIb3DQEBCwUAA4IBAQBN+fUKeJ+4A7SpS8we4ahER5ZTT/hTy3tc
zJqls19e4tM5ohLBkZojU6BhOQcClCCo/sw2R4uCU/F5EjKnReViDHSCuzvq2uXj
mJTre21zZIGQujh2SgOgWs1eHMoyd9SDILtMRzLMZKugoiZz3VBjO5jo0cEqwZ2R
ITH+Ch1nxawHfv6jsIPvGTtomvT64h7BQpMI0mJqEKc9DOpJln+H+ZVhsSLTeFCY
khtyUgQayPliG37RT2GXIXNpW9Qnj1lzUrWce/5gPHIoXyMUgPPaWAZ8JavtbYiz
1R115rxcSS5JDEvIa4zLh/rpqRNjwepG2DKG7eNsH4f6367b85nF
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:08 2025 by rpki-client