Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37382e302f32332d3233203d3e20323636393834.roa
File:                     34352e3232362e37382e302f32332d3233203d3e20323636393834.roa (raw, json)
Hash identifier:          /uuaiSWTgX0Rmlk0oSvtEBW/JPvydBcFoQDaA9SqmDA=
Subject key identifier:   CF:D6:67:C4:06:C0:89:9D:24:D7:F6:31:95:70:43:3F:FE:5C:B2:2D
Certificate issuer:       /CN=A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF
Certificate serial:       4BD6354F3D37E0A191F451F335ACC9776164BD91
Authority key identifier: A0:DF:EF:14:E3:F2:CB:DD:1D:3E:4A:85:DD:8E:9E:66:94:FC:CE:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37382e302f32332d3233203d3e20323636393834.roa
Signing time:             Mon 19 Dec 2022 17:46:24 +0000
ROA not before:           Mon 19 Dec 2022 17:41:24 +0000
ROA not after:            Mon 18 Dec 2023 17:46:24 +0000
asID:                     266984
IP address blocks:        45.226.78.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d6:35:4f:3d:37:e0:a1:91:f4:51:f3:35:ac:c9:77:61:64:bd:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF
        Validity
            Not Before: Dec 19 17:41:24 2022 GMT
            Not After : Dec 18 17:46:24 2023 GMT
        Subject: CN=CFD667C406C0899D24D7F6319570433FFE5CB22D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ef:e6:2a:8d:05:78:86:2b:83:6b:62:b5:8b:
                    bc:4c:e2:dc:f5:1c:85:cf:ba:41:84:3d:a1:6d:be:
                    30:4a:de:8e:85:2d:bf:f4:23:ea:56:2e:23:fe:21:
                    ad:11:96:23:f4:cd:0a:0c:52:00:7a:8d:1a:c3:55:
                    19:1d:c1:50:2b:34:15:70:0f:c8:41:5f:82:73:c0:
                    3c:88:4c:76:fe:11:e2:22:36:68:7c:77:e5:26:85:
                    ab:d1:7b:a9:86:fe:d7:02:36:7b:a7:b8:2a:50:d3:
                    00:ec:12:c8:6e:f2:18:0c:36:27:85:7d:37:31:93:
                    54:c1:41:88:aa:79:8b:96:bd:8a:4a:82:ef:e6:5b:
                    90:e9:e6:65:f3:5c:8c:5c:4b:66:4f:e3:53:19:de:
                    fa:4f:01:6a:5b:03:5e:13:fa:50:72:4b:7a:67:90:
                    bf:84:9a:5a:51:8c:57:33:09:04:05:2d:15:27:fd:
                    f8:99:18:cf:a5:28:c2:34:6f:fa:dc:8c:54:cb:13:
                    ed:01:43:f6:f8:85:0c:9a:12:98:7a:fd:cb:25:b7:
                    f1:d9:ab:f0:83:b5:40:0f:9f:9d:af:50:06:6d:75:
                    cc:64:4c:74:c7:07:c2:dd:be:3b:15:b9:3c:b6:2b:
                    06:b6:94:e8:10:45:2b:28:a4:fb:87:9f:1e:14:d2:
                    08:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D6:67:C4:06:C0:89:9D:24:D7:F6:31:95:70:43:3F:FE:5C:B2:2D
            X509v3 Authority Key Identifier:
                keyid:A0:DF:EF:14:E3:F2:CB:DD:1D:3E:4A:85:DD:8E:9E:66:94:FC:CE:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/34352e3232362e37382e302f32332d3233203d3e20323636393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:3f:16:8f:65:f4:e2:d9:53:ae:26:d5:e9:df:41:ca:6b:f6:
         ef:13:9c:c3:be:48:3e:3a:6f:3c:9f:a0:8d:94:f3:76:64:fa:
         f9:26:5e:ef:97:9f:df:ac:03:dd:ba:65:0a:32:02:3f:1a:e7:
         70:05:30:4b:7d:30:21:f1:63:b6:e2:e4:8f:23:0f:9b:ee:8f:
         e5:64:27:b1:f2:6e:ee:35:ec:dc:ad:df:36:0d:e9:84:bf:bd:
         70:49:fb:5d:5d:2d:51:0f:91:00:22:20:5c:8d:a1:31:7a:ea:
         2d:87:b9:d1:8e:ed:8b:50:4c:28:42:00:bd:d7:ce:51:75:6e:
         53:e7:4b:62:25:18:95:9e:6c:7e:68:13:34:e5:af:75:08:d0:
         ff:ca:39:64:aa:96:f8:b4:d5:7e:82:25:6b:6c:00:86:95:4d:
         1b:7b:d1:5a:e5:24:74:cf:a4:16:e4:dc:92:97:92:23:8e:d6:
         e2:ec:1a:e7:8a:68:36:37:6f:46:a1:d9:c0:7f:e9:8b:d0:57:
         0d:b3:33:1b:3a:ce:58:64:63:06:9a:c0:71:39:3d:10:8b:ca:
         b2:7d:b5:5d:63:5d:83:a5:b5:c1:95:97:55:32:63:2e:b6:00:
         ca:da:1f:85:d9:af:20:13:a9:da:29:4e:35:81:47:5f:99:1a:
         ca:42:3c:db
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUS9Y1Tz034KGR9FHzNazJd2FkvZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBERkVGMTRFM0YyQ0JERDFEM0U0QTg1REQ4RTlFNjY5
NEZDQ0VERjAeFw0yMjEyMTkxNzQxMjRaFw0yMzEyMTgxNzQ2MjRaMDMxMTAvBgNV
BAMTKENGRDY2N0M0MDZDMDg5OUQyNEQ3RjYzMTk1NzA0MzNGRkU1Q0IyMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7+YqjQV4hiuDa2K1i7xM4tz1
HIXPukGEPaFtvjBK3o6FLb/0I+pWLiP+Ia0RliP0zQoMUgB6jRrDVRkdwVArNBVw
D8hBX4JzwDyITHb+EeIiNmh8d+UmhavRe6mG/tcCNnunuCpQ0wDsEshu8hgMNieF
fTcxk1TBQYiqeYuWvYpKgu/mW5Dp5mXzXIxcS2ZP41MZ3vpPAWpbA14T+lByS3pn
kL+EmlpRjFczCQQFLRUn/fiZGM+lKMI0b/rcjFTLE+0BQ/b4hQyaEph6/cslt/HZ
q/CDtUAPn52vUAZtdcxkTHTHB8LdvjsVuTy2Kwa2lOgQRSsopPuHnx4U0gh7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUz9ZnxAbAiZ0k1/YxlXBDP/5csi0wHwYDVR0j
BBgwFoAUoN/vFOPyy90dPkqF3Y6eZpT8zt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJjY1k5ajNOTEh5U2JaZmkxRXREbVZqRzVhMnJQS0VVYVB6eU54dGhN
dEYvMC9BMERGRUYxNEUzRjJDQkREMUQzRTRBODVERDhFOUU2Njk0RkNDRURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwREZFRjE0RTNGMkNCREQx
RDNFNEE4NUREOEU5RTY2OTRGQ0NFREYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JSY2NZOWozTkxIeVNiWmZpMUV0RG1Wakc1YTJyUEtFVWFQenlOeHRoTXRGLzAv
MzQzNTJlMzIzMjM2MmUzNzM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2
MzkzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeJOMA0GCSqGSIb3DQEBCwUAA4IBAQCUPxaPZfTi
2VOuJtXp30HKa/bvE5zDvkg+Om88n6CNlPN2ZPr5Jl7vl5/frAPdumUKMgI/Gudw
BTBLfTAh8WO24uSPIw+b7o/lZCex8m7uNezcrd82DemEv71wSftdXS1RD5EAIiBc
jaExeuoth7nRju2LUEwoQgC9185RdW5T50tiJRiVnmx+aBM05a91CND/yjlkqpb4
tNV+giVrbACGlU0be9Fa5SR0z6QW5NySl5Ijjtbi7Brnimg2N29GodnAf+mL0FcN
szMbOs5YZGMGmsBxOT0Qi8qyfbVdY12DpbXBlZdVMmMutgDK2h+F2a8gE6naKU41
gUdfmRrKQjzb
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:12:38 2025 by rpki-client