Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34382e302f32332d3233203d3e20323638373933.roa
File:                     34352e3137332e34382e302f32332d3233203d3e20323638373933.roa (raw, json)
Hash identifier:          UMVQlCTysPnOahhzWeUXjE1Nbqs+UZPxnQQiy6HgYJQ=
Subject key identifier:   E1:BC:AE:47:F0:82:1D:6F:11:59:96:2C:B0:05:09:7F:B6:FF:2D:EE
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       2EC1C37D162CDED42EEE9BFE979801D8AF64971A
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34382e302f32332d3233203d3e20323638373933.roa
Signing time:             Mon 13 Jan 2025 18:54:57 +0000
ROA not before:           Mon 13 Jan 2025 18:49:57 +0000
ROA not after:            Mon 12 Jan 2026 18:54:57 +0000
asID:                     268793
IP address blocks:        45.173.48.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c1:c3:7d:16:2c:de:d4:2e:ee:9b:fe:97:98:01:d8:af:64:97:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Jan 13 18:49:57 2025 GMT
            Not After : Jan 12 18:54:57 2026 GMT
        Subject: CN=E1BCAE47F0821D6F1159962CB005097FB6FF2DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:dc:f8:68:56:0e:1a:d8:61:a1:ce:37:a4:
                    bd:e6:19:f4:0b:26:67:5c:7d:16:a3:b4:f9:25:17:
                    d9:00:91:7a:c8:91:9d:4e:5a:ad:63:37:bd:15:71:
                    51:32:a2:fa:8d:a4:4f:82:80:ed:46:00:96:e9:a5:
                    ef:9b:4f:74:13:ea:77:b6:f1:3b:47:77:eb:c0:2e:
                    f9:d1:77:c1:f5:05:f6:4a:e3:08:c9:39:6c:9b:00:
                    27:df:4f:48:ec:b9:7b:57:bc:4d:30:9d:ba:51:db:
                    8f:35:52:24:d6:4d:e2:f5:98:23:ba:6d:c6:d0:f2:
                    68:c7:91:45:74:5f:aa:ba:4d:24:1b:db:ea:8b:2d:
                    81:af:3b:54:71:3f:d1:ea:5b:39:81:06:b2:98:c5:
                    e6:37:c4:7b:57:12:b9:73:fb:ab:39:f5:ad:9e:a7:
                    f8:40:dd:cc:b0:55:25:e0:2c:6c:66:31:a9:01:b5:
                    94:f1:70:f5:7d:8f:9d:35:10:df:c3:b0:be:ae:2c:
                    d4:8b:3e:7e:c7:89:6b:e6:ac:77:03:cb:d1:a1:64:
                    d5:98:79:79:74:80:f5:0f:6a:bd:77:35:68:00:dd:
                    d2:14:04:f9:35:b2:84:8b:0f:e5:34:58:0a:8c:d5:
                    5e:51:ca:97:a4:bb:b9:6c:fd:e4:9f:92:26:d7:1a:
                    4b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BC:AE:47:F0:82:1D:6F:11:59:96:2C:B0:05:09:7F:B6:FF:2D:EE
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34382e302f32332d3233203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:9f:dc:dd:bd:96:4e:19:69:a1:ae:81:9a:cc:73:71:5f:d2:
         fe:d7:a4:30:4e:b3:48:3c:a3:a1:f6:3a:9a:7e:f1:66:74:57:
         f7:48:10:91:5e:75:0c:8f:c7:18:d1:78:59:7a:01:9d:20:7f:
         6f:bc:06:56:20:c9:43:a7:e4:d6:bb:78:33:da:b6:d1:49:be:
         bc:55:0a:0e:72:e2:b7:94:23:3c:24:68:26:7a:18:82:ec:1d:
         46:94:83:18:be:02:d8:1e:96:1c:f5:05:5c:42:9b:b6:b9:75:
         a4:d4:05:7e:62:78:19:a3:74:67:1e:5d:c8:42:02:3a:7e:88:
         6f:a6:38:66:94:58:67:c2:56:85:7a:ba:44:28:02:6b:bb:fc:
         e7:d3:d8:ab:48:db:cc:0e:ae:68:78:56:c5:7c:f6:ba:79:3f:
         72:dd:47:d4:29:92:5e:d8:3c:5c:9c:36:f0:cc:0f:03:ea:6a:
         d0:54:fe:f6:21:b0:73:31:41:55:06:e5:98:14:8b:f5:8f:52:
         da:b5:78:94:c1:b8:ac:fd:52:e7:4d:74:ab:92:a1:da:c1:aa:
         19:b9:11:e8:03:bc:3d:05:90:8d:6a:86:c2:0b:fb:11:4e:36:
         ee:ff:94:f1:1a:79:7c:7f:eb:98:64:2b:8b:94:f8:96:5d:48:
         d5:c3:08:1c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULsHDfRYs3tQu7pv+l5gB2K9klxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI1NDJEMDREN0IwODY2ODlDNkUzRkU3RDc3RjI3MDYx
ODI0RDQ3ODAeFw0yNTAxMTMxODQ5NTdaFw0yNjAxMTIxODU0NTdaMDMxMTAvBgNV
BAMTKEUxQkNBRTQ3RjA4MjFENkYxMTU5OTYyQ0IwMDUwOTdGQjZGRjJERUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZzNz4aFYOGthhoc43pL3mGfQL
JmdcfRajtPklF9kAkXrIkZ1OWq1jN70VcVEyovqNpE+CgO1GAJbppe+bT3QT6ne2
8TtHd+vALvnRd8H1BfZK4wjJOWybACffT0jsuXtXvE0wnbpR2481UiTWTeL1mCO6
bcbQ8mjHkUV0X6q6TSQb2+qLLYGvO1RxP9HqWzmBBrKYxeY3xHtXErlz+6s59a2e
p/hA3cywVSXgLGxmMakBtZTxcPV9j501EN/DsL6uLNSLPn7HiWvmrHcDy9GhZNWY
eXl0gPUPar13NWgA3dIUBPk1soSLD+U0WAqM1V5Rypeku7ls/eSfkibXGkvhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4byuR/CCHW8RWZYssAUJf7b/Le4wHwYDVR0j
BBgwFoAUYlQtBNewhmicbj/n138nBhgk1HgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpLcWlMeHUyUHFtV3F4VVp1b0JCMWtxeHIydWZCcU1SYUhCdnNoZGh0
OWMvMS82MjU0MkQwNEQ3QjA4NjY4OUM2RTNGRTdENzdGMjcwNjE4MjRENDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNTQyRDA0RDdCMDg2Njg5
QzZFM0ZFN0Q3N0YyNzA2MTgyNEQ0NzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6S3FpTHh1MlBxbVdxeFVadW9CQjFrcXhyMnVmQnFNUmFIQnZzaGRodDljLzEv
MzQzNTJlMzEzNzMzMmUzNDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLa0wMA0GCSqGSIb3DQEBCwUAA4IBAQArn9zdvZZO
GWmhroGazHNxX9L+16QwTrNIPKOh9jqafvFmdFf3SBCRXnUMj8cY0XhZegGdIH9v
vAZWIMlDp+TWu3gz2rbRSb68VQoOcuK3lCM8JGgmehiC7B1GlIMYvgLYHpYc9QVc
Qpu2uXWk1AV+YngZo3RnHl3IQgI6fohvpjhmlFhnwlaFerpEKAJru/zn09irSNvM
Dq5oeFbFfPa6eT9y3UfUKZJe2DxcnDbwzA8D6mrQVP72IbBzMUFVBuWYFIv1j1La
tXiUwbis/VLnTXSrkqHawaoZuRHoA7w9BZCNaobCC/sRTjbu/5TxGnl8f+uYZCuL
lPiWXUjVwwgc
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:12:04 2025 by rpki-client