Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230302e302f32342d3234203d3e20323637303732.roa
File:                     34352e3232352e3230302e302f32342d3234203d3e20323637303732.roa (raw, json)
Hash identifier:          jj/MEBSSfdzCPgvIK7w0tZ8JD+y3olMO9wnMhF2yhto=
Subject key identifier:   5E:71:9E:46:CA:C9:C0:33:26:1D:ED:96:EF:F3:7B:5E:7F:69:57:84
Certificate issuer:       /CN=02D248AA52D660570300A2C537102DC174ED8461
Certificate serial:       3039B2ABDC49DEB10BA2D216F4444938E8344829
Authority key identifier: 02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02D248AA52D660570300A2C537102DC174ED8461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230302e302f32342d3234203d3e20323637303732.roa
Signing time:             Thu 09 Nov 2023 18:00:00 +0000
ROA not before:           Thu 09 Nov 2023 17:55:00 +0000
ROA not after:            Thu 07 Nov 2024 18:00:00 +0000
asID:                     267072
IP address blocks:        45.225.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:39:b2:ab:dc:49:de:b1:0b:a2:d2:16:f4:44:49:38:e8:34:48:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D248AA52D660570300A2C537102DC174ED8461
        Validity
            Not Before: Nov  9 17:55:00 2023 GMT
            Not After : Nov  7 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:19:69:84:4d:b3:f3:b1:87:ac:6a:fc:5b:
                    4a:b2:16:f6:3c:c4:db:39:b2:b0:b1:05:f9:3f:ea:
                    32:ea:79:d9:03:f2:40:3f:6a:0a:e0:b9:3f:5d:4d:
                    df:02:ce:74:2b:f3:47:f3:64:a5:58:53:22:9e:46:
                    3d:db:ad:9a:7e:41:b6:f0:1d:e6:f3:0c:60:a1:10:
                    23:92:17:d1:b5:5f:b9:b1:5b:c1:e4:32:23:68:16:
                    ff:53:2e:a3:0f:c6:53:16:fc:b3:b4:03:25:34:48:
                    ab:f2:de:d4:0f:89:ff:6e:e9:28:c7:ba:cb:2a:96:
                    17:c5:60:d5:f2:de:e2:25:07:8f:21:a8:04:92:3d:
                    ef:1b:8c:f8:89:00:93:c6:72:ad:8e:85:7f:6c:22:
                    0f:9c:ce:b4:9d:f6:ef:eb:c1:64:83:09:a0:55:53:
                    85:af:7b:93:9a:f1:a8:16:01:ca:7d:b7:af:f1:6e:
                    0a:45:1f:a7:48:19:53:42:06:48:bc:28:df:d7:8d:
                    c7:b8:93:cd:cb:06:be:8e:c2:cc:4f:69:e6:08:d0:
                    b3:84:55:14:d8:6e:1a:65:86:a9:04:00:1c:1f:de:
                    a0:3f:93:35:e2:c5:87:30:1d:be:bb:27:12:73:5c:
                    b9:f9:4b:88:8b:45:e1:30:1f:67:37:c5:35:d0:c5:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:71:9E:46:CA:C9:C0:33:26:1D:ED:96:EF:F3:7B:5E:7F:69:57:84
            X509v3 Authority Key Identifier:
                keyid:02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/02D248AA52D660570300A2C537102DC174ED8461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02D248AA52D660570300A2C537102DC174ED8461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230302e302f32342d3234203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ef:c4:bb:1b:b3:ca:84:c3:bf:f0:eb:75:b2:9d:13:7c:38:
         90:17:27:ec:98:c3:98:13:bd:b3:e3:c7:e0:2f:dd:71:ba:91:
         30:be:70:1d:2e:ed:e7:d0:72:ee:80:bf:1f:e1:c8:01:c9:c9:
         8a:b5:4a:f6:74:c6:b3:99:11:46:1b:9b:63:fc:3e:8f:06:35:
         bf:02:34:c0:7c:6f:d4:39:f5:d5:05:61:d1:ab:fd:3c:ba:9b:
         48:ec:fe:29:35:10:ec:7a:5f:c5:13:db:08:4b:1f:6d:d1:2d:
         21:3e:da:e6:0b:92:da:81:66:e7:d8:11:f6:ae:ee:9c:d0:f3:
         05:e3:44:57:35:7f:c7:8a:f0:64:19:b1:60:6e:5c:ba:05:59:
         31:30:85:e9:ec:3e:3f:19:87:78:f6:15:3c:aa:a5:7e:9e:ed:
         48:88:2e:a2:aa:ee:ce:08:33:df:6f:9a:95:21:9a:03:0f:cc:
         b5:fe:63:51:b5:c1:f1:5a:e7:40:be:91:ba:1d:79:18:dc:22:
         02:50:da:2a:5e:2a:03:2d:67:6b:db:e4:10:52:0b:81:25:ec:
         09:12:d4:8c:ad:75:a3:61:b0:2c:24:f9:6c:4e:59:ca:e3:ba:
         68:43:ee:3d:6a:19:ec:53:32:90:b3:57:27:a6:31:32:9a:9f:
         8a:68:6f:38
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUMDmyq9xJ3rELotIW9ERJOOg0SCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJEMjQ4QUE1MkQ2NjA1NzAzMDBBMkM1MzcxMDJEQzE3
NEVEODQ2MTAeFw0yMzExMDkxNzU1MDBaFw0yNDExMDcxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQ0QTE5Njk4NDREQjNGM0Ix
ODdBQzZBRkM1QjRBQjIxNkY2M0NDNERCMzlCMkIwQjEwNUY5M0ZFQTMyRUE3OUQ5
MDNGMjQwM0Y2QTBBRTBCOTNGNUQ0RERGMDJDRTc0MkJGMzQ3RjM2NEE1NTg1MzIy
OUU0NjNEREJBRDlBN0U0MUI2RjAxREU2RjMwQzYwQTExMDIzOTIxN0QxQjU1RkI5
QjE1QkMxRTQzMjIzNjgxNkZGNTMyRUEzMEZDNjUzMTZGQ0IzQjQwMzI1MzQ0OEFC
RjJERUQ0MEY4OUZGNkVFOTI4QzdCQUNCMkE5NjE3QzU2MEQ1RjJERUUyMjUwNzhG
MjFBODA0OTIzREVGMUI4Q0Y4ODkwMDkzQzY3MkFEOEU4NTdGNkMyMjBGOUNDRUI0
OURGNkVGRUJDMTY0ODMwOUEwNTU1Mzg1QUY3QjkzOUFGMUE4MTYwMUNBN0RCN0FG
RjE2RTBBNDUxRkE3NDgxOTUzNDIwNjQ4QkMyOERGRDc4REM3Qjg5M0NEQ0IwNkJF
OEVDMkNDNEY2OUU2MDhEMEIzODQ1NTE0RDg2RTFBNjU4NkE5MDQwMDFDMUZERUEw
M0Y5MzM1RTJDNTg3MzAxREJFQkIyNzEyNzM1Q0I5Rjk0Qjg4OEI0NUUxMzAxRjY3
MzdDNTM1RDBDNTEyNTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtEoZaYRNs/Oxh6xq/FtKshb2PMTbObKwsQX5P+oy6nnZA/JAP2oK
4Lk/XU3fAs50K/NH82SlWFMinkY9262afkG28B3m8wxgoRAjkhfRtV+5sVvB5DIj
aBb/Uy6jD8ZTFvyztAMlNEir8t7UD4n/bukox7rLKpYXxWDV8t7iJQePIagEkj3v
G4z4iQCTxnKtjoV/bCIPnM60nfbv68FkgwmgVVOFr3uTmvGoFgHKfbev8W4KRR+n
SBlTQgZIvCjf143HuJPNywa+jsLMT2nmCNCzhFUU2G4aZYapBAAcH96gP5M14sWH
MB2+uycSc1y5+UuIi0XhMB9nN8U10MUSVQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FF5xnkbKycAzJh3tlu/ze15/aVeEMB8GA1UdIwQYMBaAFALSSKpS1mBXAwCixTcQ
LcF07YRhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NxeUNHb1AzTGRuZEJa
enJZVkZoMkQxUHExSnp4V1BHTnNtYlQ4ZFQ5Q3BlLzAvMDJEMjQ4QUE1MkQ2NjA1
NzAzMDBBMkM1MzcxMDJEQzE3NEVEODQ2MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wMkQyNDhBQTUyRDY2MDU3MDMwMEEyQzUzNzEwMkRDMTc0RUQ4
NDYxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcXlDR29QM0xkbmRCWnpyWVZG
aDJEMVBxMUp6eFdQR05zbWJUOGRUOUNwZS8wLzM0MzUyZTMyMzIzNTJlMzIzMDMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzAzNzMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LeHIMA0GCSqGSIb3DQEBCwUAA4IBAQCH78S7G7PKhMO/8Ot1sp0TfDiQFyfsmMOY
E72z48fgL91xupEwvnAdLu3n0HLugL8f4cgBycmKtUr2dMazmRFGG5tj/D6PBjW/
AjTAfG/UOfXVBWHRq/08uptI7P4pNRDsel/FE9sISx9t0S0hPtrmC5LagWbn2BH2
ru6c0PMF40RXNX/HivBkGbFgbly6BVkxMIXp7D4/GYd49hU8qqV+nu1IiC6iqu7O
CDPfb5qVIZoDD8y1/mNRtcHxWudAvpG6HXkY3CICUNoqXioDLWdr2+QQUguBJewJ
EtSMrXWjYbAsJPlsTlnK47poQ+49ahnsUzKQs1cnpjEymp+KaG84
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:25 2025 by rpki-client