Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/34352e342e36342e302f32322d3232203d3e203533303539.roa
File:                     34352e342e36342e302f32322d3232203d3e203533303539.roa (raw, json)
Hash identifier:          o14r1T6jofUz7V/HP8ORmAVJj0NXwKETlW639UCAcsw=
Subject key identifier:   AB:1B:04:85:4B:1A:D8:72:4A:6E:AC:A8:54:B3:24:B5:35:FF:21:5D
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       15776051F0C6FAD9788649D5CD51906D8D022948
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/34352e342e36342e302f32322d3232203d3e203533303539.roa
Signing time:             Tue 13 Sep 2022 09:05:26 +0000
ROA not before:           Tue 13 Sep 2022 09:00:26 +0000
ROA not after:            Tue 12 Sep 2023 09:05:26 +0000
asID:                     53059
IP address blocks:        45.4.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:77:60:51:f0:c6:fa:d9:78:86:49:d5:cd:51:90:6d:8d:02:29:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Sep 13 09:00:26 2022 GMT
            Not After : Sep 12 09:05:26 2023 GMT
        Subject: CN=AB1B04854B1AD8724A6EACA854B324B535FF215D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d1:fd:31:74:11:47:fe:22:04:78:3a:13:ad:
                    eb:7d:f7:b8:9e:a2:18:90:82:61:53:bb:1c:e4:75:
                    80:55:64:30:e9:45:34:89:04:75:57:e0:04:40:d8:
                    46:b8:01:7c:e9:3d:5d:75:7e:10:bf:5f:75:36:12:
                    54:a5:73:c1:15:d6:65:8a:ee:85:5a:df:12:30:2e:
                    e1:ae:aa:6b:81:11:db:cd:61:81:08:ec:66:e4:a8:
                    3f:d3:73:17:7d:5e:fd:71:f4:6a:71:b1:08:87:06:
                    62:85:09:26:cd:ca:e9:27:c4:00:c9:80:f4:a6:27:
                    2b:2b:f5:49:c0:6f:f5:c1:86:cf:fa:7c:55:27:c1:
                    c2:c3:ec:a5:a2:2d:4a:c6:22:49:86:05:4f:13:b5:
                    f7:c6:96:8e:e4:31:83:f7:cc:ee:cf:01:df:06:9e:
                    ad:3a:eb:d8:9d:eb:7a:10:cd:e2:9b:ce:bf:5f:53:
                    3b:21:d4:f8:e8:c1:a0:34:51:3b:3d:8e:85:cb:b1:
                    af:bb:9d:f1:65:45:96:96:dd:7f:98:e9:a8:35:58:
                    16:31:7a:19:9c:72:87:33:39:f5:37:ce:b9:d0:b6:
                    bc:1d:8a:ce:57:8a:fe:04:11:28:76:92:71:9f:d0:
                    1e:0e:df:76:dc:4b:45:f0:f7:75:0e:50:62:ec:55:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1B:04:85:4B:1A:D8:72:4A:6E:AC:A8:54:B3:24:B5:35:FF:21:5D
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/34352e342e36342e302f32322d3232203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:d2:0c:bd:87:34:08:1c:2e:64:76:57:7f:6b:2a:77:86:32:
         c1:0c:8d:a6:25:0e:4b:2a:be:08:a9:01:9c:28:81:13:6c:2c:
         00:f8:79:bb:77:1a:54:95:44:34:19:e0:21:22:78:d7:56:7c:
         1d:2f:d9:d5:00:47:03:cc:3f:ee:6c:1d:f6:85:46:cf:a4:38:
         d6:8d:2e:87:48:96:34:0c:bb:89:5d:32:96:a1:40:e9:7d:5a:
         89:02:08:67:e7:37:33:7f:cc:4a:22:f5:36:47:ab:9b:2b:f7:
         c1:33:59:d4:17:e6:8f:b9:3a:89:fd:d9:58:80:e2:d2:ec:33:
         9a:8d:6f:82:86:f7:1e:4a:a0:40:f6:2f:b2:e7:e0:ca:b5:a2:
         19:89:f2:3c:59:f0:bc:5d:07:00:16:ae:07:2f:83:7b:43:9a:
         69:e9:a0:ee:64:c1:25:f3:e4:74:72:a8:2a:3c:84:c6:8f:d3:
         e5:24:71:ae:85:69:b9:58:e6:48:99:b4:5d:15:aa:f3:ae:55:
         f0:77:35:10:ef:b0:58:15:fb:69:ee:5b:8e:5a:9f:a9:63:16:
         ee:10:e7:45:c9:15:2e:60:8e:a2:e5:3b:99:d7:88:3d:79:58:
         8e:2b:3f:d2:d1:8e:8c:c3:9d:3d:99:0c:7a:a6:bd:78:60:07:
         fd:67:05:90
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUFXdgUfDG+tl4hknVzVGQbY0CKUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI0NUEyMERENzU0MTAyRUI0QzVBREFCRThGREY3QzhG
MzBBRjNFODAeFw0yMjA5MTMwOTAwMjZaFw0yMzA5MTIwOTA1MjZaMDMxMTAvBgNV
BAMTKEFCMUIwNDg1NEIxQUQ4NzI0QTZFQUNBODU0QjMyNEI1MzVGRjIxNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg0f0xdBFH/iIEeDoTret997ie
ohiQgmFTuxzkdYBVZDDpRTSJBHVX4ARA2Ea4AXzpPV11fhC/X3U2ElSlc8EV1mWK
7oVa3xIwLuGuqmuBEdvNYYEI7GbkqD/Tcxd9Xv1x9GpxsQiHBmKFCSbNyuknxADJ
gPSmJysr9UnAb/XBhs/6fFUnwcLD7KWiLUrGIkmGBU8TtffGlo7kMYP3zO7PAd8G
nq0669id63oQzeKbzr9fUzsh1PjowaA0UTs9joXLsa+7nfFlRZaW3X+Y6ag1WBYx
ehmccoczOfU3zrnQtrwdis5Xiv4EESh2knGf0B4O33bcS0Xw93UOUGLsVXAlAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUqxsEhUsa2HJKbqyoVLMktTX/IV0wHwYDVR0j
BBgwFoAU8kWiDddUEC60xa2r6P33yPMK8+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDZNMjRQR2JmY1JGS0hKNVl4dnFaUTdwVUhGUnBKUFRtYVlpMjE5ZXoz
MzYvMC9GMjQ1QTIwREQ3NTQxMDJFQjRDNUFEQUJFOEZERjdDOEYzMEFGM0U4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyNDVBMjBERDc1NDEwMkVC
NEM1QURBQkU4RkRGN0M4RjMwQUYzRTguY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2TTI0UEdiZmNSRktISjVZeHZxWlE3cFVIRlJwSlBUbWFZaTIxOWV6MzM2LzAv
MzQzNTJlMzQyZTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMzMzAzNTM5
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLQRAMA0GCSqGSIb3DQEBCwUAA4IBAQAw0gy9hzQIHC5kdld/
ayp3hjLBDI2mJQ5LKr4IqQGcKIETbCwA+Hm7dxpUlUQ0GeAhInjXVnwdL9nVAEcD
zD/ubB32hUbPpDjWjS6HSJY0DLuJXTKWoUDpfVqJAghn5zczf8xKIvU2R6ubK/fB
M1nUF+aPuTqJ/dlYgOLS7DOajW+ChvceSqBA9i+y5+DKtaIZifI8WfC8XQcAFq4H
L4N7Q5pp6aDuZMEl8+R0cqgqPITGj9PlJHGuhWm5WOZImbRdFarzrlXwdzUQ77BY
Fftp7luOWp+pYxbuEOdFyRUuYI6i5TuZ14g9eViOKz/S0Y6Mw509mQx6pr14YAf9
ZwWQ
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:57:54 2025 by rpki-client