Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/34352e3139312e3133322e302f32332d3233203d3e20323639363732.roa
File:                     34352e3139312e3133322e302f32332d3233203d3e20323639363732.roa (raw, json)
Hash identifier:          SDTgIQOBTsNyRYUW1mn7InMHgHtX6Ccs+/FKwbnOjP0=
Subject key identifier:   73:D3:E8:68:B3:0D:8C:4F:72:B8:AB:85:FD:9C:77:6B:6E:A9:8D:90
Certificate issuer:       /CN=EA8A97E97E20307979056DE90EAA41CF2EFC84BB
Certificate serial:       65AEE54F72E2448535F8D02190DDDD4DDBBF146D
Authority key identifier: EA:8A:97:E9:7E:20:30:79:79:05:6D:E9:0E:AA:41:CF:2E:FC:84:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/34352e3139312e3133322e302f32332d3233203d3e20323639363732.roa
Signing time:             Tue 29 Oct 2024 14:11:52 +0000
ROA not before:           Tue 29 Oct 2024 14:06:52 +0000
ROA not after:            Tue 28 Oct 2025 14:11:52 +0000
asID:                     269672
IP address blocks:        45.191.132.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ae:e5:4f:72:e2:44:85:35:f8:d0:21:90:dd:dd:4d:db:bf:14:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8A97E97E20307979056DE90EAA41CF2EFC84BB
        Validity
            Not Before: Oct 29 14:06:52 2024 GMT
            Not After : Oct 28 14:11:52 2025 GMT
        Subject: CN=73D3E868B30D8C4F72B8AB85FD9C776B6EA98D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:e4:97:0f:9a:bf:93:82:88:d2:0e:5e:23:
                    45:2b:38:f7:e2:f1:a4:79:18:0b:ae:c4:71:b5:9d:
                    25:a6:f4:52:63:b1:77:f6:7a:6d:fa:70:b4:af:10:
                    2f:1d:0e:2b:1d:20:d0:cc:84:7a:ae:3c:40:4c:de:
                    10:1a:64:08:19:29:60:8b:fc:69:c4:98:06:7b:6f:
                    0e:2d:9d:a7:70:fb:77:8c:0b:d0:82:7e:80:72:4b:
                    96:ef:8e:0e:63:5d:0b:91:39:f5:c0:1d:1d:2e:ab:
                    51:4a:c8:ac:fc:fb:23:fc:af:c8:1d:3b:6d:54:73:
                    60:5f:51:6c:79:3d:e8:61:26:29:93:89:16:2e:01:
                    94:8f:eb:56:05:dc:3d:40:0c:73:7a:3e:c1:d9:5f:
                    ef:64:0a:fe:cb:84:7c:07:0c:71:2b:ea:8c:aa:6d:
                    f7:0b:c9:c0:07:74:89:52:45:5d:45:b4:04:4f:a8:
                    da:32:ea:20:6a:e5:b0:75:69:35:d5:f8:ba:e0:1e:
                    07:7b:cf:35:df:17:d3:e0:ae:cf:54:b1:4e:c4:6b:
                    bb:3b:00:22:44:9b:52:dd:d4:4a:f2:20:d0:cb:69:
                    23:55:8f:98:94:9d:ba:08:f9:74:01:51:11:33:8d:
                    6d:f9:f2:5d:26:10:7c:74:71:39:da:02:c7:4e:ee:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D3:E8:68:B3:0D:8C:4F:72:B8:AB:85:FD:9C:77:6B:6E:A9:8D:90
            X509v3 Authority Key Identifier:
                keyid:EA:8A:97:E9:7E:20:30:79:79:05:6D:E9:0E:AA:41:CF:2E:FC:84:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8A97E97E20307979056DE90EAA41CF2EFC84BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/34352e3139312e3133322e302f32332d3233203d3e20323639363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:4d:0e:88:9b:57:6d:6f:6b:b2:6a:4c:ea:a8:4b:77:7d:63:
         bc:ed:46:4a:1c:37:36:dc:e8:67:3f:73:b9:cf:7e:53:73:fa:
         c5:ec:99:e4:bc:63:35:b4:9c:2d:8b:e3:12:43:99:bb:2a:61:
         bd:a1:15:e7:df:d7:7d:bc:05:5f:b5:51:0f:3c:50:60:3e:49:
         90:ea:ff:dd:58:b7:9b:c5:c3:23:06:89:dc:50:c9:e5:2e:cb:
         da:e4:14:b0:52:b1:93:c7:69:df:d4:11:bc:86:94:1c:38:21:
         08:24:48:5f:4c:71:dc:b6:55:98:da:b2:6e:fa:b3:3c:38:49:
         2f:19:82:b7:da:28:93:89:f3:55:db:fd:7e:26:62:d5:d3:a9:
         6c:bc:ff:21:3c:2d:29:5b:22:11:a1:e9:d9:e5:82:e2:06:56:
         d8:62:f7:a8:20:60:1d:0a:44:dd:0f:98:6d:6d:05:63:f8:82:
         85:67:38:0b:17:69:03:4f:3c:26:4c:51:5d:ce:c7:82:e7:f5:
         ff:f3:14:78:fb:9b:d7:1f:02:78:ed:c3:8a:fe:ad:14:f6:ae:
         dc:09:86:d1:06:98:75:51:36:f7:4c:e9:1d:e5:67:0d:5a:cf:
         5b:c9:d0:54:e2:fa:51:68:19:4d:db:0d:4c:65:f8:b8:a8:1a:
         ce:eb:35:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZa7lT3LiRIU1+NAhkN3dTdu/FG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE4QTk3RTk3RTIwMzA3OTc5MDU2REU5MEVBQTQxQ0Yy
RUZDODRCQjAeFw0yNDEwMjkxNDA2NTJaFw0yNTEwMjgxNDExNTJaMDMxMTAvBgNV
BAMTKDczRDNFODY4QjMwRDhDNEY3MkI4QUI4NUZEOUM3NzZCNkVBOThEOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Q+SXD5q/k4KI0g5eI0UrOPfi
8aR5GAuuxHG1nSWm9FJjsXf2em36cLSvEC8dDisdINDMhHquPEBM3hAaZAgZKWCL
/GnEmAZ7bw4tnadw+3eMC9CCfoByS5bvjg5jXQuROfXAHR0uq1FKyKz8+yP8r8gd
O21Uc2BfUWx5PehhJimTiRYuAZSP61YF3D1ADHN6PsHZX+9kCv7LhHwHDHEr6oyq
bfcLycAHdIlSRV1FtARPqNoy6iBq5bB1aTXV+LrgHgd7zzXfF9Pgrs9UsU7Ea7s7
ACJEm1Ld1EryINDLaSNVj5iUnboI+XQBUREzjW358l0mEHx0cTnaAsdO7s89AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUc9PoaLMNjE9yuKuF/Zx3a26pjZAwHwYDVR0j
BBgwFoAU6oqX6X4gMHl5BW3pDqpBzy78hLswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREU5WThIRG9SQ0NYRG1vcWtZdDJ6Mmp3OWNmdVZnenpCYzJ1WW9WOVBa
TWEvMC9FQThBOTdFOTdFMjAzMDc5NzkwNTZERTkwRUFBNDFDRjJFRkM4NEJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBOEE5N0U5N0UyMDMwNzk3
OTA1NkRFOTBFQUE0MUNGMkVGQzg0QkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RFOVk4SERvUkNDWERtb3FrWXQyejJqdzljZnVWZ3p6QmMydVlvVjlQWk1hLzAv
MzQzNTJlMzEzOTMxMmUzMTMzMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNjM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtv4QwDQYJKoZIhvcNAQELBQADggEBAARNDoib
V21va7JqTOqoS3d9Y7ztRkocNzbc6Gc/c7nPflNz+sXsmeS8YzW0nC2L4xJDmbsq
Yb2hFeff1328BV+1UQ88UGA+SZDq/91Yt5vFwyMGidxQyeUuy9rkFLBSsZPHad/U
EbyGlBw4IQgkSF9Mcdy2VZjasm76szw4SS8ZgrfaKJOJ81Xb/X4mYtXTqWy8/yE8
LSlbIhGh6dnlguIGVthi96ggYB0KRN0PmG1tBWP4goVnOAsXaQNPPCZMUV3Ox4Ln
9f/zFHj7m9cfAnjtw4r+rRT2rtwJhtEGmHVRNvdM6R3lZw1az1vJ0FTi+lFoGU3b
DUxl+LioGs7rNcY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:39:06 2025 by rpki-client