Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131362e302f32322d3232203d3e20323638393931.roa
File:                     34352e3137372e3131362e302f32322d3232203d3e20323638393931.roa (raw, json)
Hash identifier:          lkNUjmb5/CVLPYsSeI8NsYsZRmy5qXP3R5JClVbyVuQ=
Subject key identifier:   43:6E:AE:B0:40:84:DA:A4:2F:5C:22:60:38:91:86:9E:B2:87:72:51
Certificate issuer:       /CN=93073D69667BA705C8AE7B577FDD18FB85987CAA
Certificate serial:       639FF591DC2CE7207BEB8F19005261A49F356CDC
Authority key identifier: 93:07:3D:69:66:7B:A7:05:C8:AE:7B:57:7F:DD:18:FB:85:98:7C:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93073D69667BA705C8AE7B577FDD18FB85987CAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131362e302f32322d3232203d3e20323638393931.roa
Signing time:             Thu 19 Oct 2023 13:14:37 +0000
ROA not before:           Thu 19 Oct 2023 13:09:37 +0000
ROA not after:            Thu 17 Oct 2024 13:14:37 +0000
asID:                     268991
IP address blocks:        45.177.116.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9f:f5:91:dc:2c:e7:20:7b:eb:8f:19:00:52:61:a4:9f:35:6c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93073D69667BA705C8AE7B577FDD18FB85987CAA
        Validity
            Not Before: Oct 19 13:09:37 2023 GMT
            Not After : Oct 17 13:14:37 2024 GMT
        Subject: CN=436EAEB04084DAA42F5C22603891869EB2877251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:83:3f:76:03:6f:a6:f5:d9:4f:2a:08:d5:
                    12:fc:aa:fb:db:9f:09:a5:3e:06:12:2b:25:39:5b:
                    25:e8:f4:eb:ed:21:22:83:4e:98:f7:ca:6d:ec:3b:
                    32:a5:06:d2:6f:9b:d8:d1:15:10:07:4c:92:0c:0f:
                    48:95:6b:7e:93:0a:14:06:95:61:73:74:bc:95:c7:
                    23:59:ed:fc:d2:3e:8b:6d:a1:d6:25:8f:59:3c:d9:
                    7f:e8:f5:d9:20:14:2b:1c:ce:88:07:32:0d:f4:2e:
                    31:43:6a:40:e1:bb:be:1b:38:1b:7a:8f:05:0b:a0:
                    36:cf:40:78:07:68:aa:d0:fb:90:e0:28:16:61:92:
                    b9:ff:88:52:e2:54:dc:c4:6c:5e:d0:c4:d7:df:ce:
                    06:d4:66:3b:82:6c:b3:d3:a6:7f:6f:35:e9:f3:68:
                    e4:5b:a4:76:63:01:eb:0a:be:7d:24:95:16:da:af:
                    8c:76:4e:99:85:0e:39:8c:c5:f4:b8:b1:7c:d1:3a:
                    cb:6f:bc:c9:c3:4c:78:a4:27:7b:8a:7c:de:d9:47:
                    08:18:93:35:b8:a6:aa:99:d6:73:9a:ae:bb:1a:63:
                    f9:c3:3a:de:e7:35:9e:c3:58:74:a6:d0:2e:0f:93:
                    0c:a1:05:09:66:67:0d:45:c3:a8:84:19:fa:e6:71:
                    ea:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6E:AE:B0:40:84:DA:A4:2F:5C:22:60:38:91:86:9E:B2:87:72:51
            X509v3 Authority Key Identifier:
                keyid:93:07:3D:69:66:7B:A7:05:C8:AE:7B:57:7F:DD:18:FB:85:98:7C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/93073D69667BA705C8AE7B577FDD18FB85987CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93073D69667BA705C8AE7B577FDD18FB85987CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131362e302f32322d3232203d3e20323638393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:dd:49:5d:bf:13:fc:47:bb:8f:7d:6b:2e:16:5e:81:e1:4a:
         9a:3e:b3:7b:84:ea:df:7e:56:9f:7d:d1:32:c0:1e:af:72:d4:
         85:77:49:7e:4f:37:0d:aa:1c:26:f9:e2:b8:61:38:57:fc:e6:
         bd:06:e4:59:01:84:05:8d:da:77:a3:df:b7:d5:10:ca:fa:2c:
         0b:0d:48:59:5a:ec:8b:22:2e:b8:f5:eb:ac:73:a4:d8:c5:3d:
         81:f6:fe:e1:75:40:dc:8f:51:03:7e:25:13:1a:31:15:9f:41:
         af:c6:e5:3b:d3:ed:fd:1d:04:c3:e2:71:30:5c:7c:36:39:d5:
         27:91:73:7e:82:89:88:f7:a2:aa:6f:49:3e:56:7f:34:22:71:
         ca:8c:94:03:7e:17:15:9f:05:62:f7:db:36:78:39:64:af:8f:
         15:72:4e:00:67:1c:be:81:c9:58:5f:5a:7a:8a:33:e0:e4:86:
         72:d8:25:34:80:7b:03:76:43:50:22:61:30:98:27:23:a4:9a:
         c6:01:15:be:31:13:b3:a9:21:e9:48:3e:80:9b:da:12:cf:92:
         20:08:ef:63:7a:37:0c:e8:75:31:e3:ef:b3:24:d2:02:3b:b3:
         66:fe:8f:af:b3:7e:e0:40:29:bf:e0:08:97:f4:21:66:e3:2b:
         47:28:d9:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY5/1kdws5yB7648ZAFJhpJ81bNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwNzNENjk2NjdCQTcwNUM4QUU3QjU3N0ZERDE4RkI4
NTk4N0NBQTAeFw0yMzEwMTkxMzA5MzdaFw0yNDEwMTcxMzE0MzdaMDMxMTAvBgNV
BAMTKDQzNkVBRUIwNDA4NERBQTQyRjVDMjI2MDM4OTE4NjlFQjI4NzcyNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5l4M/dgNvpvXZTyoI1RL8qvvb
nwmlPgYSKyU5WyXo9OvtISKDTpj3ym3sOzKlBtJvm9jRFRAHTJIMD0iVa36TChQG
lWFzdLyVxyNZ7fzSPottodYlj1k82X/o9dkgFCsczogHMg30LjFDakDhu74bOBt6
jwULoDbPQHgHaKrQ+5DgKBZhkrn/iFLiVNzEbF7QxNffzgbUZjuCbLPTpn9vNenz
aORbpHZjAesKvn0klRbar4x2TpmFDjmMxfS4sXzROstvvMnDTHikJ3uKfN7ZRwgY
kzW4pqqZ1nOarrsaY/nDOt7nNZ7DWHSm0C4PkwyhBQlmZw1Fw6iEGfrmcepxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQ26usECE2qQvXCJgOJGGnrKHclEwHwYDVR0j
BBgwFoAUkwc9aWZ7pwXIrntXf90Y+4WYfKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRtc0xuSE5uTmVxTkJtUUd2d05ZR2t6NlJrb3VOb1lBWldGZVpRZWo3
bXIvMC85MzA3M0Q2OTY2N0JBNzA1QzhBRTdCNTc3RkREMThGQjg1OTg3Q0FBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkzMDczRDY5NjY3QkE3MDVD
OEFFN0I1NzdGREQxOEZCODU5ODdDQUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkbXNMbkhObk5lcU5CbVFHdndOWUdrejZSa291Tm9ZQVpXRmVaUWVqN21yLzAv
MzQzNTJlMzEzNzM3MmUzMTMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzOTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsXQwDQYJKoZIhvcNAQELBQADggEBAM3dSV2/
E/xHu499ay4WXoHhSpo+s3uE6t9+Vp990TLAHq9y1IV3SX5PNw2qHCb54rhhOFf8
5r0G5FkBhAWN2nej37fVEMr6LAsNSFla7IsiLrj166xzpNjFPYH2/uF1QNyPUQN+
JRMaMRWfQa/G5TvT7f0dBMPicTBcfDY51SeRc36CiYj3oqpvST5WfzQiccqMlAN+
FxWfBWL32zZ4OWSvjxVyTgBnHL6ByVhfWnqKM+DkhnLYJTSAewN2Q1AiYTCYJyOk
msYBFb4xE7OpIelIPoCb2hLPkiAI72N6NwzodTHj77Mk0gI7s2b+j6+zfuBAKb/g
CJf0IWbjK0co2Ug=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:27 2025 by rpki-client