Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235342e302f32332d3234203d3e20323639363939.roa
File:                     34352e3139312e3235342e302f32332d3234203d3e20323639363939.roa (raw, json)
Hash identifier:          G+ZvtyYbEdzpaiYPGLOlJkfKD6YS6SrDSJlHK1a2M5o=
Subject key identifier:   CA:9D:23:45:81:F6:AC:3C:B4:A6:03:F4:8A:85:BB:05:E2:01:EE:5A
Certificate issuer:       /CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
Certificate serial:       4D0EFBD428087DBA3A32C2393D77A67176C8A0CB
Authority key identifier: 75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235342e302f32332d3234203d3e20323639363939.roa
Signing time:             Tue 08 Nov 2022 01:19:27 +0000
ROA not before:           Tue 08 Nov 2022 01:14:27 +0000
ROA not after:            Tue 07 Nov 2023 01:19:27 +0000
asID:                     269699
IP address blocks:        45.191.254.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0e:fb:d4:28:08:7d:ba:3a:32:c2:39:3d:77:a6:71:76:c8:a0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
        Validity
            Not Before: Nov  8 01:14:27 2022 GMT
            Not After : Nov  7 01:19:27 2023 GMT
        Subject: CN=CA9D234581F6AC3CB4A603F48A85BB05E201EE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:0d:96:0b:fb:07:2c:e5:c8:c0:ef:a6:16:
                    34:d2:48:d8:41:85:21:ca:f5:92:b7:82:88:d2:9c:
                    87:f8:3e:57:2a:3e:47:d4:93:f6:e0:fe:cf:88:8b:
                    69:1c:db:9f:13:d5:60:c2:71:78:32:33:af:c0:93:
                    c8:19:5a:75:ca:ec:f7:d9:9e:be:48:5e:70:6c:e6:
                    db:11:9f:a0:36:a6:df:e9:3e:c5:d1:88:ac:0d:68:
                    02:de:72:6a:2b:69:5f:5f:69:d4:e6:f5:d5:4e:d4:
                    8c:db:4f:28:03:1a:77:fe:cb:d2:c9:76:17:4e:12:
                    73:cb:3a:e4:eb:b4:0c:aa:4e:28:0a:f8:70:e1:b6:
                    f2:7e:46:98:cb:27:02:92:22:00:39:73:72:80:f7:
                    39:c7:7d:5e:3e:1a:3b:53:63:b2:8c:db:15:29:1a:
                    e8:27:38:3a:a9:30:27:3b:3c:cb:2b:45:5c:59:83:
                    4b:73:67:34:9b:aa:01:35:80:55:c8:19:21:ed:eb:
                    4c:21:fc:8d:20:be:85:90:f9:36:95:38:a8:d1:19:
                    d8:b2:b0:0d:d9:af:66:19:86:13:d5:e5:86:1b:17:
                    d8:f2:cd:a4:09:8e:1a:d2:fe:4b:85:b2:63:fe:87:
                    a8:d9:d8:48:e4:8b:d0:9c:3c:f8:5d:13:ea:59:10:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9D:23:45:81:F6:AC:3C:B4:A6:03:F4:8A:85:BB:05:E2:01:EE:5A
            X509v3 Authority Key Identifier:
                keyid:75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235342e302f32332d3234203d3e20323639363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:87:19:9c:1d:93:a6:b2:8d:d4:6d:c0:a6:13:7c:36:e7:40:
         df:af:a1:59:05:e6:c8:35:15:1c:2b:17:3a:e5:60:37:83:e2:
         00:04:af:d5:07:ff:17:bc:89:f9:52:f6:14:04:b1:ba:22:e8:
         1b:d2:2d:bc:dd:2a:7a:fe:ba:9f:de:36:3f:a6:6a:21:3f:c4:
         ff:6d:3b:2b:9c:b7:47:d7:6c:e4:25:87:21:90:bc:b7:7b:80:
         7f:09:3f:a5:5a:79:39:28:3f:c7:3a:34:cd:c6:29:14:6f:8b:
         f1:d3:d5:8c:dd:52:87:59:0f:a6:89:fd:5d:ce:53:4b:48:20:
         b6:ab:a2:02:06:53:79:56:89:68:1e:c1:56:a1:97:1b:e7:c4:
         c2:6f:77:8c:72:6c:00:ce:cd:38:af:0a:30:46:28:11:41:fe:
         be:c8:5e:03:c7:34:56:c7:0b:2e:1e:5a:a9:34:96:c3:8e:fc:
         39:f1:3b:ce:66:04:80:d4:74:c7:96:da:2a:10:5c:41:c7:ab:
         55:09:76:c1:6c:e1:35:43:7b:83:66:c9:62:46:46:f2:43:da:
         02:52:b2:e5:3b:eb:91:97:3f:fd:27:63:2e:c7:eb:f1:ff:15:
         52:3e:99:29:9f:4a:8f:f1:54:22:ff:01:f1:43:3c:f4:ab:34:
         63:39:de:c5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTQ771CgIfbo6MsI5PXemcXbIoMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU4N0Y1OTdDOUMxRTIyMzI4NjdENkYxRjJDMkI1NzAz
RjcxNTBEMTAeFw0yMjExMDgwMTE0MjdaFw0yMzExMDcwMTE5MjdaMDMxMTAvBgNV
BAMTKENBOUQyMzQ1ODFGNkFDM0NCNEE2MDNGNDhBODVCQjA1RTIwMUVFNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMg2WC/sHLOXIwO+mFjTSSNhB
hSHK9ZK3gojSnIf4PlcqPkfUk/bg/s+Ii2kc258T1WDCcXgyM6/Ak8gZWnXK7PfZ
nr5IXnBs5tsRn6A2pt/pPsXRiKwNaALecmoraV9fadTm9dVO1IzbTygDGnf+y9LJ
dhdOEnPLOuTrtAyqTigK+HDhtvJ+RpjLJwKSIgA5c3KA9znHfV4+GjtTY7KM2xUp
GugnODqpMCc7PMsrRVxZg0tzZzSbqgE1gFXIGSHt60wh/I0gvoWQ+TaVOKjRGdiy
sA3Zr2YZhhPV5YYbF9jyzaQJjhrS/kuFsmP+h6jZ2Ejki9CcPPhdE+pZEIWHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyp0jRYH2rDy0pgP0ioW7BeIB7lowHwYDVR0j
BBgwFoAUdYf1l8nB4iMoZ9bx8sK1cD9xUNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS
YnYvMC83NTg3RjU5N0M5QzFFMjIzMjg2N0Q2RjFGMkMyQjU3MDNGNzE1MEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1ODdGNTk3QzlDMUUyMjMy
ODY3RDZGMUYyQzJCNTcwM0Y3MTUwRDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RnMzNtTG9qRkp0bzFlTmVGMTl0Qk1tQ3BRU0w5WWFkQ21FOEE1UnFrUmJ2LzAv
MzQzNTJlMzEzOTMxMmUzMjM1MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzkzNjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtv/4wDQYJKoZIhvcNAQELBQADggEBAK6HGZwd
k6ayjdRtwKYTfDbnQN+voVkF5sg1FRwrFzrlYDeD4gAEr9UH/xe8iflS9hQEsboi
6BvSLbzdKnr+up/eNj+maiE/xP9tOyuct0fXbOQlhyGQvLd7gH8JP6VaeTkoP8c6
NM3GKRRvi/HT1YzdUodZD6aJ/V3OU0tIILarogIGU3lWiWgewVahlxvnxMJvd4xy
bADOzTivCjBGKBFB/r7IXgPHNFbHCy4eWqk0lsOO/DnxO85mBIDUdMeW2ioQXEHH
q1UJdsFs4TVDe4NmyWJGRvJD2gJSsuU765GXP/0nYy7H6/H/FVI+mSmfSo/xVCL/
AfFDPPSrNGM53sU=
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:10:35 2025 by rpki-client