Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3232203d3e20323639303434.roa
File:                     34352e3137382e3233322e302f32322d3232203d3e20323639303434.roa (raw, json)
Hash identifier:          ioxotB84QHldDR7yN4y9z3CQZkIPljqFahdeubvWvVM=
Subject key identifier:   E8:0A:C3:9E:DC:D3:1F:21:45:96:2C:0D:F5:26:2B:80:14:C6:1D:A6
Certificate issuer:       /CN=65C38CC8B2159E7CFAA22686EE8BAC95C4D6812B
Certificate serial:       526FBF49DD7A1D97B7FA59B8383287A0C7DD323C
Authority key identifier: 65:C3:8C:C8:B2:15:9E:7C:FA:A2:26:86:EE:8B:AC:95:C4:D6:81:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65C38CC8B2159E7CFAA22686EE8BAC95C4D6812B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3232203d3e20323639303434.roa
Signing time:             Fri 24 Jun 2022 16:39:12 +0000
ROA not before:           Fri 24 Jun 2022 16:34:12 +0000
ROA not after:            Fri 23 Jun 2023 16:39:12 +0000
asID:                     269044
IP address blocks:        45.178.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6f:bf:49:dd:7a:1d:97:b7:fa:59:b8:38:32:87:a0:c7:dd:32:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65C38CC8B2159E7CFAA22686EE8BAC95C4D6812B
        Validity
            Not Before: Jun 24 16:34:12 2022 GMT
            Not After : Jun 23 16:39:12 2023 GMT
        Subject: CN=E80AC39EDCD31F2145962C0DF5262B8014C61DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:e9:8e:0a:58:4f:b9:18:93:08:ab:a6:cf:
                    e8:7f:83:c7:b0:81:73:d5:83:52:2a:13:48:5a:3f:
                    7c:29:a8:b2:e6:75:e3:b8:76:8c:cc:78:33:79:b5:
                    6e:3a:41:03:da:5d:4b:de:5d:58:79:44:13:40:2a:
                    55:d3:fd:b2:78:95:8d:52:04:81:25:30:c3:74:ad:
                    47:28:15:47:9e:42:18:82:99:5f:f0:bc:d6:2a:07:
                    91:a3:3f:d9:7d:7c:ef:94:60:ff:90:8b:20:46:a4:
                    ed:5c:1c:54:fa:07:bf:52:ce:18:e7:99:01:2d:3b:
                    7d:46:c3:5c:0c:87:53:28:54:e0:76:9f:74:08:f4:
                    08:fa:7b:c2:05:6f:7c:68:4f:14:e9:2c:23:c5:0a:
                    38:65:02:9d:a2:1e:ff:7a:97:ad:a7:a4:de:5b:57:
                    83:16:13:d1:d4:e1:85:eb:d6:9b:a1:a3:3e:48:68:
                    a3:b6:15:4c:54:d8:40:b5:04:dd:4b:88:f7:a8:44:
                    12:e3:ff:85:49:0a:75:ac:4a:37:16:ac:75:89:3c:
                    6e:0c:a8:02:c2:5f:d6:ca:6b:a0:67:91:ea:56:c4:
                    ac:f1:51:de:19:97:8d:32:63:05:b5:83:96:0d:93:
                    0e:79:f3:89:45:0f:eb:7c:7e:19:74:76:0a:79:8a:
                    ad:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0A:C3:9E:DC:D3:1F:21:45:96:2C:0D:F5:26:2B:80:14:C6:1D:A6
            X509v3 Authority Key Identifier:
                keyid:65:C3:8C:C8:B2:15:9E:7C:FA:A2:26:86:EE:8B:AC:95:C4:D6:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/65C38CC8B2159E7CFAA22686EE8BAC95C4D6812B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65C38CC8B2159E7CFAA22686EE8BAC95C4D6812B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3232203d3e20323639303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:78:15:3c:ec:c1:b6:c0:ae:ae:3b:42:39:98:ca:3d:76:1c:
         c9:d5:09:97:65:dd:da:ca:b4:c1:e4:ac:67:01:1f:c3:7e:ac:
         38:83:b0:83:b6:00:fc:fa:ce:7f:5c:6e:6a:fd:58:fa:0d:58:
         c4:ff:5d:e8:f7:43:cf:da:12:b7:9a:94:dd:00:1c:44:34:92:
         4b:f1:38:87:a3:68:9b:98:fb:b8:60:69:a7:70:32:8b:ac:d7:
         fd:e9:d0:d4:b6:00:1c:7d:7c:cf:06:f3:49:66:ff:50:a5:03:
         66:0a:dd:d3:7b:83:36:44:99:4a:c9:5f:00:7b:3b:af:5b:61:
         1b:9c:46:63:65:fa:76:21:8c:c7:a1:3a:81:42:7d:58:30:99:
         5f:f5:b5:9c:6f:aa:47:86:a8:2d:25:c0:58:f1:7f:4a:8c:51:
         1f:27:7e:1a:d3:9b:a2:4f:c3:2b:a1:a3:d7:bf:af:95:99:8f:
         86:a5:ff:81:70:4e:b1:37:6e:85:82:10:52:da:51:8c:e9:00:
         3b:bf:43:df:a9:d4:42:9c:68:2e:37:ae:bf:62:a3:2e:ab:ad:
         06:6a:cd:3c:a2:1b:01:8b:52:38:7f:a7:bf:a9:ef:90:a3:51:
         67:f1:55:6f:87:41:00:bf:89:5c:ea:6a:22:98:c4:3c:f7:27:
         92:e6:47:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUm+/Sd16HZe3+lm4ODKHoMfdMjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVDMzhDQzhCMjE1OUU3Q0ZBQTIyNjg2RUU4QkFDOTVD
NEQ2ODEyQjAeFw0yMjA2MjQxNjM0MTJaFw0yMzA2MjMxNjM5MTJaMDMxMTAvBgNV
BAMTKEU4MEFDMzlFRENEMzFGMjE0NTk2MkMwREY1MjYyQjgwMTRDNjFEQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8KumOClhPuRiTCKumz+h/g8ew
gXPVg1IqE0haP3wpqLLmdeO4dozMeDN5tW46QQPaXUveXVh5RBNAKlXT/bJ4lY1S
BIElMMN0rUcoFUeeQhiCmV/wvNYqB5GjP9l9fO+UYP+QiyBGpO1cHFT6B79Szhjn
mQEtO31Gw1wMh1MoVOB2n3QI9Aj6e8IFb3xoTxTpLCPFCjhlAp2iHv96l62npN5b
V4MWE9HU4YXr1puhoz5IaKO2FUxU2EC1BN1LiPeoRBLj/4VJCnWsSjcWrHWJPG4M
qALCX9bKa6BnkepWxKzxUd4Zl40yYwW1g5YNkw5584lFD+t8fhl0dgp5iq0/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6ArDntzTHyFFliwN9SYrgBTGHaYwHwYDVR0j
BBgwFoAUZcOMyLIVnnz6oiaG7ouslcTWgSswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHg1cUZ1V2plSmk2MXF0QXp4MnNZV1VQVTl5R014ektaR1hXMXRIcWo2
ZGgvMC82NUMzOENDOEIyMTU5RTdDRkFBMjI2ODZFRThCQUM5NUM0RDY4MTJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY1QzM4Q0M4QjIxNTlFN0NG
QUEyMjY4NkVFOEJBQzk1QzRENjgxMkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4NXFGdVdqZUppNjFxdEF6eDJzWVdVUFU5eUdNeHpLWkdYVzF0SHFqNmRoLzAv
MzQzNTJlMzEzNzM4MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsugwDQYJKoZIhvcNAQELBQADggEBAD14FTzs
wbbArq47QjmYyj12HMnVCZdl3drKtMHkrGcBH8N+rDiDsIO2APz6zn9cbmr9WPoN
WMT/Xej3Q8/aErealN0AHEQ0kkvxOIejaJuY+7hgaadwMous1/3p0NS2ABx9fM8G
80lm/1ClA2YK3dN7gzZEmUrJXwB7O69bYRucRmNl+nYhjMehOoFCfVgwmV/1tZxv
qkeGqC0lwFjxf0qMUR8nfhrTm6JPwyuho9e/r5WZj4al/4FwTrE3boWCEFLaUYzp
ADu/Q9+p1EKcaC43rr9ioy6rrQZqzTyiGwGLUjh/p7+p75CjUWfxVW+HQQC/iVzq
aiKYxDz3J5LmR08=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:42:22 2025 by rpki-client