Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32342d3332203d3e20323638373131.roa
File:                     34352e3137312e3132342e302f32342d3332203d3e20323638373131.roa (raw, json)
Hash identifier:          aF1NSbvVHKr8MwfTxNoobfiH9ZVkxl7NBMVxD7gYtpI=
Subject key identifier:   46:F4:1C:76:0F:25:A5:39:77:6D:BC:D1:E6:EA:6A:1F:4A:20:85:86
Certificate issuer:       /CN=2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13
Certificate serial:       2B4309124F9FF547635312DC368309FCAFDAA114
Authority key identifier: 2F:0F:D6:0A:E6:B3:DF:EB:9F:5B:8F:4B:E0:D2:75:5E:CA:2E:3F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32342d3332203d3e20323638373131.roa
Signing time:             Wed 22 May 2024 21:51:23 +0000
ROA not before:           Wed 22 May 2024 21:46:23 +0000
ROA not after:            Wed 21 May 2025 21:51:23 +0000
asID:                     268711
IP address blocks:        45.171.124.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:43:09:12:4f:9f:f5:47:63:53:12:dc:36:83:09:fc:af:da:a1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13
        Validity
            Not Before: May 22 21:46:23 2024 GMT
            Not After : May 21 21:51:23 2025 GMT
        Subject: CN=46F41C760F25A539776DBCD1E6EA6A1F4A208586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:8d:71:e5:19:a5:18:2e:08:37:ce:49:fc:
                    95:90:1d:a2:94:ab:0b:b1:28:a5:ee:7b:dc:00:92:
                    1f:47:89:9f:01:cd:c8:61:be:07:7e:a6:72:fb:89:
                    3b:e0:e6:df:66:d3:ad:e0:a0:88:cb:51:9a:11:d5:
                    75:4e:ec:68:26:a2:5b:21:4c:fd:19:d4:c7:69:fc:
                    0c:7e:5c:88:ee:fa:02:46:42:0a:5e:0a:4c:b7:62:
                    01:4a:fc:61:d0:82:76:39:a5:57:62:cc:b9:ef:47:
                    64:30:06:dd:b7:8b:3a:8d:7b:f6:bb:cb:2c:47:9a:
                    29:4c:aa:6d:8e:20:08:16:db:62:f6:75:48:7e:08:
                    a6:d8:d6:43:ab:ba:f1:59:4f:d2:c8:44:e7:57:06:
                    0a:48:f4:ff:db:d7:48:aa:dd:d9:48:18:de:98:9d:
                    67:c0:d7:3c:cb:49:62:44:6e:c4:8a:46:48:fe:cc:
                    7b:46:f2:5f:5d:8c:8a:20:b3:1b:67:b4:ed:42:b4:
                    44:bd:b2:f2:e3:75:ed:45:50:9e:29:df:b1:21:93:
                    11:cc:2e:88:39:5f:01:09:8f:39:37:0e:5e:f9:a1:
                    42:d0:3b:ef:ed:5b:c9:35:e0:e3:53:90:00:ef:5d:
                    13:1b:bb:6c:06:fd:f0:81:b4:65:2f:81:2f:3f:7d:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F4:1C:76:0F:25:A5:39:77:6D:BC:D1:E6:EA:6A:1F:4A:20:85:86
            X509v3 Authority Key Identifier:
                keyid:2F:0F:D6:0A:E6:B3:DF:EB:9F:5B:8F:4B:E0:D2:75:5E:CA:2E:3F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32342d3332203d3e20323638373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:da:82:c0:86:41:cd:22:8d:9b:03:bf:08:0f:1b:5c:92:8e:
         60:07:ec:9c:21:7a:e8:e4:91:c1:47:25:fe:0d:7d:74:11:89:
         8b:8b:0f:c2:f6:75:d5:df:8c:9c:af:29:3e:35:32:d2:6d:f5:
         ee:a7:8c:d8:ee:29:02:fa:df:d1:31:ff:12:e6:ab:93:89:66:
         98:65:0c:8b:2e:2d:73:ae:2b:64:64:f0:93:2a:7b:7a:71:d8:
         3d:f2:13:01:91:52:2e:61:1f:56:ec:dd:f7:12:6a:04:09:7a:
         79:1e:5b:30:8c:0b:8d:84:87:54:e9:49:9b:15:9a:a6:1b:32:
         03:3c:26:db:04:a8:12:70:18:cc:28:e4:dc:30:ed:aa:d1:bc:
         15:6a:a4:7a:19:60:b7:b9:c9:b7:d6:ae:0b:8c:79:e1:8e:46:
         16:56:0b:d4:e6:31:f9:a5:76:f7:5c:4f:09:50:fd:47:a7:c0:
         53:1a:fe:db:94:2e:95:27:f1:4a:d5:fc:ca:a0:d9:59:d0:27:
         1b:3f:88:7d:e3:99:88:ea:49:eb:c2:e4:94:c3:2e:73:a9:42:
         89:79:9e:d9:d0:1b:de:2b:ca:cb:06:02:9e:cf:fa:db:74:4f:
         66:dd:5b:15:48:57:1c:d4:d4:2e:e2:f3:35:20:fc:51:da:13:
         99:47:6b:db
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUK0MJEk+f9UdjUxLcNoMJ/K/aoRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYwRkQ2MEFFNkIzREZFQjlGNUI4RjRCRTBEMjc1NUVD
QTJFM0YxMzAeFw0yNDA1MjIyMTQ2MjNaFw0yNTA1MjEyMTUxMjNaMDMxMTAvBgNV
BAMTKDQ2RjQxQzc2MEYyNUE1Mzk3NzZEQkNEMUU2RUE2QTFGNEEyMDg1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutY1x5RmlGC4IN85J/JWQHaKU
qwuxKKXue9wAkh9HiZ8Bzchhvgd+pnL7iTvg5t9m063goIjLUZoR1XVO7Ggmolsh
TP0Z1Mdp/Ax+XIju+gJGQgpeCky3YgFK/GHQgnY5pVdizLnvR2QwBt23izqNe/a7
yyxHmilMqm2OIAgW22L2dUh+CKbY1kOruvFZT9LIROdXBgpI9P/b10iq3dlIGN6Y
nWfA1zzLSWJEbsSKRkj+zHtG8l9djIogsxtntO1CtES9svLjde1FUJ4p37EhkxHM
Log5XwEJjzk3Dl75oULQO+/tW8k14ONTkADvXRMbu2wG/fCBtGUvgS8/fXdtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURvQcdg8lpTl3bbzR5upqH0oghYYwHwYDVR0j
BBgwFoAULw/WCuaz3+ufW49L4NJ1XsouPxMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHhpYVJQVUVQbkhIakhDaFE3RXNoYmdXSEhQQW9Sb3F0YWdOWHhQVzRD
RWEvMC8yRjBGRDYwQUU2QjNERkVCOUY1QjhGNEJFMEQyNzU1RUNBMkUzRjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMEZENjBBRTZCM0RGRUI5
RjVCOEY0QkUwRDI3NTVFQ0EyRTNGMTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4aWFSUFVFUG5ISGpIQ2hRN0VzaGJnV0hIUEFvUm9xdGFnTlh4UFc0Q0VhLzAv
MzQzNTJlMzEzNzMxMmUzMTMyMzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzgzNzMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtq3wwDQYJKoZIhvcNAQELBQADggEBALvagsCG
Qc0ijZsDvwgPG1ySjmAH7JwheujkkcFHJf4NfXQRiYuLD8L2ddXfjJyvKT41MtJt
9e6njNjuKQL639Ex/xLmq5OJZphlDIsuLXOuK2Rk8JMqe3px2D3yEwGRUi5hH1bs
3fcSagQJenkeWzCMC42Eh1TpSZsVmqYbMgM8JtsEqBJwGMwo5Nww7arRvBVqpHoZ
YLe5ybfWrguMeeGORhZWC9TmMfmldvdcTwlQ/UenwFMa/tuULpUn8UrV/Mqg2VnQ
Jxs/iH3jmYjqSevC5JTDLnOpQol5ntnQG94ryssGAp7P+tt0T2bdWxVIVxzU1C7i
8zUg/FHaE5lHa9s=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:30:18 2025 by rpki-client