Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/34352e3137372e31302e302f32332d3233203d3e20323638393637.roa
File:                     34352e3137372e31302e302f32332d3233203d3e20323638393637.roa (raw, json)
Hash identifier:          PWQSM+i2OtzTjOcV+x4A+ChPDEI/eFxkelJGMiqYeic=
Subject key identifier:   D8:7B:D0:A1:67:BB:3D:8A:42:99:C1:81:0E:7D:9A:3C:19:F3:41:1A
Certificate issuer:       /CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
Certificate serial:       065F53F0C4842C28C8EF3BD1F8CF79C18833AE18
Authority key identifier: 7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/34352e3137372e31302e302f32332d3233203d3e20323638393637.roa
Signing time:             Tue 05 Sep 2023 14:09:33 +0000
ROA not before:           Tue 05 Sep 2023 14:04:33 +0000
ROA not after:            Tue 03 Sep 2024 14:09:33 +0000
asID:                     268967
IP address blocks:        45.177.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5f:53:f0:c4:84:2c:28:c8:ef:3b:d1:f8:cf:79:c1:88:33:ae:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
        Validity
            Not Before: Sep  5 14:04:33 2023 GMT
            Not After : Sep  3 14:09:33 2024 GMT
        Subject: CN=D87BD0A167BB3D8A4299C1810E7D9A3C19F3411A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:ca:21:7d:a8:a2:21:4d:56:ab:10:94:94:
                    13:92:68:06:1d:8e:ea:4f:4c:b0:04:71:97:93:99:
                    28:63:0a:9b:5b:0f:54:3f:d3:5e:fc:19:c8:cb:a9:
                    cd:e5:4a:a9:35:44:d9:6d:89:28:39:ac:69:ef:ea:
                    57:63:74:50:6f:44:69:28:23:eb:9f:4e:7d:05:10:
                    11:66:4e:ce:b4:04:52:61:5c:a7:d6:4e:79:0f:54:
                    77:b6:a4:09:ab:78:82:75:45:5e:6b:4f:b1:9c:fc:
                    47:6a:4b:b5:bd:98:5a:19:a3:8d:28:d3:2c:70:05:
                    09:15:3c:da:a3:b5:b0:79:1f:1b:65:2d:1e:5e:87:
                    5f:9f:14:63:ed:56:02:24:86:53:ff:42:6e:93:ac:
                    a5:0b:13:69:08:ea:38:f8:02:d9:1a:62:4c:80:ef:
                    32:20:79:f5:04:93:85:29:1e:66:56:2c:47:2a:11:
                    d3:d1:9c:cf:25:0f:41:6d:ea:da:90:5c:70:f8:54:
                    27:54:60:fc:15:66:aa:83:af:91:d8:c0:66:ec:6d:
                    d6:70:cb:ea:9f:1b:15:84:ad:26:f7:2c:b2:c1:39:
                    4e:41:be:f2:b8:bc:6e:55:64:10:b6:73:70:dd:7d:
                    b9:99:3f:20:67:ff:a3:1e:58:10:41:8b:53:1d:44:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7B:D0:A1:67:BB:3D:8A:42:99:C1:81:0E:7D:9A:3C:19:F3:41:1A
            X509v3 Authority Key Identifier:
                keyid:7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/34352e3137372e31302e302f32332d3233203d3e20323638393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:f3:ea:cf:2e:2c:16:5b:b3:2c:31:7b:77:d3:43:86:50:cf:
         fc:c4:68:e9:57:a0:2f:e1:9b:1c:66:f6:b2:9c:be:f6:ca:af:
         0d:7a:ee:20:43:c7:39:6a:d6:98:01:bd:97:d2:62:b1:e5:da:
         60:c8:79:b1:0e:34:78:5a:a5:bf:dc:4d:4d:9e:65:6a:07:07:
         40:e8:74:d2:c8:d1:2e:f8:b5:c3:e4:52:ff:3f:63:8f:8b:ca:
         f2:08:79:d9:c3:8e:1e:26:e9:91:93:04:e4:da:ea:12:a3:fc:
         ba:dd:d6:a3:8e:57:fd:3c:6a:eb:6a:96:46:9a:c3:0d:c6:67:
         3c:55:5f:b5:33:40:4f:bb:dc:2f:86:9a:60:00:03:1a:9d:2a:
         10:0c:bd:4f:30:8a:18:f0:09:de:9f:08:25:2a:c9:0c:e7:58:
         78:ab:00:88:be:be:3b:67:32:4e:4c:8e:59:10:53:87:29:ed:
         b2:03:ad:04:fa:f0:2c:72:ff:58:46:3a:57:30:1c:56:89:c7:
         c6:bd:18:59:af:db:8f:57:08:3a:c4:e1:98:74:97:8d:39:5c:
         78:54:d0:b5:83:3a:36:bb:d9:14:f4:fc:92:f0:62:f8:56:a1:
         8b:60:35:b5:77:0c:99:f6:4b:14:73:26:d8:39:f5:1b:ac:38:
         cd:26:35:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBl9T8MSELCjI7zvR+M95wYgzrhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VGNjc2Q0Q0RjY1OTkxRUQwODYxNzNFNjRGOUU1OEY4
NDU1NEFEMTAeFw0yMzA5MDUxNDA0MzNaFw0yNDA5MDMxNDA5MzNaMDMxMTAvBgNV
BAMTKEQ4N0JEMEExNjdCQjNEOEE0Mjk5QzE4MTBFN0Q5QTNDMTlGMzQxMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVsohfaiiIU1WqxCUlBOSaAYd
jupPTLAEcZeTmShjCptbD1Q/0178GcjLqc3lSqk1RNltiSg5rGnv6ldjdFBvRGko
I+ufTn0FEBFmTs60BFJhXKfWTnkPVHe2pAmreIJ1RV5rT7Gc/EdqS7W9mFoZo40o
0yxwBQkVPNqjtbB5HxtlLR5eh1+fFGPtVgIkhlP/Qm6TrKULE2kI6jj4AtkaYkyA
7zIgefUEk4UpHmZWLEcqEdPRnM8lD0Ft6tqQXHD4VCdUYPwVZqqDr5HYwGbsbdZw
y+qfGxWErSb3LLLBOU5BvvK4vG5VZBC2c3DdfbmZPyBn/6MeWBBBi1MdRB7dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2HvQoWe7PYpCmcGBDn2aPBnzQRowHwYDVR0j
BBgwFoAUfvZ2zU9lmR7Qhhc+ZPnlj4RVStEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHlRSjExUm1URUxWR0hVTENMdGFHdXhjcXhlUnRRTGd2REM1bVFuUzlI
WEcvMC83RUY2NzZDRDRGNjU5OTFFRDA4NjE3M0U2NEY5RTU4Rjg0NTU0QUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFRjY3NkNENEY2NTk5MUVE
MDg2MTczRTY0RjlFNThGODQ1NTRBRDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R5UUoxMVJtVEVMVkdIVUxDTHRhR3V4Y3F4ZVJ0UUxndkRDNW1RblM5SFhHLzAv
MzQzNTJlMzEzNzM3MmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbEKMA0GCSqGSIb3DQEBCwUAA4IBAQAk8+rPLiwW
W7MsMXt300OGUM/8xGjpV6Av4ZscZvaynL72yq8Neu4gQ8c5ataYAb2X0mKx5dpg
yHmxDjR4WqW/3E1NnmVqBwdA6HTSyNEu+LXD5FL/P2OPi8ryCHnZw44eJumRkwTk
2uoSo/y63dajjlf9PGrrapZGmsMNxmc8VV+1M0BPu9wvhppgAAManSoQDL1PMIoY
8AnenwglKskM51h4qwCIvr47ZzJOTI5ZEFOHKe2yA60E+vAscv9YRjpXMBxWicfG
vRhZr9uPVwg6xOGYdJeNOVx4VNC1gzo2u9kU9PyS8GL4VqGLYDW1dwyZ9ksUcybY
OfUbrDjNJjWm
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:22 2025 by rpki-client