Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/34352e3137372e382e302f32322d3232203d3e20323638393637.roa
File:                     34352e3137372e382e302f32322d3232203d3e20323638393637.roa (raw, json)
Hash identifier:          yitz839EyV20UQrNaKGWX2ToPUxI5WytG9HQj3G/JVM=
Subject key identifier:   E9:21:88:A4:20:52:A9:ED:EA:90:44:36:BA:D1:22:B0:78:F6:3B:45
Certificate issuer:       /CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
Certificate serial:       46F940D00B405CC4F3DD71EED780E274F33A5F08
Authority key identifier: 7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/34352e3137372e382e302f32322d3232203d3e20323638393637.roa
Signing time:             Tue 05 Sep 2023 14:09:34 +0000
ROA not before:           Tue 05 Sep 2023 14:04:34 +0000
ROA not after:            Tue 03 Sep 2024 14:09:34 +0000
asID:                     268967
IP address blocks:        45.177.8.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f9:40:d0:0b:40:5c:c4:f3:dd:71:ee:d7:80:e2:74:f3:3a:5f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
        Validity
            Not Before: Sep  5 14:04:34 2023 GMT
            Not After : Sep  3 14:09:34 2024 GMT
        Subject: CN=E92188A42052A9EDEA904436BAD122B078F63B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7f:de:cf:5b:32:d3:d6:b3:7e:d0:66:44:8c:
                    06:39:c5:38:eb:e9:17:df:12:02:e0:f5:ca:50:cb:
                    0f:d7:13:1c:4a:c1:d8:06:f7:e8:f8:6f:7f:5b:b8:
                    0d:d1:20:ff:b3:a6:ac:7b:c8:db:29:5f:18:d6:f4:
                    f2:48:98:9c:74:67:2a:0b:80:81:ad:0c:11:d9:ed:
                    fa:ab:96:aa:e4:3b:f9:00:2e:87:22:9b:4f:ef:58:
                    fc:a7:15:66:25:8b:7d:2c:a7:60:4b:e8:26:c6:6e:
                    68:d6:08:57:ad:9c:ab:e5:41:9e:44:d2:57:59:35:
                    2b:44:4b:90:36:74:dd:c9:06:0b:47:b9:29:18:a1:
                    09:bf:5f:48:c3:e7:b7:27:1d:e9:1d:d7:38:53:d6:
                    fc:8e:f9:dc:89:23:46:3f:ae:6a:95:a5:ce:28:1b:
                    b7:5c:ce:75:30:35:52:22:4d:98:3d:b7:d4:2f:b1:
                    54:91:9d:be:a4:64:52:5e:0a:65:47:81:5e:c1:9a:
                    6a:6d:e3:77:3d:63:e8:d5:ec:83:91:3b:00:f1:49:
                    b9:e6:09:17:dd:df:6a:25:2e:39:5d:be:0a:19:16:
                    a2:9e:40:ff:2b:1e:da:06:6b:f0:74:c2:aa:c6:98:
                    0f:aa:e6:a0:ea:64:35:3c:19:ad:2d:5b:72:ef:2a:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:21:88:A4:20:52:A9:ED:EA:90:44:36:BA:D1:22:B0:78:F6:3B:45
            X509v3 Authority Key Identifier:
                keyid:7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/34352e3137372e382e302f32322d3232203d3e20323638393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:c2:7a:52:0d:14:4c:57:7e:0a:0a:c7:eb:7b:f2:b8:34:24:
         bb:92:fe:a2:bf:00:7b:0b:34:12:6e:e5:2c:96:dc:4c:6f:bb:
         b7:0c:58:76:f0:4e:c5:08:75:8a:cb:71:ad:28:9f:f1:4b:5e:
         7f:f2:91:cf:7a:4f:4e:43:0a:0c:88:b8:28:21:17:1b:f0:81:
         68:6a:dd:67:55:31:3c:cf:bc:aa:4a:b1:a7:03:e7:7b:21:a9:
         f2:b2:17:4d:bb:4f:f1:ca:3c:96:af:09:48:64:00:a8:74:f8:
         e3:df:85:18:b8:14:e9:8b:5f:6c:36:8f:0f:6f:e3:3c:0d:f2:
         0a:99:6a:d5:29:85:8b:f1:80:30:a6:3a:72:e3:b8:66:06:36:
         c4:84:c3:b9:33:32:bd:3a:7c:16:5f:ab:a4:8d:f8:2a:c0:71:
         c1:14:27:a6:9c:4f:0b:af:ee:49:09:86:e0:83:c2:c1:0f:74:
         9d:c9:28:8f:b6:49:5d:fc:5d:cc:de:96:99:7c:46:fc:f8:82:
         cc:31:73:4c:70:b4:2c:3f:2d:d4:8d:b8:c3:d4:c3:c8:dc:e1:
         42:78:bb:7b:8f:9a:6f:c3:40:d6:a8:a8:ea:c5:1d:09:89:57:
         bd:e1:38:08:15:95:f8:0d:28:99:07:aa:5a:89:2d:fe:de:f3:
         2d:31:82:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:53 2025 by rpki-client