Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/34352e3137372e382e302f32332d3233203d3e20323638393637.roa
File:                     34352e3137372e382e302f32332d3233203d3e20323638393637.roa (raw, json)
Hash identifier:          h0gyzu+jo+5haR1ExTANXA0f5GUJlWxeA8OmvNnllZ4=
Subject key identifier:   95:7E:15:0E:A4:3E:17:31:86:BB:BC:CE:F7:08:1A:4D:BC:9F:51:36
Certificate issuer:       /CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
Certificate serial:       63AB9EA9A22AB796CB168208C4562E055169011F
Authority key identifier: 7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/34352e3137372e382e302f32332d3233203d3e20323638393637.roa
Signing time:             Tue 05 Sep 2023 14:09:33 +0000
ROA not before:           Tue 05 Sep 2023 14:04:33 +0000
ROA not after:            Tue 03 Sep 2024 14:09:33 +0000
asID:                     268967
IP address blocks:        45.177.8.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ab:9e:a9:a2:2a:b7:96:cb:16:82:08:c4:56:2e:05:51:69:01:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
        Validity
            Not Before: Sep  5 14:04:33 2023 GMT
            Not After : Sep  3 14:09:33 2024 GMT
        Subject: CN=957E150EA43E173186BBBCCEF7081A4DBC9F5136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:ec:74:cd:5f:e7:47:5e:5b:41:b3:11:bc:
                    8e:0c:4e:7e:84:bd:7f:49:49:6d:61:f2:28:50:f4:
                    db:15:f8:fb:54:7e:56:05:91:c1:d4:30:a9:d5:25:
                    da:c1:14:cc:72:e3:e5:c0:55:97:93:ef:67:8e:73:
                    bb:31:32:c2:14:52:b6:51:ee:91:0f:59:a2:9e:58:
                    f0:43:fb:42:3c:0d:6d:82:e3:47:3d:72:f4:fe:8d:
                    7b:e3:3a:be:7b:de:8f:2e:0f:37:48:4c:ad:00:0e:
                    8b:33:40:c0:5f:ba:8c:cc:3c:9f:73:37:d6:86:22:
                    f7:8c:ca:d1:26:23:bb:e3:a9:63:0d:2c:1c:e7:15:
                    28:ec:98:c5:df:b8:30:8c:9f:9d:40:9d:6e:17:68:
                    aa:47:46:20:29:00:af:5f:71:e1:7f:75:6b:ad:b7:
                    19:46:f4:08:4f:7c:93:2a:85:94:e9:8b:f1:06:5f:
                    f2:4c:9b:d4:6d:68:82:dc:b2:2b:cc:8c:96:03:92:
                    01:a6:0b:8d:c9:1f:ab:8d:cc:bd:6d:52:90:4f:a1:
                    fa:5d:9a:10:82:cf:43:46:f5:3e:8a:fb:83:3a:b4:
                    d1:c9:7b:68:49:8c:c5:ec:d3:0a:a9:9e:12:6f:6c:
                    c2:1a:e4:d6:d4:5a:f6:d1:9a:75:83:78:9f:b9:0a:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7E:15:0E:A4:3E:17:31:86:BB:BC:CE:F7:08:1A:4D:BC:9F:51:36
            X509v3 Authority Key Identifier:
                keyid:7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/34352e3137372e382e302f32332d3233203d3e20323638393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:31:59:b1:04:ef:49:72:b9:56:55:5a:8d:a2:f6:47:96:d3:
         29:38:64:c3:3d:5a:93:7f:0d:bb:a6:b5:b1:ec:e3:3f:e8:a8:
         d1:80:c9:1c:23:5c:0b:cf:14:68:df:85:17:80:8b:02:85:d2:
         64:cb:2d:9d:69:96:00:0d:e8:fa:dd:4a:c0:07:9b:d4:35:fa:
         5d:0d:c5:11:04:b6:5a:13:2c:51:30:0a:eb:a8:8c:79:39:5b:
         96:55:fd:35:0d:22:22:d1:fc:fd:b8:e5:c5:c7:65:04:4b:58:
         fb:f5:aa:21:71:fc:70:ab:64:c8:6a:f3:a3:08:eb:7f:ca:03:
         1f:28:03:8b:69:12:ca:fd:42:af:76:09:0d:f2:60:27:37:23:
         72:be:c6:72:5c:b3:4a:b8:d2:dd:bb:62:a8:56:64:a4:6c:74:
         53:0d:30:15:08:9b:71:d3:7b:3a:23:21:bd:6c:59:28:d5:03:
         0c:ea:71:3b:ab:65:ca:99:8a:61:98:fa:6d:35:ea:54:dd:a2:
         e8:c7:a3:ae:fe:0b:86:76:09:fc:ed:de:d9:e5:ca:33:43:00:
         45:e7:49:bd:14:86:81:3d:00:77:60:cb:d0:72:ec:85:9c:0e:
         aa:83:23:b6:4a:ef:5c:5f:7f:60:47:f2:e7:33:a7:c6:28:d8:
         58:2c:fd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:57 2025 by rpki-client