Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e332e302f32342d3234203d3e20323638333837.roa
File:                     34352e3136302e332e302f32342d3234203d3e20323638333837.roa (raw, json)
Hash identifier:          W4JISzf7zKMhg8REA86cg7qPAT6VABGsTN1tppfPZAQ=
Subject key identifier:   91:D3:66:B4:F1:54:EC:0B:CA:C7:02:11:95:A5:4D:7F:76:5C:95:DA
Certificate issuer:       /CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
Certificate serial:       2E5D22E161018181129907D8DBCEB3250D4C8481
Authority key identifier: 49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e332e302f32342d3234203d3e20323638333837.roa
Signing time:             Mon 12 Jul 2021 20:25:09 +0000
ROA not before:           Mon 12 Jul 2021 20:20:09 +0000
ROA not after:            Mon 11 Jul 2022 20:25:09 +0000
asID:                     268387
IP address blocks:        45.160.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5d:22:e1:61:01:81:81:12:99:07:d8:db:ce:b3:25:0d:4c:84:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
        Validity
            Not Before: Jul 12 20:20:09 2021 GMT
            Not After : Jul 11 20:25:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:29:6c:fa:90:4f:f6:4e:0c:d5:3b:cb:ff:
                    b7:41:dc:a7:93:5b:af:81:27:30:da:26:87:87:d0:
                    6c:67:5c:b8:55:88:71:e7:94:4e:3d:b0:a5:fe:3c:
                    70:02:24:70:ac:3f:3d:30:81:65:f3:aa:a2:4b:1a:
                    d5:b0:4b:68:fc:f2:81:84:7c:87:99:b7:d6:ce:fa:
                    eb:96:64:4f:40:9e:5f:92:98:fe:10:8a:9e:ed:d5:
                    a9:e3:5b:f0:57:47:92:b2:9e:8f:9f:45:41:1b:9d:
                    1c:3e:d9:aa:c8:01:24:47:79:ed:fe:60:75:26:c5:
                    32:ef:55:7e:58:67:53:cb:00:1d:69:ed:98:1d:12:
                    f1:b3:83:ed:fc:04:23:ae:80:05:96:ab:e1:7f:bb:
                    2e:6a:d4:8f:f3:98:03:eb:00:a7:7f:35:3d:90:04:
                    e3:2d:95:2c:9f:e1:4b:00:56:51:44:0b:50:ff:23:
                    e9:18:65:c6:42:91:72:c6:c7:01:b1:33:db:bb:3d:
                    97:5b:e2:87:08:56:74:76:ff:73:da:7b:b8:81:b0:
                    06:1c:2a:3b:65:b2:75:9f:1b:52:03:e1:1e:07:04:
                    a4:ac:6f:b6:da:7a:1d:c9:3c:62:09:c1:97:5b:ae:
                    27:74:ee:57:a8:8e:f5:63:9c:b2:92:59:09:b0:03:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D3:66:B4:F1:54:EC:0B:CA:C7:02:11:95:A5:4D:7F:76:5C:95:DA
            X509v3 Authority Key Identifier:
                keyid:49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e332e302f32342d3234203d3e20323638333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c7:55:63:89:49:9b:e7:b2:3f:66:77:93:ed:79:58:20:1e:
         ac:b3:11:7a:83:b5:d1:15:7c:0c:83:9e:b0:52:e0:8c:a0:e5:
         e5:c8:6e:71:fc:0c:18:96:6a:f9:f2:31:0e:b3:33:95:ea:4a:
         d1:6b:7e:aa:fd:26:b8:77:95:b1:73:69:8c:8f:27:3a:46:7a:
         49:0d:2d:20:92:ac:32:6a:cb:48:50:ca:9f:50:b1:62:87:d9:
         d9:9d:6b:67:de:5a:c3:ca:69:d4:06:f6:71:1e:47:d8:62:8e:
         7b:ce:9b:61:6f:54:fa:f9:7e:af:1e:a4:76:95:fa:84:f6:fe:
         76:ce:d1:bf:52:29:c5:5a:8e:e0:22:f6:10:5e:6c:12:3f:6b:
         d8:6f:ae:ef:da:fd:69:13:77:16:9c:2c:9e:c0:ae:bf:9d:32:
         df:4e:8a:ee:2e:e3:28:37:b2:4c:7e:6a:23:68:ba:90:eb:f3:
         f9:ee:c2:9a:6c:c7:38:0b:a8:7f:39:6a:56:de:e8:b6:32:f8:
         1b:59:79:bb:1d:d7:dd:6f:3c:0f:2e:d5:11:d9:4f:cf:52:54:
         1a:a1:d7:f7:75:cb:4c:ea:78:b1:93:2a:0e:d9:90:e4:14:fa:
         44:83:21:79:cc:a6:cd:8d:2c:b5:e7:e1:87:2a:8f:78:a3:9d:
         6d:86:0b:a3
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIULl0i4WEBgYESmQfY286zJQ1MhIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkzQkQ4MUQ5MEMzNENDNDk1MzdEOUNFMzY2RTkwNTlE
OTlFQkQyRDAeFw0yMTA3MTIyMDIwMDlaFw0yMjA3MTEyMDI1MDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjAyMjI5NkNGQTkwNEZGNjRF
MENENTNCQ0JGRkI3NDFEQ0E3OTM1QkFGODEyNzMwREEyNjg3ODdEMDZDNjc1Q0I4
NTU4ODcxRTc5NDRFM0RCMEE1RkUzQzcwMDIyNDcwQUMzRjNEMzA4MTY1RjNBQUEy
NEIxQUQ1QjA0QjY4RkNGMjgxODQ3Qzg3OTlCN0Q2Q0VGQUVCOTY2NDRGNDA5RTVG
OTI5OEZFMTA4QTlFRURENUE5RTM1QkYwNTc0NzkyQjI5RThGOUY0NTQxMUI5RDFD
M0VEOUFBQzgwMTI0NDc3OUVERkU2MDc1MjZDNTMyRUY1NTdFNTg2NzUzQ0IwMDFE
NjlFRDk4MUQxMkYxQjM4M0VERkMwNDIzQUU4MDA1OTZBQkUxN0ZCQjJFNkFENDhG
RjM5ODAzRUIwMEE3N0YzNTNEOTAwNEUzMkQ5NTJDOUZFMTRCMDA1NjUxNDQwQjUw
RkYyM0U5MTg2NUM2NDI5MTcyQzZDNzAxQjEzM0RCQkIzRDk3NUJFMjg3MDg1Njc0
NzZGRjczREE3QkI4ODFCMDA2MUMyQTNCNjVCMjc1OUYxQjUyMDNFMTFFMDcwNEE0
QUM2RkI2REE3QTFEQzkzQzYyMDlDMTk3NUJBRTI3NzRFRTU3QTg4RUY1NjM5Q0Iy
OTI1OTA5QjAwMzY4NkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsCIpbPqQT/ZODNU7y/+3Qdynk1uvgScw2iaHh9BsZ1y4VYhx55RO
PbCl/jxwAiRwrD89MIFl86qiSxrVsEto/PKBhHyHmbfWzvrrlmRPQJ5fkpj+EIqe
7dWp41vwV0eSsp6Pn0VBG50cPtmqyAEkR3nt/mB1JsUy71V+WGdTywAdae2YHRLx
s4Pt/AQjroAFlqvhf7suatSP85gD6wCnfzU9kATjLZUsn+FLAFZRRAtQ/yPpGGXG
QpFyxscBsTPbuz2XW+KHCFZ0dv9z2nu4gbAGHCo7ZbJ1nxtSA+EeBwSkrG+22nod
yTxiCcGXW64ndO5XqI71Y5yyklkJsANoawIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FJHTZrTxVOwLyscCEZWlTX92XJXaMB8GA1UdIwQYMBaAFEk72B2Qw0zElTfZzjZu
kFnZnr0tMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VGZzVOdG1qTUwzZFlQ
Vk1LZEhTb0xWRGNVQzR5a0I4c1JwalFYcWliQUNNLzAvNDkzQkQ4MUQ5MEMzNEND
NDk1MzdEOUNFMzY2RTkwNTlEOTlFQkQyRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80OTNCRDgxRDkwQzM0Q0M0OTUzN0Q5Q0UzNjZFOTA1OUQ5OUVC
RDJELmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FRmc1TnRtak1MM2RZUFZNS2RI
U29MVkRjVUM0eWtCOHNScGpRWHFpYkFDTS8wLzM0MzUyZTMxMzYzMDJlMzMyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzgzMzM4Mzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtoAMw
DQYJKoZIhvcNAQELBQADggEBAErHVWOJSZvnsj9md5PteVggHqyzEXqDtdEVfAyD
nrBS4Iyg5eXIbnH8DBiWavnyMQ6zM5XqStFrfqr9Jrh3lbFzaYyPJzpGekkNLSCS
rDJqy0hQyp9QsWKH2dmda2feWsPKadQG9nEeR9hijnvOm2FvVPr5fq8epHaV+oT2
/nbO0b9SKcVajuAi9hBebBI/a9hvru/a/WkTdxacLJ7Arr+dMt9Oiu4u4yg3skx+
aiNoupDr8/nuwppsxzgLqH85albe6LYy+BtZebsd191vPA8u1RHZT89SVBqh1/d1
y0zqeLGTKg7ZkOQU+kSDIXnMps2NLLXn4Ycqj3ijnW2GC6M=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:28 2025 by rpki-client