Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/34352e3138382e35322e302f32322d3234203d3e20323639353731.roa
File:                     34352e3138382e35322e302f32322d3234203d3e20323639353731.roa (raw, json)
Hash identifier:          EM9OtSAZ8SDWuYvtul0yir9MxBa9Tnxpi3d6y1g10yk=
Subject key identifier:   1A:06:B2:7D:DA:24:3C:A3:01:C7:F9:70:17:37:BC:CB:DC:9A:9B:D2
Certificate issuer:       /CN=7563E358B306B1B656613937C201B91663FEF5F9
Certificate serial:       0CB3B0A125DB78D73A250F37FF5E7A5B4C8419B0
Authority key identifier: 75:63:E3:58:B3:06:B1:B6:56:61:39:37:C2:01:B9:16:63:FE:F5:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7563E358B306B1B656613937C201B91663FEF5F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/34352e3138382e35322e302f32322d3234203d3e20323639353731.roa
Signing time:             Thu 12 May 2022 21:00:00 +0000
ROA not before:           Thu 12 May 2022 20:55:00 +0000
ROA not after:            Thu 11 May 2023 21:00:00 +0000
asID:                     269571
IP address blocks:        45.188.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b3:b0:a1:25:db:78:d7:3a:25:0f:37:ff:5e:7a:5b:4c:84:19:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7563E358B306B1B656613937C201B91663FEF5F9
        Validity
            Not Before: May 12 20:55:00 2022 GMT
            Not After : May 11 21:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:e0:62:3c:aa:0e:38:c9:64:ee:bf:04:e1:
                    31:2a:12:38:3a:58:68:78:eb:d3:71:7c:5c:75:ac:
                    cc:1e:86:a1:1e:70:ee:ce:4c:8d:e4:8d:66:d4:d4:
                    ad:f0:bc:8c:97:b6:10:79:84:0f:28:67:3a:ae:bd:
                    e1:49:8b:81:62:9b:0e:18:5d:e4:8d:a0:c6:21:b7:
                    77:81:ac:33:49:5c:73:75:0c:3e:ea:58:8c:40:04:
                    06:52:5e:28:26:1d:7a:1f:a8:62:af:f9:5e:d3:72:
                    7e:b1:99:c8:c4:5b:ce:ba:c0:5f:82:43:fd:17:8c:
                    4d:a3:a4:3d:67:0d:b3:d3:7d:5b:a6:90:35:8f:fc:
                    ad:8c:da:cd:c4:29:65:bb:0a:87:e8:62:80:4b:7d:
                    92:bb:c3:23:0b:40:a1:95:8e:88:36:88:fd:f3:7a:
                    05:d8:91:63:d9:41:32:d1:b4:a5:3b:2c:1a:32:dc:
                    0e:eb:d8:13:c8:be:27:f3:83:16:48:20:8c:65:24:
                    25:89:c5:cf:d7:fe:d1:f6:f0:9c:06:56:f4:2e:59:
                    bf:82:4a:07:07:50:45:24:1b:ec:c5:e1:4a:3b:68:
                    02:5e:f5:fd:72:ef:d0:d0:22:d7:c5:a6:19:be:9b:
                    11:ef:93:7c:9b:5c:f1:12:0e:59:04:51:91:3b:84:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:06:B2:7D:DA:24:3C:A3:01:C7:F9:70:17:37:BC:CB:DC:9A:9B:D2
            X509v3 Authority Key Identifier:
                keyid:75:63:E3:58:B3:06:B1:B6:56:61:39:37:C2:01:B9:16:63:FE:F5:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/7563E358B306B1B656613937C201B91663FEF5F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7563E358B306B1B656613937C201B91663FEF5F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/34352e3138382e35322e302f32322d3234203d3e20323639353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:16:22:38:17:09:26:8b:da:1a:3a:2b:33:17:54:b4:f8:a1:
         d1:36:c4:d8:d5:2d:0b:5b:50:6b:74:86:39:0b:6e:e2:42:e4:
         61:33:af:e2:b0:c1:6a:29:02:c4:5e:29:a3:8b:e4:c0:cf:d9:
         01:30:60:6a:f2:4e:ea:4e:74:97:5b:67:9e:72:7c:79:1d:e4:
         79:c3:4b:55:7b:7e:b7:05:5a:83:9b:01:8f:9b:bf:fb:49:50:
         66:35:e1:c4:22:f5:dd:d8:62:2f:9a:db:68:72:5f:78:27:a8:
         33:0b:61:d8:43:2f:c8:aa:37:ed:4b:6e:9e:d3:7f:42:5b:53:
         e4:36:fe:ce:e4:6c:d6:9e:12:60:ea:41:01:28:19:ba:dc:83:
         e5:6e:f0:c1:3b:bb:53:c1:e9:9b:31:c1:8f:64:20:bc:56:98:
         d8:c6:be:21:4f:57:1e:67:90:32:06:be:01:63:6b:64:0d:4b:
         1e:be:fa:14:7c:8e:69:e1:ac:b2:df:1c:bf:a2:b5:f0:fd:38:
         ce:80:59:47:63:c2:56:45:c4:25:46:0c:32:82:3b:ac:fa:bc:
         bf:82:37:ec:3e:c8:2a:f2:b1:3d:38:25:93:20:bd:09:9a:35:
         46:35:74:b7:40:4f:8b:63:4f:82:d9:e7:6c:b0:23:95:5a:31:
         b8:49:b2:c9
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUDLOwoSXbeNc6JQ83/156W0yEGbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU2M0UzNThCMzA2QjFCNjU2NjEzOTM3QzIwMUI5MTY2
M0ZFRjVGOTAeFw0yMjA1MTIyMDU1MDBaFw0yMzA1MTEyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNGQUUwNjIzQ0FBMEUzOEM5
NjRFRUJGMDRFMTMxMkExMjM4M0E1ODY4NzhFQkQzNzE3QzVDNzVBQ0NDMUU4NkEx
MUU3MEVFQ0U0QzhERTQ4RDY2RDRENEFERjBCQzhDOTdCNjEwNzk4NDBGMjg2NzNB
QUVCREUxNDk4QjgxNjI5QjBFMTg1REU0OERBMEM2MjFCNzc3ODFBQzMzNDk1Qzcz
NzUwQzNFRUE1ODhDNDAwNDA2NTI1RTI4MjYxRDdBMUZBODYyQUZGOTVFRDM3MjdF
QjE5OUM4QzQ1QkNFQkFDMDVGODI0M0ZEMTc4QzREQTNBNDNENjcwREIzRDM3RDVC
QTY5MDM1OEZGQ0FEOENEQUNEQzQyOTY1QkIwQTg3RTg2MjgwNEI3RDkyQkJDMzIz
MEI0MEExOTU4RTg4MzY4OEZERjM3QTA1RDg5MTYzRDk0MTMyRDFCNEE1M0IyQzFB
MzJEQzBFRUJEODEzQzhCRTI3RjM4MzE2NDgyMDhDNjUyNDI1ODlDNUNGRDdGRUQx
RjZGMDlDMDY1NkY0MkU1OUJGODI0QTA3MDc1MDQ1MjQxQkVDQzVFMTRBM0I2ODAy
NUVGNUZENzJFRkQwRDAyMkQ3QzVBNjE5QkU5QjExRUY5MzdDOUI1Q0YxMTIwRTU5
MDQ1MTkxM0I4NEY4N0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvPrgYjyqDjjJZO6/BOExKhI4OlhoeOvTcXxcdazMHoahHnDuzkyN
5I1m1NSt8LyMl7YQeYQPKGc6rr3hSYuBYpsOGF3kjaDGIbd3gawzSVxzdQw+6liM
QAQGUl4oJh16H6hir/le03J+sZnIxFvOusBfgkP9F4xNo6Q9Zw2z031bppA1j/yt
jNrNxClluwqH6GKAS32Su8MjC0ChlY6INoj983oF2JFj2UEy0bSlOywaMtwO69gT
yL4n84MWSCCMZSQlicXP1/7R9vCcBlb0Llm/gkoHB1BFJBvsxeFKO2gCXvX9cu/Q
0CLXxaYZvpsR75N8m1zxEg5ZBFGRO4T4fwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FBoGsn3aJDyjAcf5cBc3vMvcmpvSMB8GA1UdIwQYMBaAFHVj41izBrG2VmE5N8IB
uRZj/vX5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VQUVlaNHJpeHdSYm5N
SjJvR2g5UEV0Wk1CWHJmR2NzSjluWWJyNkpDTXlvLzAvNzU2M0UzNThCMzA2QjFC
NjU2NjEzOTM3QzIwMUI5MTY2M0ZFRjVGOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NTYzRTM1OEIzMDZCMUI2NTY2MTM5MzdDMjAxQjkxNjYzRkVG
NUY5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FUFFZWjRyaXh3UmJuTUoyb0do
OVBFdFpNQlhyZkdjc0o5bllicjZKQ015by8wLzM0MzUyZTMxMzgzODJlMzUzMjJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM1MzczMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi28
NDANBgkqhkiG9w0BAQsFAAOCAQEAxhYiOBcJJovaGjorMxdUtPih0TbE2NUtC1tQ
a3SGOQtu4kLkYTOv4rDBaikCxF4po4vkwM/ZATBgavJO6k50l1tnnnJ8eR3kecNL
VXt+twVag5sBj5u/+0lQZjXhxCL13dhiL5rbaHJfeCeoMwth2EMvyKo37UtuntN/
QltT5Db+zuRs1p4SYOpBASgZutyD5W7wwTu7U8HpmzHBj2QgvFaY2Ma+IU9XHmeQ
Mga+AWNrZA1LHr76FHyOaeGsst8cv6K18P04zoBZR2PCVkXEJUYMMoI7rPq8v4I3
7D7IKvKxPTglkyC9CZo1RjV0t0BPi2NPgtnnbLAjlVoxuEmyyQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:38 2025 by rpki-client