Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/34352e3233332e34382e302f32322d3234203d3e20323637323934.roa
File:                     34352e3233332e34382e302f32322d3234203d3e20323637323934.roa (raw, json)
Hash identifier:          KBZHDNJjX6069Maw0TJ5iFkUQgazRjjYg1lDRpdXVUQ=
Subject key identifier:   AE:45:38:77:45:4C:EE:0F:48:A6:EB:59:93:67:8B:23:D0:B5:79:F2
Certificate issuer:       /CN=3FB7873B41762305642E25A883D0E038F87AB647
Certificate serial:       51F1A7BC65E02D10F5DEFC1AD7C8B8D4BCE4801B
Authority key identifier: 3F:B7:87:3B:41:76:23:05:64:2E:25:A8:83:D0:E0:38:F8:7A:B6:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB7873B41762305642E25A883D0E038F87AB647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/34352e3233332e34382e302f32322d3234203d3e20323637323934.roa
Signing time:             Tue 07 Sep 2021 16:24:00 +0000
ROA not before:           Tue 07 Sep 2021 16:19:00 +0000
ROA not after:            Tue 06 Sep 2022 16:24:00 +0000
asID:                     267294
IP address blocks:        45.233.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f1:a7:bc:65:e0:2d:10:f5:de:fc:1a:d7:c8:b8:d4:bc:e4:80:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB7873B41762305642E25A883D0E038F87AB647
        Validity
            Not Before: Sep  7 16:19:00 2021 GMT
            Not After : Sep  6 16:24:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:02:65:4a:a3:7c:d3:68:21:fb:64:5b:de:
                    79:a7:af:64:11:12:79:11:e4:af:07:9d:72:e6:15:
                    2f:76:1a:99:42:6c:3f:b8:b0:ff:13:14:48:d9:12:
                    c5:79:9c:b9:a7:4c:d5:bf:2e:a2:c6:0a:0f:6b:88:
                    e1:da:48:3a:f5:f5:51:f5:25:3f:ae:08:59:be:1c:
                    b4:36:ea:a9:ab:59:7a:25:c6:45:40:4a:d4:88:87:
                    5a:50:ad:19:9c:97:88:04:50:a0:42:6e:71:e4:5a:
                    17:54:ac:94:74:11:dc:71:ee:a3:89:4b:4b:8e:74:
                    dd:39:bc:32:81:ed:44:41:07:3b:c8:55:ad:94:53:
                    57:75:19:19:a6:5b:ce:12:22:58:bd:87:25:5a:e2:
                    4f:dc:7f:46:a9:63:a7:43:35:a8:e5:1d:66:bb:7c:
                    94:22:b2:89:f5:90:04:f3:24:34:31:8c:5c:01:82:
                    03:67:95:62:3f:c6:c8:e3:1b:76:87:04:47:b0:bd:
                    e7:1d:b5:f1:73:64:7f:b1:35:5b:04:60:b7:03:81:
                    4a:fa:8b:3e:9e:cd:b8:8a:77:93:76:3e:59:37:bd:
                    ec:cd:17:eb:fa:52:b3:db:02:6e:78:24:40:8c:62:
                    20:2c:3a:2a:e3:ca:22:e1:b4:38:cb:77:c4:ba:bd:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:45:38:77:45:4C:EE:0F:48:A6:EB:59:93:67:8B:23:D0:B5:79:F2
            X509v3 Authority Key Identifier:
                keyid:3F:B7:87:3B:41:76:23:05:64:2E:25:A8:83:D0:E0:38:F8:7A:B6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/3FB7873B41762305642E25A883D0E038F87AB647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB7873B41762305642E25A883D0E038F87AB647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/34352e3233332e34382e302f32322d3234203d3e20323637323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:5f:46:ae:85:e3:30:a4:4e:da:3c:0c:66:6f:4d:9a:76:d1:
         7f:04:63:c4:fc:65:b6:aa:9d:e8:7f:ac:a1:1a:a3:68:8b:ee:
         64:7a:ba:d6:d7:d1:5b:82:31:8b:91:82:b9:bc:c9:83:20:92:
         4e:a2:1f:3c:26:5c:36:b0:9a:41:d5:f3:dd:33:3b:76:d5:9f:
         c8:7d:f8:d9:95:8f:f4:ee:2a:40:0d:fb:47:04:da:eb:68:cd:
         68:73:ad:e8:12:3d:eb:76:6a:0c:93:aa:1c:c4:aa:00:ee:6a:
         f5:2a:09:4b:e0:16:6b:1f:a4:99:ab:42:01:5f:85:ff:16:d6:
         7d:27:ff:68:b0:ad:80:aa:4b:fe:ce:b3:25:05:11:fa:38:ce:
         95:4e:91:fc:8e:43:ea:7b:9c:8d:ec:7d:3c:74:86:9b:f6:36:
         ff:4f:87:14:90:af:75:1e:4a:77:d7:23:65:c7:82:36:cc:94:
         34:be:95:e5:4a:82:1b:60:db:e7:b6:0f:23:34:97:2a:90:c3:
         f4:0e:33:86:ea:9b:e3:65:99:4c:5c:ec:c6:cb:10:da:4c:64:
         27:4f:c4:c6:10:37:2f:4e:93:2c:eb:37:78:55:8b:be:b9:6e:
         ad:26:e4:99:04:f1:67:76:72:d9:47:68:8a:e9:8e:ff:e4:bf:
         d3:89:bb:c7
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUUfGnvGXgLRD13vwa18i41LzkgBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZCNzg3M0I0MTc2MjMwNTY0MkUyNUE4ODNEMEUwMzhG
ODdBQjY0NzAeFw0yMTA5MDcxNjE5MDBaFw0yMjA5MDYxNjI0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDI0RTAyNjU0QUEzN0NEMzY4
MjFGQjY0NUJERTc5QTdBRjY0MTExMjc5MTFFNEFGMDc5RDcyRTYxNTJGNzYxQTk5
NDI2QzNGQjhCMEZGMTMxNDQ4RDkxMkM1Nzk5Q0I5QTc0Q0Q1QkYyRUEyQzYwQTBG
NkI4OEUxREE0ODNBRjVGNTUxRjUyNTNGQUUwODU5QkUxQ0I0MzZFQUE5QUI1OTdB
MjVDNjQ1NDA0QUQ0ODg4NzVBNTBBRDE5OUM5Nzg4MDQ1MEEwNDI2RTcxRTQ1QTE3
NTRBQzk0NzQxMURDNzFFRUEzODk0QjRCOEU3NEREMzlCQzMyODFFRDQ0NDEwNzNC
Qzg1NUFEOTQ1MzU3NzUxOTE5QTY1QkNFMTIyMjU4QkQ4NzI1NUFFMjRGREM3RjQ2
QTk2M0E3NDMzNUE4RTUxRDY2QkI3Qzk0MjJCMjg5RjU5MDA0RjMyNDM0MzE4QzVD
MDE4MjAzNjc5NTYyM0ZDNkM4RTMxQjc2ODcwNDQ3QjBCREU3MURCNUYxNzM2NDdG
QjEzNTVCMDQ2MEI3MDM4MTRBRkE4QjNFOUVDREI4OEE3NzkzNzYzRTU5MzdCREVD
Q0QxN0VCRkE1MkIzREIwMjZFNzgyNDQwOEM2MjIwMkMzQTJBRTNDQTIyRTFCNDM4
Q0I3N0M0QkFCREFFODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0k4CZUqjfNNoIftkW955p69kERJ5EeSvB51y5hUvdhqZQmw/uLD/
ExRI2RLFeZy5p0zVvy6ixgoPa4jh2kg69fVR9SU/rghZvhy0Nuqpq1l6JcZFQErU
iIdaUK0ZnJeIBFCgQm5x5FoXVKyUdBHcce6jiUtLjnTdObwyge1EQQc7yFWtlFNX
dRkZplvOEiJYvYclWuJP3H9GqWOnQzWo5R1mu3yUIrKJ9ZAE8yQ0MYxcAYIDZ5Vi
P8bI4xt2hwRHsL3nHbXxc2R/sTVbBGC3A4FK+os+ns24ineTdj5ZN73szRfr+lKz
2wJueCRAjGIgLDoq48oi4bQ4y3fEur2ugQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FK5FOHdFTO4PSKbrWZNniyPQtXnyMB8GA1UdIwQYMBaAFD+3hztBdiMFZC4lqIPQ
4Dj4erZHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VQcDVEMVRQYTNXUGZL
Qk41RjJKTFdIZVljTTNHWFBybTdYNDdiVmtkZDFLLzAvM0ZCNzg3M0I0MTc2MjMw
NTY0MkUyNUE4ODNEMEUwMzhGODdBQjY0Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zRkI3ODczQjQxNzYyMzA1NjQyRTI1QTg4M0QwRTAzOEY4N0FC
NjQ3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FUHA1RDFUUGEzV1BmS0JONUYy
SkxXSGVZY00zR1hQcm03WDQ3YlZrZGQxSy8wLzM0MzUyZTMyMzMzMzJlMzQzODJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzMyMzkzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3p
MDANBgkqhkiG9w0BAQsFAAOCAQEAoV9GroXjMKRO2jwMZm9NmnbRfwRjxPxltqqd
6H+soRqjaIvuZHq61tfRW4Ixi5GCubzJgyCSTqIfPCZcNrCaQdXz3TM7dtWfyH34
2ZWP9O4qQA37RwTa62jNaHOt6BI963ZqDJOqHMSqAO5q9SoJS+AWax+kmatCAV+F
/xbWfSf/aLCtgKpL/s6zJQUR+jjOlU6R/I5D6nucjex9PHSGm/Y2/0+HFJCvdR5K
d9cjZceCNsyUNL6V5UqCG2Db57YPIzSXKpDD9A4zhuqb42WZTFzsxssQ2kxkJ0/E
xhA3L06TLOs3eFWLvrlurSbkmQTxZ3Zy2UdoiumO/+S/04m7xw==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:28 2025 by rpki-client