Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa
File:                     3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa (raw, json)
Hash identifier:          5G9Dy/D8jUa6k6N7o6A0OHuAONqqnFUQzjSegVsSatU=
Subject key identifier:   37:81:B9:50:9E:38:75:5D:17:32:A5:F0:18:20:C3:07:D4:FE:EC:A7
Certificate issuer:       /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial:       12474C02C236E5DD9930B5EDD2B5AB4145648D0E
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa
Signing time:             Thu 06 Mar 2025 17:52:26 +0000
ROA not before:           Thu 06 Mar 2025 17:47:26 +0000
ROA not after:            Thu 05 Mar 2026 17:52:26 +0000
asID:                     264512
IP address blocks:        132.255.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:47:4c:02:c2:36:e5:dd:99:30:b5:ed:d2:b5:ab:41:45:64:8d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
        Validity
            Not Before: Mar  6 17:47:26 2025 GMT
            Not After : Mar  5 17:52:26 2026 GMT
        Subject: CN=3781B9509E38755D1732A5F01820C307D4FEECA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:29:84:e7:97:ba:59:97:95:dc:53:e7:bc:
                    ec:d5:81:a2:0b:83:e8:fb:ba:9a:24:77:f6:4b:41:
                    07:22:b2:4f:d6:ec:88:35:aa:60:59:db:bc:6d:d2:
                    c2:fe:81:e5:18:3e:02:ad:98:29:23:ea:ab:e2:b2:
                    6d:11:e0:86:4f:8e:1d:9a:ff:c3:78:93:42:5b:75:
                    c4:0a:66:e0:2e:f4:ba:71:33:f1:77:57:30:63:0b:
                    b4:9b:46:2b:e3:b4:b3:e4:78:15:35:1c:02:ef:43:
                    f0:a8:15:b0:72:9f:34:6f:a8:9a:72:f5:12:9e:cd:
                    10:b0:59:61:72:36:ae:d0:e2:bd:86:8e:64:fa:fb:
                    68:cb:03:df:dd:9b:23:a9:2e:65:06:01:90:a6:70:
                    76:88:68:f2:7b:6a:47:92:6f:dc:bc:81:de:1e:35:
                    0d:7d:05:8b:5c:39:5c:c8:2e:85:98:22:e4:ce:f4:
                    f1:65:31:f5:a3:0a:cd:71:4e:ac:55:3d:a5:bf:cf:
                    64:86:a5:7e:2b:56:8a:57:a3:9e:25:06:20:1e:57:
                    1f:e2:3d:a7:eb:ea:50:a8:9a:19:a7:62:06:04:d7:
                    72:f7:b5:0c:32:65:79:be:22:3d:24:41:c3:a7:38:
                    7b:48:0b:97:47:0e:6d:7c:d7:31:16:26:31:f2:84:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:81:B9:50:9E:38:75:5D:17:32:A5:F0:18:20:C3:07:D4:FE:EC:A7
            X509v3 Authority Key Identifier:
                keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:0f:17:ed:b2:ad:95:38:a7:76:77:11:55:fc:72:ac:05:99:
         13:c7:6d:f0:be:b2:a4:12:38:72:48:2e:58:f8:f7:f4:81:2b:
         a5:d1:93:b0:fd:b1:72:d7:72:69:23:62:49:a8:d1:df:ce:bf:
         fe:ec:06:93:72:20:5d:db:42:76:23:15:56:8a:90:59:54:7e:
         c2:d7:3a:8d:17:8a:6f:27:8b:ef:a4:a5:97:54:28:df:0f:94:
         cb:93:3e:89:8f:2d:a7:38:51:f7:41:09:60:7e:f6:0c:25:24:
         2a:14:f4:7d:fc:c2:45:a2:c9:27:86:49:ed:19:ba:e2:91:db:
         7d:e9:4b:d3:f4:98:8d:c9:65:16:89:60:cc:a4:a5:39:26:98:
         81:83:dc:cf:9e:68:fe:96:1b:be:45:19:14:9d:26:fe:4e:a1:
         30:04:d0:15:c4:59:9b:fc:5f:55:a1:16:de:a7:cc:b2:06:fc:
         ad:d7:e7:a6:b2:88:ee:fa:d6:c3:7c:04:67:d6:10:8b:90:e3:
         b1:b3:d8:22:18:36:aa:0c:2f:30:86:2e:eb:17:c5:d0:e9:08:
         ad:ff:7e:ba:23:14:62:9c:4c:6b:13:aa:21:d5:66:32:63:e8:
         ee:d6:fe:b7:80:ce:86:c2:15:4e:23:55:92:09:32:45:8e:86:
         94:70:b5:f2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEkdMAsI25d2ZMLXt0rWrQUVkjQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U0NDQzMjUwMDlEQzg1QkU3MTJCQ0QwMTE1NjUxMEYy
QjZGNEFCOTAeFw0yNTAzMDYxNzQ3MjZaFw0yNjAzMDUxNzUyMjZaMDMxMTAvBgNV
BAMTKDM3ODFCOTUwOUUzODc1NUQxNzMyQTVGMDE4MjBDMzA3RDRGRUVDQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWYCmE55e6WZeV3FPnvOzVgaIL
g+j7upokd/ZLQQcisk/W7Ig1qmBZ27xt0sL+geUYPgKtmCkj6qvism0R4IZPjh2a
/8N4k0JbdcQKZuAu9LpxM/F3VzBjC7SbRivjtLPkeBU1HALvQ/CoFbBynzRvqJpy
9RKezRCwWWFyNq7Q4r2GjmT6+2jLA9/dmyOpLmUGAZCmcHaIaPJ7akeSb9y8gd4e
NQ19BYtcOVzILoWYIuTO9PFlMfWjCs1xTqxVPaW/z2SGpX4rVopXo54lBiAeVx/i
Pafr6lComhmnYgYE13L3tQwyZXm+Ij0kQcOnOHtIC5dHDm181zEWJjHyhGoBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUN4G5UJ44dV0XMqXwGCDDB9T+7KcwHwYDVR0j
BBgwFoAUzkRDJQCdyFvnErzQEVZRDytvSrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVp4UmJKY1hoQk01b2ttMTZUMmRyU2VKbkJvZ29mREw0MXZTZEZoOVJS
V00vMS9DRTQ0NDMyNTAwOURDODVCRTcxMkJDRDAxMTU2NTEwRjJCNkY0QUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNDQ0MzI1MDA5REM4NUJF
NzEyQkNEMDExNTY1MTBGMkI2RjRBQjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VaeFJiSmNYaEJNNW9rbTE2VDJkclNlSm5Cb2dvZkRMNDF2U2RGaDlSUldNLzEv
MzEzMzMyMmUzMjM1MzUyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoT/5DANBgkqhkiG9w0BAQsFAAOCAQEATQ8X
7bKtlTindncRVfxyrAWZE8dt8L6ypBI4ckguWPj39IErpdGTsP2xctdyaSNiSajR
386//uwGk3IgXdtCdiMVVoqQWVR+wtc6jReKbyeL76Sll1Qo3w+Uy5M+iY8tpzhR
90EJYH72DCUkKhT0ffzCRaLJJ4ZJ7Rm64pHbfelL0/SYjcllFolgzKSlOSaYgYPc
z55o/pYbvkUZFJ0m/k6hMATQFcRZm/xfVaEW3qfMsgb8rdfnprKI7vrWw3wEZ9YQ
i5DjsbPYIhg2qgwvMIYu6xfF0OkIrf9+uiMUYpxMaxOqIdVmMmPo7tb+t4DOhsIV
TiNVkgkyRY6GlHC18g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 07:38:59 2025 by rpki-client