Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138352e302f32342d3234203d3e20323637323731.roa
File:                     34352e3233322e3138352e302f32342d3234203d3e20323637323731.roa (raw, json)
Hash identifier:          2SHty5DDNHRL/kbnaZ1hmYdZHAbBjCaH7tPSi9LDrlQ=
Subject key identifier:   3F:28:FE:98:82:C1:6A:35:1C:57:EC:5B:FB:8A:BA:10:49:9A:F9:9C
Certificate issuer:       /CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
Certificate serial:       514220185EEFFC91F90747E784E2E871A318A0EB
Authority key identifier: CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138352e302f32342d3234203d3e20323637323731.roa
Signing time:             Sun 05 Dec 2021 11:34:14 +0000
ROA not before:           Sun 05 Dec 2021 11:29:14 +0000
ROA not after:            Sun 04 Dec 2022 11:34:14 +0000
asID:                     267271
IP address blocks:        45.232.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:42:20:18:5e:ef:fc:91:f9:07:47:e7:84:e2:e8:71:a3:18:a0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
        Validity
            Not Before: Dec  5 11:29:14 2021 GMT
            Not After : Dec  4 11:34:14 2022 GMT
        Subject: CN=3082010A0282010100DB73F25FA8D8AA7D363A07BF9469305A73A43F758A0122C8A971E7F3F97065B95A71D16C25472025AABCFA1715D3651C59CA082463C6BE5B03F79DEC7831035CFF4E47E2CDDED033CCC56B4BE6BACCFE303EE5C9E6C9505B8D7A78934443C464400F2A7ADFE58879BCC1647D681C3ADC13FDA190E2B20628287AA87107A9F594F4E6B3237D4CFEABB1D65C4C799F9DD8072801EFFA78017C05697F3F347F2C39AC8DA9B09E80BBC037DAE95A337FFC0DC27C20624E9EEBE6A2F7CBDE423C9672DAA9203084C0D04AD4CA160690550CF97EC921766CB07F32CA7DF3B8EBF4B755681F2995C9BE0E9FDD564459C0A12CBADCAC6D765D911ED37C4EB449D41500010203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:73:f2:5f:a8:d8:aa:7d:36:3a:07:bf:94:69:
                    30:5a:73:a4:3f:75:8a:01:22:c8:a9:71:e7:f3:f9:
                    70:65:b9:5a:71:d1:6c:25:47:20:25:aa:bc:fa:17:
                    15:d3:65:1c:59:ca:08:24:63:c6:be:5b:03:f7:9d:
                    ec:78:31:03:5c:ff:4e:47:e2:cd:de:d0:33:cc:c5:
                    6b:4b:e6:ba:cc:fe:30:3e:e5:c9:e6:c9:50:5b:8d:
                    7a:78:93:44:43:c4:64:40:0f:2a:7a:df:e5:88:79:
                    bc:c1:64:7d:68:1c:3a:dc:13:fd:a1:90:e2:b2:06:
                    28:28:7a:a8:71:07:a9:f5:94:f4:e6:b3:23:7d:4c:
                    fe:ab:b1:d6:5c:4c:79:9f:9d:d8:07:28:01:ef:fa:
                    78:01:7c:05:69:7f:3f:34:7f:2c:39:ac:8d:a9:b0:
                    9e:80:bb:c0:37:da:e9:5a:33:7f:fc:0d:c2:7c:20:
                    62:4e:9e:eb:e6:a2:f7:cb:de:42:3c:96:72:da:a9:
                    20:30:84:c0:d0:4a:d4:ca:16:06:90:55:0c:f9:7e:
                    c9:21:76:6c:b0:7f:32:ca:7d:f3:b8:eb:f4:b7:55:
                    68:1f:29:95:c9:be:0e:9f:dd:56:44:59:c0:a1:2c:
                    ba:dc:ac:6d:76:5d:91:1e:d3:7c:4e:b4:49:d4:15:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:28:FE:98:82:C1:6A:35:1C:57:EC:5B:FB:8A:BA:10:49:9A:F9:9C
            X509v3 Authority Key Identifier:
                keyid:CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138352e302f32342d3234203d3e20323637323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:58:16:8d:e8:13:0c:34:d2:17:1f:81:8b:7f:98:9a:5f:1c:
         ec:53:a8:65:a5:d1:54:26:6b:a2:5b:3a:2c:fb:69:01:ed:85:
         a9:12:57:e9:46:10:d3:2b:03:71:be:c5:9a:49:16:13:48:c2:
         43:36:aa:21:46:67:c6:c1:a1:8c:49:b2:a4:2a:98:41:16:d3:
         d2:e2:6f:f3:61:ed:0a:7f:c9:4a:9b:2c:06:c2:21:5d:54:c8:
         1e:65:b4:3e:d6:da:55:ba:4c:b9:1c:35:7c:bb:48:48:a1:95:
         25:99:d5:d3:50:b0:50:dd:b9:bc:b6:17:20:ac:3c:e6:8b:c6:
         9e:79:65:0d:25:c2:80:4c:2e:c4:32:81:d8:cc:48:6a:7a:e0:
         8e:e5:67:cb:a8:be:84:66:30:6b:42:ba:45:47:22:3d:a8:30:
         ea:c2:73:e5:ab:9d:49:f6:5e:92:67:4b:89:50:46:47:ee:9a:
         d4:8a:3d:0b:d7:02:af:a0:28:25:0a:ad:d6:17:2d:22:86:67:
         85:15:49:c8:15:b6:7a:25:b8:b8:7b:e7:27:ec:fc:0b:fd:8d:
         b2:8e:f1:17:ad:fc:e4:03:82:0e:7e:38:13:a8:dd:b9:c0:dc:
         be:10:65:b1:92:bd:d0:a4:41:04:c4:a8:5c:b4:f1:e3:e9:b1:
         89:4f:31:d9
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUUUIgGF7v/JH5B0fnhOLocaMYoOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y3Q0EzQzdGNjQ4NEE4REMyNjg4ODk0RjZENzQwMkVE
NTU4MEJFQjAeFw0yMTEyMDUxMTI5MTRaFw0yMjEyMDQxMTM0MTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREI3M0YyNUZBOEQ4QUE3RDM2
M0EwN0JGOTQ2OTMwNUE3M0E0M0Y3NThBMDEyMkM4QTk3MUU3RjNGOTcwNjVCOTVB
NzFEMTZDMjU0NzIwMjVBQUJDRkExNzE1RDM2NTFDNTlDQTA4MjQ2M0M2QkU1QjAz
Rjc5REVDNzgzMTAzNUNGRjRFNDdFMkNEREVEMDMzQ0NDNTZCNEJFNkJBQ0NGRTMw
M0VFNUM5RTZDOTUwNUI4RDdBNzg5MzQ0NDNDNDY0NDAwRjJBN0FERkU1ODg3OUJD
QzE2NDdENjgxQzNBREMxM0ZEQTE5MEUyQjIwNjI4Mjg3QUE4NzEwN0E5RjU5NEY0
RTZCMzIzN0Q0Q0ZFQUJCMUQ2NUM0Qzc5OUY5REQ4MDcyODAxRUZGQTc4MDE3QzA1
Njk3RjNGMzQ3RjJDMzlBQzhEQTlCMDlFODBCQkMwMzdEQUU5NUEzMzdGRkMwREMy
N0MyMDYyNEU5RUVCRTZBMkY3Q0JERTQyM0M5NjcyREFBOTIwMzA4NEMwRDA0QUQ0
Q0ExNjA2OTA1NTBDRjk3RUM5MjE3NjZDQjA3RjMyQ0E3REYzQjhFQkY0Qjc1NTY4
MUYyOTk1QzlCRTBFOUZERDU2NDQ1OUMwQTEyQ0JBRENBQzZENzY1RDkxMUVEMzdD
NEVCNDQ5RDQxNTAwMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA23PyX6jYqn02Oge/lGkwWnOkP3WKASLIqXHn8/lwZblacdFsJUcg
Jaq8+hcV02UcWcoIJGPGvlsD953seDEDXP9OR+LN3tAzzMVrS+a6zP4wPuXJ5slQ
W416eJNEQ8RkQA8qet/liHm8wWR9aBw63BP9oZDisgYoKHqocQep9ZT05rMjfUz+
q7HWXEx5n53YBygB7/p4AXwFaX8/NH8sOayNqbCegLvAN9rpWjN//A3CfCBiTp7r
5qL3y95CPJZy2qkgMITA0ErUyhYGkFUM+X7JIXZssH8yyn3zuOv0t1VoHymVyb4O
n91WRFnAoSy63Kxtdl2RHtN8TrRJ1BUAAQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FD8o/piCwWo1HFfsW/uKuhBJmvmcMB8GA1UdIwQYMBaAFM98o8f2SEqNwmiIlPbX
QC7VWAvrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZxdHo1UFRVWUNkcXdK
NUNBSHJ1WVFpTjI2QURzVWplSkN4ZE43QXBTakV0LzAvQ0Y3Q0EzQzdGNjQ4NEE4
REMyNjg4ODk0RjZENzQwMkVENTU4MEJFQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DRjdDQTNDN0Y2NDg0QThEQzI2ODg4OTRGNkQ3NDAyRUQ1NTgw
QkVCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GcXR6NVBUVVlDZHF3SjVDQUhy
dVlRaU4yNkFEc1VqZUpDeGRON0FwU2pFdC8wLzM0MzUyZTMyMzMzMjJlMzEzODM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzIzNzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Lei5MA0GCSqGSIb3DQEBCwUAA4IBAQB4WBaN6BMMNNIXH4GLf5iaXxzsU6hlpdFU
JmuiWzos+2kB7YWpElfpRhDTKwNxvsWaSRYTSMJDNqohRmfGwaGMSbKkKphBFtPS
4m/zYe0Kf8lKmywGwiFdVMgeZbQ+1tpVuky5HDV8u0hIoZUlmdXTULBQ3bm8thcg
rDzmi8aeeWUNJcKATC7EMoHYzEhqeuCO5WfLqL6EZjBrQrpFRyI9qDDqwnPlq51J
9l6SZ0uJUEZH7prUij0L1wKvoCglCq3WFy0ihmeFFUnIFbZ6Jbi4e+cn7PwL/Y2y
jvEXrfzkA4IOfjgTqN25wNy+EGWxkr3QpEEExKhctPHj6bGJTzHZ
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:26:25 2025 by rpki-client