Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/34352e3138322e3134342e302f32332d3233203d3e20323639323137.roa
File:                     34352e3138322e3134342e302f32332d3233203d3e20323639323137.roa (raw, json)
Hash identifier:          y6AYPM3A6opigTqmDGdZ294ZgIuoi1DW/S9XMnDkjfE=
Subject key identifier:   59:D0:4A:A1:71:F5:19:11:FD:DE:9E:12:AD:6C:2A:CA:7C:47:43:04
Certificate issuer:       /CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
Certificate serial:       34D00E8A17D219D734F4BA09CD24768AFB3C3577
Authority key identifier: C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/34352e3138322e3134342e302f32332d3233203d3e20323639323137.roa
Signing time:             Wed 15 Jan 2025 14:53:53 +0000
ROA not before:           Wed 15 Jan 2025 14:48:53 +0000
ROA not after:            Wed 14 Jan 2026 14:53:53 +0000
asID:                     269217
IP address blocks:        45.182.144.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d0:0e:8a:17:d2:19:d7:34:f4:ba:09:cd:24:76:8a:fb:3c:35:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
        Validity
            Not Before: Jan 15 14:48:53 2025 GMT
            Not After : Jan 14 14:53:53 2026 GMT
        Subject: CN=59D04AA171F51911FDDE9E12AD6C2ACA7C474304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:8d:da:d7:24:f0:c8:df:20:13:fa:12:e3:
                    8e:ce:a9:cd:cf:d8:ed:de:ee:d7:28:a8:8a:bf:6e:
                    77:18:66:14:7f:96:ba:64:c5:a5:50:11:4c:65:56:
                    f7:7b:0d:61:42:7f:9e:6d:bb:90:3f:ff:ab:fb:14:
                    90:07:24:6d:3b:10:f3:5b:48:05:f0:de:3d:82:25:
                    9c:a4:1d:45:d6:f5:17:64:8d:88:e7:10:1a:db:72:
                    1b:51:98:d8:85:71:e2:b1:21:d2:22:1c:54:57:54:
                    d5:7a:55:b9:8a:b3:ee:21:14:ac:60:29:8f:b3:b9:
                    98:c4:4f:b7:36:df:e8:7c:f8:67:b6:03:3c:fa:76:
                    cd:c3:4b:7c:36:8b:1d:8f:2a:80:bb:24:e7:d8:60:
                    59:19:7c:ea:a1:7b:32:89:51:b2:1b:a2:05:7a:15:
                    1a:ae:ca:ac:22:7f:42:f8:cb:60:b3:7a:f9:e9:f2:
                    6a:01:c0:98:33:f6:ef:f5:b9:a2:91:62:dc:d3:ce:
                    af:fe:95:ca:60:b1:98:ad:4b:44:ef:d2:86:fb:8a:
                    5b:7a:c7:bf:7c:48:f9:a0:a7:ab:2f:36:15:c8:f1:
                    3f:42:b1:3d:34:6d:89:e8:3d:1e:c3:c9:aa:80:d0:
                    30:f2:3c:74:57:f5:30:f7:d8:52:ce:7e:e0:f6:02:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D0:4A:A1:71:F5:19:11:FD:DE:9E:12:AD:6C:2A:CA:7C:47:43:04
            X509v3 Authority Key Identifier:
                keyid:C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/34352e3138322e3134342e302f32332d3233203d3e20323639323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:df:1a:90:ae:b0:c8:c6:eb:c0:5c:83:89:68:f5:67:23:94:
         34:4c:61:7e:83:b4:6d:98:f0:2c:d3:59:9f:98:8f:fa:e7:24:
         0b:c9:c5:61:f7:d3:e0:ec:fc:24:fd:49:87:ac:61:37:63:af:
         26:6f:de:70:df:9b:96:01:04:0d:e2:82:c7:b1:27:27:d1:5f:
         24:cf:53:f7:d5:a7:a7:17:2c:70:e1:0a:b6:d7:de:83:70:23:
         eb:69:cf:46:40:89:27:b6:ee:4c:de:bc:9b:50:b5:2b:23:55:
         f3:ca:11:24:0b:fa:00:ba:a1:3a:f3:02:20:cc:2b:1c:81:da:
         38:fa:25:a3:75:5f:4e:ec:7c:1a:82:4f:ff:16:62:86:bd:f9:
         ac:a7:d6:2d:db:5d:89:70:18:f9:8d:7b:e6:13:ef:51:2d:b7:
         b8:c8:66:d0:66:91:22:32:38:e1:50:f7:ca:01:d7:27:e1:9f:
         a5:50:57:91:4d:75:57:7e:cc:9c:f5:e1:9e:ac:9c:4a:a9:6b:
         32:36:e5:da:d1:18:fa:72:e3:67:c1:c8:7c:27:71:dd:81:90:
         61:cd:be:d7:48:45:e2:91:f1:b2:c3:28:7e:08:d3:32:96:ad:
         54:c2:47:9d:bd:b4:0a:84:21:d6:a5:ce:3c:82:24:f4:d0:49:
         4d:27:1e:c9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNNAOihfSGdc09LoJzSR2ivs8NXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJFNTU0N0I1N0YxOUZFOTJDMTE2MDFFQUY4REU3QjlC
QzRBOTM0OTAeFw0yNTAxMTUxNDQ4NTNaFw0yNjAxMTQxNDUzNTNaMDMxMTAvBgNV
BAMTKDU5RDA0QUExNzFGNTE5MTFGRERFOUUxMkFENkMyQUNBN0M0NzQzMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4dI3a1yTwyN8gE/oS447Oqc3P
2O3e7tcoqIq/bncYZhR/lrpkxaVQEUxlVvd7DWFCf55tu5A//6v7FJAHJG07EPNb
SAXw3j2CJZykHUXW9RdkjYjnEBrbchtRmNiFceKxIdIiHFRXVNV6VbmKs+4hFKxg
KY+zuZjET7c23+h8+Ge2Azz6ds3DS3w2ix2PKoC7JOfYYFkZfOqhezKJUbIbogV6
FRquyqwif0L4y2Czevnp8moBwJgz9u/1uaKRYtzTzq/+lcpgsZitS0Tv0ob7ilt6
x798SPmgp6svNhXI8T9CsT00bYnoPR7DyaqA0DDyPHRX9TD32FLOfuD2Ar7NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWdBKoXH1GRH93p4SrWwqynxHQwQwHwYDVR0j
BBgwFoAUwuVUe1fxn+ksEWAer43nubxKk0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFpyVHFkWnRMYld6VzFWWEhickFlMjhLOUtoNms0ZzdESmVqV25QRzZU
MkcvMC9DMkU1NTQ3QjU3RjE5RkU5MkMxMTYwMUVBRjhERTdCOUJDNEE5MzQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyRTU1NDdCNTdGMTlGRTky
QzExNjAxRUFGOERFN0I5QkM0QTkzNDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0haclRxZFp0TGJXelcxVlhIYnJBZTI4SzlLaDZrNGc3REplalduUEc2VDJHLzAv
MzQzNTJlMzEzODMyMmUzMTM0MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEttpAwDQYJKoZIhvcNAQELBQADggEBAIHfGpCu
sMjG68Bcg4lo9WcjlDRMYX6DtG2Y8CzTWZ+Yj/rnJAvJxWH30+Ds/CT9SYesYTdj
ryZv3nDfm5YBBA3igsexJyfRXyTPU/fVp6cXLHDhCrbX3oNwI+tpz0ZAiSe27kze
vJtQtSsjVfPKESQL+gC6oTrzAiDMKxyB2jj6JaN1X07sfBqCT/8WYoa9+ayn1i3b
XYlwGPmNe+YT71Ett7jIZtBmkSIyOOFQ98oB1yfhn6VQV5FNdVd+zJz14Z6snEqp
azI25drRGPpy42fByHwncd2BkGHNvtdIReKR8bLDKH4I0zKWrVTCR529tAqEIdal
zjyCJPTQSU0nHsk=
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:26:48 2025 by rpki-client