Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBs3D6r5ktaFh53BSxwh1nNtWKSCXoF45sNHky94K21j/0/34352e3136322e3134382e302f32322d3332203d3e20323638353231.roa
File:                     34352e3136322e3134382e302f32322d3332203d3e20323638353231.roa (raw, json)
Hash identifier:          M82r6+q/MWq88syPdW7hEr/8W9gbeosa3zpbyPbZdaM=
Subject key identifier:   8C:46:63:5E:9F:0B:4C:D8:EB:F7:0A:C5:3F:AF:BA:73:1B:F3:81:81
Certificate issuer:       /CN=EEDE5F62FA0D81697B8E8CFCDF5ACAB5983E82D8
Certificate serial:       0DD3985EFBCA33E69245A2B446A2E2441B8422F3
Authority key identifier: EE:DE:5F:62:FA:0D:81:69:7B:8E:8C:FC:DF:5A:CA:B5:98:3E:82:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EEDE5F62FA0D81697B8E8CFCDF5ACAB5983E82D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBs3D6r5ktaFh53BSxwh1nNtWKSCXoF45sNHky94K21j/0/34352e3136322e3134382e302f32322d3332203d3e20323638353231.roa
Signing time:             Tue 12 Jul 2022 16:48:17 +0000
ROA not before:           Tue 12 Jul 2022 16:43:17 +0000
ROA not after:            Wed 12 Jul 2023 16:48:17 +0000
asID:                     268521
IP address blocks:        45.162.148.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d3:98:5e:fb:ca:33:e6:92:45:a2:b4:46:a2:e2:44:1b:84:22:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEDE5F62FA0D81697B8E8CFCDF5ACAB5983E82D8
        Validity
            Not Before: Jul 12 16:43:17 2022 GMT
            Not After : Jul 12 16:48:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:34:76:86:02:fc:40:76:19:a9:cc:07:a0:
                    01:63:4a:0e:f7:09:aa:4c:79:74:89:f2:0f:66:9c:
                    eb:3d:a2:f0:1b:ed:25:cb:65:f7:a0:d3:1e:ac:8d:
                    3a:1d:d8:94:9b:ec:e0:13:5e:a9:59:75:d2:2d:ae:
                    89:80:93:6e:74:04:bf:7d:30:4f:90:a4:3b:c0:ab:
                    05:84:17:34:3b:02:c1:92:e8:6e:30:a0:ac:20:d8:
                    fc:08:78:36:ea:aa:b7:23:73:51:98:92:82:ef:21:
                    2f:40:ce:6f:5c:f7:23:5e:63:5a:5f:9b:48:dc:c3:
                    67:53:85:82:ff:72:fb:ca:61:0e:b1:2b:37:fa:9d:
                    16:d4:7d:f6:f7:b6:8b:1d:f9:80:25:d6:a3:c5:34:
                    c0:c2:c8:4a:07:3c:97:d9:a0:29:2b:80:c7:49:8b:
                    e0:2f:d6:62:ce:69:65:5c:3e:7c:df:fe:0f:81:e9:
                    39:61:16:6a:5a:f4:d9:91:6d:c2:59:19:b3:39:36:
                    ed:9d:96:44:a6:6b:cd:d4:33:6b:3a:cd:32:e1:58:
                    1f:43:25:ec:35:b3:d1:c7:a2:7f:d9:7a:e6:c2:73:
                    da:97:3b:25:16:c6:25:fb:7d:f3:5a:be:ec:28:cd:
                    b9:30:68:b5:26:ad:4e:f6:26:78:92:b5:91:2d:5e:
                    98:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:46:63:5E:9F:0B:4C:D8:EB:F7:0A:C5:3F:AF:BA:73:1B:F3:81:81
            X509v3 Authority Key Identifier:
                keyid:EE:DE:5F:62:FA:0D:81:69:7B:8E:8C:FC:DF:5A:CA:B5:98:3E:82:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBs3D6r5ktaFh53BSxwh1nNtWKSCXoF45sNHky94K21j/0/EEDE5F62FA0D81697B8E8CFCDF5ACAB5983E82D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EEDE5F62FA0D81697B8E8CFCDF5ACAB5983E82D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBs3D6r5ktaFh53BSxwh1nNtWKSCXoF45sNHky94K21j/0/34352e3136322e3134382e302f32322d3332203d3e20323638353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:91:0f:17:f2:ff:a5:8a:5c:54:2f:76:42:b8:94:75:79:93:
         fb:c8:b9:7c:a8:29:56:c8:b2:c3:36:5b:b2:92:0f:dd:22:a9:
         07:49:5b:07:00:6c:cb:5c:71:0d:12:58:c4:dd:b2:d4:9e:72:
         0a:50:a6:f5:f0:c1:b9:31:81:4e:00:8a:da:4e:13:38:60:d3:
         8c:1b:ca:12:3a:a0:d7:3f:2d:92:93:c5:74:9e:86:86:08:78:
         d2:6f:ff:35:0f:73:ed:93:58:03:9d:41:fa:98:f9:77:d3:23:
         d5:a1:ca:8a:3e:ae:8e:c9:a8:89:53:2e:7d:19:8c:2e:78:b9:
         ab:6c:49:a8:7b:58:ce:24:6d:d9:01:95:49:a9:90:36:13:ff:
         9e:38:af:62:80:d0:82:8a:b6:18:31:ce:fa:21:67:85:2e:0b:
         c8:37:79:23:12:02:5e:c7:5d:74:f6:df:c6:5d:a5:e3:a0:8c:
         14:a7:c9:26:a4:ff:d1:8f:88:7e:02:15:cc:54:c4:55:ca:b1:
         2a:b6:9b:a8:8e:1b:8c:a5:10:c9:9b:db:89:1f:05:1f:a8:5a:
         0b:e4:8a:72:da:a7:50:94:68:97:71:3d:3f:84:ea:e4:b3:23:
         3c:0a:20:21:17:d5:c9:4e:ba:68:c5:0b:92:89:d5:97:22:e0:
         5b:ff:d3:f0
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUDdOYXvvKM+aSRaK0RqLiRBuEIvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVERTVGNjJGQTBEODE2OTdCOEU4Q0ZDREY1QUNBQjU5
ODNFODJEODAeFw0yMjA3MTIxNjQzMTdaFw0yMzA3MTIxNjQ4MTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTlBNDM0NzY4NjAyRkM0MDc2
MTlBOUNDMDdBMDAxNjM0QTBFRjcwOUFBNEM3OTc0ODlGMjBGNjY5Q0VCM0RBMkYw
MUJFRDI1Q0I2NUY3QTBEMzFFQUM4RDNBMUREODk0OUJFQ0UwMTM1RUE5NTk3NUQy
MkRBRTg5ODA5MzZFNzQwNEJGN0QzMDRGOTBBNDNCQzBBQjA1ODQxNzM0M0IwMkMx
OTJFODZFMzBBMEFDMjBEOEZDMDg3ODM2RUFBQUI3MjM3MzUxOTg5MjgyRUYyMTJG
NDBDRTZGNUNGNzIzNUU2MzVBNUY5QjQ4RENDMzY3NTM4NTgyRkY3MkZCQ0E2MTBF
QjEyQjM3RkE5RDE2RDQ3REY2RjdCNjhCMURGOTgwMjVENkEzQzUzNEMwQzJDODRB
MDczQzk3RDlBMDI5MkI4MEM3NDk4QkUwMkZENjYyQ0U2OTY1NUMzRTdDREZGRTBG
ODFFOTM5NjExNjZBNUFGNEQ5OTE2REMyNTkxOUIzMzkzNkVEOUQ5NjQ0QTY2QkNE
RDQzMzZCM0FDRDMyRTE1ODFGNDMyNUVDMzVCM0QxQzdBMjdGRDk3QUU2QzI3M0RB
OTczQjI1MTZDNjI1RkI3REYzNUFCRUVDMjhDREI5MzA2OEI1MjZBRDRFRjYyNjc4
OTJCNTkxMkQ1RTk4NDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqaQ0doYC/EB2GanMB6ABY0oO9wmqTHl0ifIPZpzrPaLwG+0ly2X3
oNMerI06HdiUm+zgE16pWXXSLa6JgJNudAS/fTBPkKQ7wKsFhBc0OwLBkuhuMKCs
INj8CHg26qq3I3NRmJKC7yEvQM5vXPcjXmNaX5tI3MNnU4WC/3L7ymEOsSs3+p0W
1H3297aLHfmAJdajxTTAwshKBzyX2aApK4DHSYvgL9ZizmllXD583/4Pgek5YRZq
WvTZkW3CWRmzOTbtnZZEpmvN1DNrOs0y4VgfQyXsNbPRx6J/2XrmwnPalzslFsYl
+33zWr7sKM25MGi1Jq1O9iZ4krWRLV6YSQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FIxGY16fC0zY6/cKxT+vunMb84GBMB8GA1UdIwQYMBaAFO7eX2L6DYFpe46M/N9a
yrWYPoLYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pCczNENnI1a3RhRmg1
M0JTeHdoMW5OdFdLU0NYb0Y0NXNOSGt5OTRLMjFqLzAvRUVERTVGNjJGQTBEODE2
OTdCOEU4Q0ZDREY1QUNBQjU5ODNFODJEOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FRURFNUY2MkZBMEQ4MTY5N0I4RThDRkNERjVBQ0FCNTk4M0U4
MkQ4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KQnMzRDZyNWt0YUZoNTNCU3h3
aDFuTnRXS1NDWG9GNDVzTkhreTk0SzIxai8wLzM0MzUyZTMxMzYzMjJlMzEzNDM4
MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4MzUzMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LaKUMA0GCSqGSIb3DQEBCwUAA4IBAQBjkQ8X8v+lilxUL3ZCuJR1eZP7yLl8qClW
yLLDNluykg/dIqkHSVsHAGzLXHENEljE3bLUnnIKUKb18MG5MYFOAIraThM4YNOM
G8oSOqDXPy2Sk8V0noaGCHjSb/81D3Ptk1gDnUH6mPl30yPVocqKPq6OyaiJUy59
GYwueLmrbEmoe1jOJG3ZAZVJqZA2E/+eOK9igNCCirYYMc76IWeFLgvIN3kjEgJe
x1109t/GXaXjoIwUp8kmpP/Rj4h+AhXMVMRVyrEqtpuojhuMpRDJm9uJHwUfqFoL
5Ipy2qdQlGiXcT0/hOrksyM8CiAhF9XJTrpoxQuSidWXIuBb/9Pw
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:30:49 2025 by rpki-client