Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135372e302f32342d3234203d3e20323637323730.roa
File:                     34352e3233322e3135372e302f32342d3234203d3e20323637323730.roa (raw, json)
Hash identifier:          +DftMVzAEcUXgYTP8nbVLDawDmWP+uIBQ0F5nLa0aZo=
Subject key identifier:   D3:B2:55:84:77:E2:41:70:2D:AC:00:E5:52:0E:2B:B8:45:9F:CA:3B
Certificate issuer:       /CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
Certificate serial:       7CDC7DA043544FBFD8692F08794ED51FCB799A32
Authority key identifier: 81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135372e302f32342d3234203d3e20323637323730.roa
Signing time:             Wed 16 Aug 2023 18:44:38 +0000
ROA not before:           Wed 16 Aug 2023 18:39:38 +0000
ROA not after:            Wed 14 Aug 2024 18:44:38 +0000
asID:                     267270
IP address blocks:        45.232.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:dc:7d:a0:43:54:4f:bf:d8:69:2f:08:79:4e:d5:1f:cb:79:9a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
        Validity
            Not Before: Aug 16 18:39:38 2023 GMT
            Not After : Aug 14 18:44:38 2024 GMT
        Subject: CN=D3B2558477E241702DAC00E5520E2BB8459FCA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:9d:87:29:57:b4:8d:65:de:9a:e6:aa:5e:
                    14:88:7d:85:72:41:94:1d:8f:f8:4d:f5:00:9b:05:
                    32:b6:58:fa:d0:ea:08:fe:3c:9a:62:90:6d:05:69:
                    95:25:7b:6c:60:da:13:f5:68:c2:11:a9:2d:c6:04:
                    d5:9e:40:fb:2b:d1:58:3e:3e:d4:f9:23:e6:b8:4d:
                    d2:55:40:9e:c6:ac:ef:18:b3:42:6e:62:a8:75:54:
                    1f:32:0e:10:f7:98:9e:1b:2b:05:b5:17:c5:00:40:
                    5a:24:16:58:0e:17:29:e3:e3:20:46:7d:24:ef:ef:
                    42:05:ed:7d:43:0e:00:8f:10:2d:0e:6d:88:ef:a7:
                    06:20:03:d6:23:43:8b:5b:d8:c3:67:33:f3:a7:8b:
                    6d:09:9a:fa:cb:7b:db:5b:a5:46:b7:48:d2:51:09:
                    44:a5:dc:53:a1:2b:01:5c:9d:c0:b2:68:3b:a5:b0:
                    77:da:33:44:81:bd:75:c5:4f:a5:0f:52:60:68:13:
                    83:0c:b3:ea:08:ba:8f:e7:ab:68:b0:e6:48:cb:aa:
                    cd:14:b3:12:c9:c7:22:25:4f:5c:f6:c4:ab:cb:de:
                    da:ad:67:37:7d:34:85:4f:7b:bd:4c:6a:df:42:ba:
                    fe:32:c3:64:9f:b6:6f:49:1e:54:e3:35:70:29:aa:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B2:55:84:77:E2:41:70:2D:AC:00:E5:52:0E:2B:B8:45:9F:CA:3B
            X509v3 Authority Key Identifier:
                keyid:81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135372e302f32342d3234203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:3e:69:97:83:ce:45:65:e1:94:1a:f5:a1:f2:45:ca:09:26:
         0f:0e:c8:ae:9c:8e:9f:61:de:9c:13:f4:a9:94:93:dc:26:0e:
         67:2e:3c:ec:fe:1d:e4:de:8c:18:d0:04:c1:1a:c8:a3:a9:00:
         bb:64:d2:4d:01:03:e5:6f:91:2c:32:4b:14:d8:ca:8d:47:4c:
         50:29:cc:07:2c:fe:bc:fd:3f:81:28:93:67:81:08:0a:a8:f5:
         4c:0a:4b:1e:76:a5:c0:7d:b1:ad:d8:e0:8b:b2:e2:09:27:1c:
         97:b3:30:0a:fe:1a:90:47:35:a7:88:6b:73:96:5b:78:33:6b:
         12:14:c6:60:60:9f:9f:14:47:5c:2a:87:47:16:31:28:5f:d7:
         71:44:aa:8c:24:76:cd:3e:a7:21:46:bb:8e:7e:40:b5:ec:a0:
         5b:79:1d:89:ed:7c:6e:2c:79:f7:ba:78:8a:2f:55:10:ce:78:
         c3:31:08:66:06:cb:f0:92:03:cf:5f:b6:93:2f:56:80:7e:4c:
         61:75:c8:72:53:f4:c4:d4:e9:c1:d5:46:be:55:9c:ef:e0:77:
         de:58:cb:15:37:81:c8:bd:e8:a1:c2:f6:ac:3f:3d:71:e0:be:
         51:37:81:78:f0:69:a4:ee:95:0d:37:67:b7:37:41:95:4a:84:
         c5:a5:a4:97
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfNx9oENUT7/YaS8IeU7VH8t5mjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFCMzJBMERGRDM1QTc2MUEwRTQ3NzNCRjIwOTk3OEYx
OENCQThGOTAeFw0yMzA4MTYxODM5MzhaFw0yNDA4MTQxODQ0MzhaMDMxMTAvBgNV
BAMTKEQzQjI1NTg0NzdFMjQxNzAyREFDMDBFNTUyMEUyQkI4NDU5RkNBM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAZ2HKVe0jWXemuaqXhSIfYVy
QZQdj/hN9QCbBTK2WPrQ6gj+PJpikG0FaZUle2xg2hP1aMIRqS3GBNWeQPsr0Vg+
PtT5I+a4TdJVQJ7GrO8Ys0JuYqh1VB8yDhD3mJ4bKwW1F8UAQFokFlgOFynj4yBG
fSTv70IF7X1DDgCPEC0ObYjvpwYgA9YjQ4tb2MNnM/Oni20JmvrLe9tbpUa3SNJR
CUSl3FOhKwFcncCyaDulsHfaM0SBvXXFT6UPUmBoE4MMs+oIuo/nq2iw5kjLqs0U
sxLJxyIlT1z2xKvL3tqtZzd9NIVPe71Mat9Cuv4yw2Sftm9JHlTjNXApqsRlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU07JVhHfiQXAtrADlUg4ruEWfyjswHwYDVR0j
BBgwFoAUgbMqDf01p2Gg5Hc78gmXjxjLqPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWp2VWhhc3haWkxCeW5Qb0EydGVhTnVqVmI4bXZxbmdxd1ozWTJwS2ll
Rk4vMC84MUIzMkEwREZEMzVBNzYxQTBFNDc3M0JGMjA5OTc4RjE4Q0JBOEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgxQjMyQTBERkQzNUE3NjFB
MEU0NzczQkYyMDk5NzhGMThDQkE4RjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlqdlVoYXN4WlpMQnluUG9BMnRlYU51alZiOG12cW5ncXdaM1kycEtpZUZOLzAv
MzQzNTJlMzIzMzMyMmUzMTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6J0wDQYJKoZIhvcNAQELBQADggEBABI+aZeD
zkVl4ZQa9aHyRcoJJg8OyK6cjp9h3pwT9KmUk9wmDmcuPOz+HeTejBjQBMEayKOp
ALtk0k0BA+VvkSwySxTYyo1HTFApzAcs/rz9P4Eok2eBCAqo9UwKSx52pcB9sa3Y
4Iuy4gknHJezMAr+GpBHNaeIa3OWW3gzaxIUxmBgn58UR1wqh0cWMShf13FEqowk
ds0+pyFGu45+QLXsoFt5HYntfG4sefe6eIovVRDOeMMxCGYGy/CSA89ftpMvVoB+
TGF1yHJT9MTU6cHVRr5VnO/gd95YyxU3gci96KHC9qw/PXHgvlE3gXjwaaTulQ03
Z7c3QZVKhMWlpJc=
-----END CERTIFICATE-----
Generated at Sun May 11 09:19:46 2025 by rpki-client