Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32332d3233203d3e20323637343039.roa
File:                     34352e3136362e3130342e302f32332d3233203d3e20323637343039.roa (raw, json)
Hash identifier:          Ja+Hti0fC8MBjtyNvPadx7D/6Q7yjfy2X7rovM6th6o=
Subject key identifier:   39:C2:9F:14:20:1F:72:FF:7C:4E:65:0A:85:71:E5:FF:B0:0B:66:9D
Certificate issuer:       /CN=F45FEF456D7F85034F083B392724775024917F0C
Certificate serial:       44E0D2BBDB9FD85C60D5C9086338D131DDF33887
Authority key identifier: F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32332d3233203d3e20323637343039.roa
Signing time:             Fri 16 May 2025 17:20:50 +0000
ROA not before:           Fri 16 May 2025 17:15:50 +0000
ROA not after:            Fri 15 May 2026 17:20:50 +0000
asID:                     267409
IP address blocks:        45.166.104.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e0:d2:bb:db:9f:d8:5c:60:d5:c9:08:63:38:d1:31:dd:f3:38:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45FEF456D7F85034F083B392724775024917F0C
        Validity
            Not Before: May 16 17:15:50 2025 GMT
            Not After : May 15 17:20:50 2026 GMT
        Subject: CN=39C29F14201F72FF7C4E650A8571E5FFB00B669D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:90:98:dc:5e:7a:d0:89:f5:db:34:b5:84:c5:
                    21:5f:46:78:63:b4:ca:e9:ba:96:03:f8:9a:3e:4e:
                    44:41:08:ff:a6:ab:d1:75:8c:d2:49:5c:ae:59:cb:
                    a2:51:47:67:5a:01:15:e1:d6:0f:8e:c0:64:6a:84:
                    3b:7f:36:ef:bd:45:e9:cf:1d:ad:36:84:25:67:34:
                    a8:fa:95:f1:47:43:bd:13:81:de:79:15:76:2d:55:
                    5d:aa:30:47:ce:df:9d:82:86:20:41:94:2b:90:58:
                    e2:e2:76:51:e1:40:b3:75:00:a8:1d:47:ba:dc:19:
                    e8:06:3d:c9:13:2d:b0:c4:44:86:95:45:41:19:49:
                    c8:41:67:d7:a2:74:b7:7b:9a:7a:18:21:36:65:99:
                    0e:1f:1d:cd:4b:a3:5a:81:8f:ba:7d:0c:41:4a:51:
                    d0:45:0c:fb:b0:ee:69:e9:35:59:9a:ee:6c:f9:24:
                    0b:2c:9d:1c:e2:e3:f7:74:d6:78:8c:94:95:74:bf:
                    43:74:99:ef:89:a5:4c:ab:25:e5:32:aa:81:cc:18:
                    c4:db:eb:37:7d:50:5c:91:a1:fd:4d:88:5e:2d:a3:
                    0d:6b:b3:fe:fe:af:b9:05:79:b8:82:12:b8:33:0c:
                    72:f9:19:b0:9e:a9:70:f5:99:7e:9d:cf:73:d9:ec:
                    2f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C2:9F:14:20:1F:72:FF:7C:4E:65:0A:85:71:E5:FF:B0:0B:66:9D
            X509v3 Authority Key Identifier:
                keyid:F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/F45FEF456D7F85034F083B392724775024917F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32332d3233203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:4a:9a:1d:82:c6:2c:89:2b:4a:16:80:19:25:d5:75:fb:6b:
         e5:cd:8d:5d:e2:a8:5f:ac:4d:bc:f2:07:c1:58:fa:42:ad:8f:
         8b:15:c3:1b:14:e5:ba:c5:f8:fe:97:ce:9b:82:c1:3e:58:db:
         85:6a:31:db:56:c3:bf:44:7b:d8:80:4b:e6:4e:5d:28:ca:c3:
         64:e2:9d:60:98:8d:55:04:ff:f4:d1:25:4b:44:2c:1d:19:01:
         1b:d9:00:08:d6:fe:fd:25:c6:1a:da:b0:e8:4a:c2:31:68:9f:
         8f:2f:88:91:2f:09:62:47:3b:2c:9d:e6:8c:1f:68:f2:cc:c0:
         18:3c:fe:56:77:1b:31:7c:19:67:ef:41:3d:08:2b:7a:10:4f:
         bb:9c:32:03:34:13:2e:57:e0:aa:35:b7:0d:8c:d1:64:e0:8b:
         07:9e:8a:72:0c:1a:a9:0c:2c:c9:06:64:cc:c2:be:08:74:1a:
         9e:ff:43:7c:75:9e:f8:c7:fd:aa:ba:a3:0d:10:34:31:1b:79:
         39:6f:be:4c:21:aa:67:fc:b7:ee:c8:25:cd:34:35:77:3d:d0:
         b2:78:73:02:38:bf:bd:50:3a:8d:de:ca:19:28:69:63:e0:82:
         05:44:a4:3e:28:32:1c:fe:a6:59:37:ad:0b:58:31:b4:b0:f6:
         7a:f1:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:53:56 2025 by rpki-client