Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130352e302f32342d3234203d3e20323637343039.roa
File:                     34352e3136362e3130352e302f32342d3234203d3e20323637343039.roa (raw, json)
Hash identifier:          CsetZF+b+IaltpemxdtqSLUfhHyN/sWhUvBMElywooY=
Subject key identifier:   32:44:65:5E:BA:59:62:75:AC:93:F7:09:D8:BF:A9:12:ED:88:51:A6
Certificate issuer:       /CN=F45FEF456D7F85034F083B392724775024917F0C
Certificate serial:       09AD8426F422CF02FDDC2600BADF1E026927604C
Authority key identifier: F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130352e302f32342d3234203d3e20323637343039.roa
Signing time:             Fri 16 May 2025 17:20:58 +0000
ROA not before:           Fri 16 May 2025 17:15:58 +0000
ROA not after:            Fri 15 May 2026 17:20:58 +0000
asID:                     267409
IP address blocks:        45.166.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ad:84:26:f4:22:cf:02:fd:dc:26:00:ba:df:1e:02:69:27:60:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45FEF456D7F85034F083B392724775024917F0C
        Validity
            Not Before: May 16 17:15:58 2025 GMT
            Not After : May 15 17:20:58 2026 GMT
        Subject: CN=3244655EBA596275AC93F709D8BFA912ED8851A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:79:15:02:79:d8:da:3c:0b:82:9f:6b:a0:
                    e9:e3:aa:77:95:d0:29:e6:6e:f6:9d:02:ec:fd:6d:
                    86:b1:07:c7:14:2e:63:04:be:3b:17:d9:82:75:39:
                    c9:c5:1d:ef:3c:c2:90:d4:62:e1:68:c7:a7:c8:25:
                    3d:8a:5e:6a:b6:10:a9:d4:25:22:20:5a:ef:c1:47:
                    0c:ac:e9:a5:7d:31:b7:53:e8:b6:16:15:55:52:39:
                    5f:47:19:ba:0d:fc:f6:2c:8a:89:9a:ce:9a:8c:4c:
                    09:82:26:fa:7b:94:ca:a9:50:71:e0:0f:c8:85:bb:
                    13:cf:8b:0e:7c:af:d2:9f:0e:59:ad:f2:94:cc:8d:
                    63:20:1b:5e:5c:e1:24:38:69:47:83:26:d3:7f:bd:
                    0b:52:90:e2:6d:d7:7d:7d:fc:8b:79:3c:88:9b:e0:
                    54:b9:d1:32:93:51:5e:d5:1d:69:ad:c1:e1:3f:8a:
                    f5:84:9b:f7:0a:a8:a1:80:79:7d:e4:9a:1e:77:cf:
                    69:cb:7a:64:8c:58:de:6f:16:88:8e:f2:f6:fe:67:
                    30:10:1a:1f:ae:33:db:d3:57:cf:43:b1:61:96:9c:
                    fe:5f:aa:1c:29:e6:ec:03:75:98:e9:ff:4a:21:da:
                    39:d6:57:b7:62:dc:dd:f9:9d:fe:8f:27:89:35:16:
                    71:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:44:65:5E:BA:59:62:75:AC:93:F7:09:D8:BF:A9:12:ED:88:51:A6
            X509v3 Authority Key Identifier:
                keyid:F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/F45FEF456D7F85034F083B392724775024917F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130352e302f32342d3234203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:19:28:1e:72:12:09:f1:9b:ed:3e:15:47:70:8d:00:53:2f:
         6a:a6:78:e3:06:68:6d:83:50:ac:45:f4:ed:82:0d:34:bb:12:
         30:4e:15:36:81:7e:0c:5c:0a:fe:ea:eb:4a:1b:90:ff:7e:f2:
         b1:43:f3:18:36:ec:50:29:c8:2b:51:17:e0:91:90:d8:1b:c7:
         04:cf:94:97:f0:19:df:26:88:91:82:8b:d4:54:bf:d5:54:04:
         fa:3b:dd:6a:3c:92:a4:08:61:b8:4b:d1:da:13:d0:ab:74:99:
         65:3f:77:90:92:5e:35:b2:cf:4e:5f:1c:2b:1b:fb:7c:56:49:
         61:8a:c7:31:55:78:27:33:74:a5:0e:23:1f:77:17:b4:06:b3:
         cd:09:d4:bf:13:f3:da:74:f3:c8:b0:12:47:f1:c9:ad:79:f6:
         15:e4:30:6b:f3:9c:fc:58:b1:ae:5c:50:f6:ba:f7:17:9c:11:
         9b:52:b0:58:c9:bb:24:78:69:40:5e:33:58:8b:c1:94:62:f0:
         5f:89:7b:e4:99:dc:2b:d7:7a:e3:7a:07:76:75:a9:88:dd:71:
         fb:b2:09:8a:25:f0:24:68:66:4f:f4:76:2d:e0:ab:62:b4:78:
         14:cd:43:27:f6:fe:50:91:a2:63:89:c1:bf:31:04:09:92:fe:
         b7:e4:9d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:52:17 2025 by rpki-client