Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130362e302f32332d3233203d3e20323637343039.roa
File:                     34352e3136362e3130362e302f32332d3233203d3e20323637343039.roa (raw, json)
Hash identifier:          6vS5bBSSzspBcEZt0m58cVTKu1OheUvMwa6AhTvYjcs=
Subject key identifier:   C6:98:E4:D8:66:61:D4:6B:B8:B4:1D:90:C8:AF:BE:4C:0E:54:E7:E4
Certificate issuer:       /CN=F45FEF456D7F85034F083B392724775024917F0C
Certificate serial:       4E7921F21DEF377364082DDBB1070411656A38DE
Authority key identifier: F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130362e302f32332d3233203d3e20323637343039.roa
Signing time:             Fri 16 May 2025 17:21:01 +0000
ROA not before:           Fri 16 May 2025 17:16:01 +0000
ROA not after:            Fri 15 May 2026 17:21:01 +0000
asID:                     267409
IP address blocks:        45.166.106.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:79:21:f2:1d:ef:37:73:64:08:2d:db:b1:07:04:11:65:6a:38:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45FEF456D7F85034F083B392724775024917F0C
        Validity
            Not Before: May 16 17:16:01 2025 GMT
            Not After : May 15 17:21:01 2026 GMT
        Subject: CN=C698E4D86661D46BB8B41D90C8AFBE4C0E54E7E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:06:60:ee:0d:78:cc:75:cd:a9:47:05:9f:c9:
                    f9:40:84:27:6e:13:a2:da:54:b2:1c:95:7f:28:51:
                    3f:95:6f:77:95:c9:3e:f8:c4:fc:f8:69:75:42:68:
                    e4:0f:90:ac:90:52:71:f8:6a:11:f3:7d:50:e5:16:
                    9a:81:df:1c:5e:a8:97:3f:87:fd:53:f3:8f:0b:c3:
                    24:b2:20:c7:09:12:de:e9:a8:6b:9c:04:7a:33:a9:
                    d8:7d:0a:eb:b7:7d:66:6b:34:a2:b7:db:e1:05:b7:
                    e9:ad:4f:d3:f8:b1:3f:36:0e:70:e0:ef:d8:89:1c:
                    85:d9:fa:be:2c:d7:70:78:51:51:ee:be:60:c8:e6:
                    0c:41:32:1e:fe:5e:da:25:81:d9:54:21:40:55:2d:
                    68:78:91:1a:b2:29:f8:5c:af:3c:de:54:bb:04:bd:
                    80:99:90:80:33:30:92:2e:3b:13:17:03:8b:47:68:
                    6f:4e:d2:4f:a6:a5:d2:f0:fe:4f:96:03:f1:0e:75:
                    9c:b3:cf:c1:c1:57:4e:69:68:06:92:05:fd:62:24:
                    50:76:c3:16:c1:74:c4:49:18:ff:3a:94:15:07:0c:
                    34:16:ff:15:11:ae:e2:88:60:1d:7f:bb:77:2a:5b:
                    1d:87:48:58:aa:11:d6:af:73:15:0b:18:dc:83:31:
                    e8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:98:E4:D8:66:61:D4:6B:B8:B4:1D:90:C8:AF:BE:4C:0E:54:E7:E4
            X509v3 Authority Key Identifier:
                keyid:F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/F45FEF456D7F85034F083B392724775024917F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130362e302f32332d3233203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:29:fc:5f:9f:9b:b4:85:68:f1:1f:da:f6:86:48:68:9a:cb:
         ce:db:38:44:55:4b:9b:19:bd:48:bc:a9:e0:64:18:f7:66:b6:
         2e:28:42:10:47:af:a7:fd:ca:e4:e6:1f:4b:29:01:af:42:12:
         11:ec:26:dd:09:98:54:19:22:69:1f:91:8d:b9:45:b8:06:55:
         55:79:7d:07:d1:cc:1c:fb:46:19:12:76:b2:81:90:fa:81:b6:
         ff:68:f0:81:7d:88:be:45:3c:b1:70:c1:d5:00:49:d6:32:05:
         55:c6:7f:f1:ad:0e:64:f5:87:06:bf:9e:db:40:1f:0f:57:83:
         99:47:87:31:0d:44:53:c4:00:2a:17:99:b4:67:fd:cb:10:34:
         9a:12:5a:a6:41:da:25:4b:85:b6:28:86:7d:58:c3:15:51:74:
         be:c5:48:57:25:c0:1f:93:e6:d4:dd:f3:2a:47:97:40:50:48:
         03:0a:83:df:96:d1:c4:f4:f1:36:aa:9e:87:c5:e7:0c:ac:88:
         2e:ab:93:24:21:00:84:6b:fd:8a:6e:02:d0:77:94:c1:09:78:
         c3:27:e4:e7:c9:56:3f:8a:52:ba:a3:b6:21:05:63:9c:2b:0b:
         ac:be:87:11:e1:49:b4:a9:50:64:01:69:66:83:4c:25:63:40:
         b0:44:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:01:35 2025 by rpki-client