Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130372e302f32342d3234203d3e20323637343039.roa
File:                     34352e3136362e3130372e302f32342d3234203d3e20323637343039.roa (raw, json)
Hash identifier:          v51staUH/G1/xVydEwmcb4dpK+rpFahs26DYkmIUtcM=
Subject key identifier:   E1:D8:F7:11:D8:7B:46:1E:A3:DA:E8:AE:87:6E:64:07:75:89:B4:57
Certificate issuer:       /CN=F45FEF456D7F85034F083B392724775024917F0C
Certificate serial:       3A53D9F59F191EEFB5B193C70AC5EA51680EEFC6
Authority key identifier: F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130372e302f32342d3234203d3e20323637343039.roa
Signing time:             Fri 16 May 2025 17:21:12 +0000
ROA not before:           Fri 16 May 2025 17:16:12 +0000
ROA not after:            Fri 15 May 2026 17:21:12 +0000
asID:                     267409
IP address blocks:        45.166.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:53:d9:f5:9f:19:1e:ef:b5:b1:93:c7:0a:c5:ea:51:68:0e:ef:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45FEF456D7F85034F083B392724775024917F0C
        Validity
            Not Before: May 16 17:16:12 2025 GMT
            Not After : May 15 17:21:12 2026 GMT
        Subject: CN=E1D8F711D87B461EA3DAE8AE876E64077589B457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:7c:98:71:5e:66:5f:cf:74:cb:59:54:62:
                    db:95:10:56:9c:36:76:b4:80:d2:39:44:01:36:be:
                    e3:68:ba:93:58:fb:e0:a7:dc:2c:c4:e5:04:3a:d4:
                    03:3b:f6:4b:e5:c6:29:fc:0c:43:12:ea:46:3f:46:
                    19:ac:4c:93:08:45:be:e7:c9:da:e8:10:06:06:45:
                    6b:8c:af:fa:01:d3:b6:04:d3:a5:8c:cc:86:af:99:
                    b2:7e:e7:ab:56:9e:dc:ae:a2:5e:84:5c:5c:3d:6f:
                    0c:d7:a6:bc:b2:b6:ad:0a:80:75:79:33:8c:c5:d0:
                    dc:ad:95:03:7e:9b:d1:f4:b6:c9:5b:cb:21:f1:52:
                    93:93:8f:1a:9e:44:cc:90:ff:a7:88:89:61:49:79:
                    5e:ab:83:d0:76:c7:b6:0c:ce:88:8e:c3:4e:62:ad:
                    38:12:f8:c7:db:af:f7:2d:f9:a7:59:ce:fc:0e:5e:
                    05:41:71:24:c3:22:df:8e:e8:90:58:67:d3:16:38:
                    fc:77:98:29:17:62:2f:9b:02:c7:4d:c1:63:d2:30:
                    e0:0a:40:37:ba:9c:db:32:eb:67:48:65:d7:92:69:
                    44:98:d2:65:f5:f7:81:b9:2b:13:12:99:5f:15:16:
                    f3:71:33:3b:05:d7:f5:f9:62:66:13:fa:38:dc:d6:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D8:F7:11:D8:7B:46:1E:A3:DA:E8:AE:87:6E:64:07:75:89:B4:57
            X509v3 Authority Key Identifier:
                keyid:F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/F45FEF456D7F85034F083B392724775024917F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130372e302f32342d3234203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d8:6f:b5:16:b2:75:12:b3:c1:09:42:32:c7:5b:32:07:47:
         77:cd:da:32:0a:b8:19:44:c9:e3:c6:c7:f1:ef:e2:15:d4:51:
         36:f0:41:1e:03:52:b8:f7:24:cb:11:b6:53:42:91:e3:9a:06:
         16:0b:73:38:3e:a9:0c:42:34:bd:54:f9:1a:b8:9d:e8:f1:a4:
         e9:69:6c:12:d3:ed:64:84:69:08:4c:53:40:d0:ad:a5:6f:34:
         f2:f3:a5:e5:08:53:38:2e:d6:2d:47:67:57:31:65:c6:c7:66:
         40:07:6b:0b:ab:14:aa:69:e5:59:8e:f4:45:99:bf:e2:bc:1b:
         a3:c3:ff:cf:28:ad:64:9c:07:97:80:1f:0f:e3:e8:1f:33:24:
         42:06:ab:9f:a1:0f:51:23:06:76:9f:3f:99:88:45:18:16:06:
         d7:c8:3f:f4:0f:3e:8e:cc:e2:13:37:83:a7:18:52:a3:b2:5b:
         20:53:e3:20:61:c3:42:c8:ad:be:5d:13:9e:69:bf:e1:eb:5a:
         d1:ed:f1:50:2f:90:dc:b7:12:57:fe:51:24:27:e0:49:03:1b:
         57:99:97:fc:0f:53:23:0f:b2:c8:9d:ea:ef:8f:67:26:5a:c7:
         0b:94:4c:1f:de:0d:42:0a:90:0e:64:24:ed:b7:f0:f9:7e:13:
         1c:2f:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:43:54 2025 by rpki-client