Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32322d3232203d3e20323637343039.roa
File:                     34352e3233352e37322e302f32322d3232203d3e20323637343039.roa (raw, json)
Hash identifier:          fJdWc7u/TsFw7iYkuNT2CTbn30A6iQEqmtz3aix54IQ=
Subject key identifier:   45:69:AD:68:75:AC:45:CC:CE:04:54:3D:D3:EB:14:48:1D:FE:93:96
Certificate issuer:       /CN=F45FEF456D7F85034F083B392724775024917F0C
Certificate serial:       37566B9A9A943CCE8FD080A85315F8B6D2FA0677
Authority key identifier: F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32322d3232203d3e20323637343039.roa
Signing time:             Fri 16 May 2025 17:21:08 +0000
ROA not before:           Fri 16 May 2025 17:16:08 +0000
ROA not after:            Fri 15 May 2026 17:21:08 +0000
asID:                     267409
IP address blocks:        45.235.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:56:6b:9a:9a:94:3c:ce:8f:d0:80:a8:53:15:f8:b6:d2:fa:06:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45FEF456D7F85034F083B392724775024917F0C
        Validity
            Not Before: May 16 17:16:08 2025 GMT
            Not After : May 15 17:21:08 2026 GMT
        Subject: CN=4569AD6875AC45CCCE04543DD3EB14481DFE9396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:51:18:41:ff:3b:a3:b1:51:24:4d:9c:74:
                    dd:a7:d4:ee:a8:e5:f9:58:69:2f:6d:00:53:f0:70:
                    47:32:c1:1e:07:5b:e9:9e:22:ed:6d:a3:a5:9c:f3:
                    fe:f0:a2:0d:49:2d:c2:b6:0b:df:ea:6c:94:81:d8:
                    20:2d:bd:2b:64:53:25:86:ae:3c:60:20:69:48:be:
                    a5:85:53:41:c8:6c:00:d5:2d:b5:54:93:3c:c4:05:
                    8e:f1:b5:a8:d6:ae:f2:5c:dc:b4:b3:b9:43:a4:ca:
                    77:e5:3f:03:7a:96:14:ea:7e:37:3d:48:ac:dc:8e:
                    2d:37:7d:0d:5c:af:6f:af:3c:d8:09:a9:6b:f6:84:
                    0c:ad:89:b3:5e:75:8e:a9:f1:98:39:49:5b:57:3b:
                    6d:63:ab:f6:17:b9:07:af:9f:4f:b7:ba:54:1e:d5:
                    cb:2d:92:f5:13:26:55:88:9f:ef:1d:70:9d:8b:88:
                    00:08:99:5c:96:53:f4:de:c1:a2:20:97:ba:46:e7:
                    8a:a7:44:4c:fd:16:b6:31:35:32:01:a4:a3:33:13:
                    a4:40:71:ac:08:ca:11:b0:ca:6a:d9:7b:d6:02:b9:
                    df:af:cf:1e:c6:f5:8d:9d:c7:cb:dc:32:00:64:3d:
                    74:a2:a0:9b:1a:6c:26:79:20:43:58:a4:d7:e3:0e:
                    b5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:69:AD:68:75:AC:45:CC:CE:04:54:3D:D3:EB:14:48:1D:FE:93:96
            X509v3 Authority Key Identifier:
                keyid:F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/F45FEF456D7F85034F083B392724775024917F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32322d3232203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:73:2b:b1:39:f1:96:5e:64:87:dc:29:6e:9c:51:56:c7:76:
         44:fc:7d:44:e6:9e:13:1f:75:92:0b:7b:75:d8:75:35:12:d8:
         51:9c:ec:f9:c8:1d:7c:e2:87:e5:c1:ce:5b:33:df:78:c9:11:
         a2:eb:4d:a7:38:cd:25:c4:ec:09:6e:2a:57:b6:d4:eb:20:94:
         72:7b:bb:d6:89:f8:c1:31:28:ad:93:0d:92:30:5d:7c:81:e8:
         15:b3:dc:f9:ee:9d:64:6f:54:a0:78:fa:2e:f5:41:70:9a:75:
         28:59:68:67:8b:91:44:0e:6c:d4:da:76:f6:5f:75:66:6d:c2:
         17:f7:86:fa:8f:7f:e1:9f:3a:58:c1:92:19:7c:af:f8:da:a5:
         87:51:6f:d2:e0:79:80:3e:2c:0f:22:60:70:d5:49:04:c8:af:
         4d:de:bd:64:78:6d:3a:07:81:38:34:f0:1b:4f:dc:b4:6c:69:
         36:e1:fc:94:f3:1b:60:23:a0:4e:45:4d:85:92:e9:c3:2f:2b:
         13:19:2f:b8:fc:da:20:92:cd:87:f9:f6:86:29:38:be:97:6a:
         60:62:be:a0:99:08:b2:72:28:7b:68:49:24:5a:bd:b7:b2:ed:
         f1:49:43:86:5f:89:d2:46:46:57:b1:74:9c:09:9f:28:87:fc:
         1f:e1:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:22:09 2025 by rpki-client