Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
File:                     34352e3138382e31302e302f32332d3233203d3e20323639353636.roa (raw, json)
Hash identifier:          HVcSQmcx9NItk7maixGZh2y69DF6GHWwIfznYIhFMXU=
Subject key identifier:   80:98:0F:8C:8A:A0:02:32:45:2A:28:99:C2:FF:94:EA:17:DB:2E:17
Certificate issuer:       /CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Certificate serial:       6DB64A22546D0F6A8251717CDB7E383DE9E682B2
Authority key identifier: AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
Signing time:             Mon 23 Feb 2026 03:35:31 +0000
ROA not before:           Mon 23 Feb 2026 03:30:31 +0000
ROA not after:            Mon 22 Feb 2027 03:35:31 +0000
asID:                     269566
IP address blocks:        45.188.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b6:4a:22:54:6d:0f:6a:82:51:71:7c:db:7e:38:3d:e9:e6:82:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
        Validity
            Not Before: Feb 23 03:30:31 2026 GMT
            Not After : Feb 22 03:35:31 2027 GMT
        Subject: CN=80980F8C8AA00232452A2899C2FF94EA17DB2E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:55:21:9d:a1:6b:93:73:4b:d7:89:d6:9a:
                    ed:a9:9d:69:9d:b6:05:90:b8:52:ae:14:a4:73:0b:
                    b9:1e:5e:65:1a:e9:4c:c2:d0:06:62:38:06:ea:e7:
                    a7:ee:e8:e9:94:8f:a8:cc:51:d7:69:46:84:00:bb:
                    57:12:56:04:a5:9b:91:f0:3b:dc:41:b4:10:69:4d:
                    3c:d7:47:79:ca:0c:89:f8:3e:ac:83:3d:0c:88:21:
                    46:78:d3:93:51:f6:66:c9:0b:ed:53:26:32:cc:7e:
                    08:da:22:3b:21:cc:2b:fa:e0:1f:c5:90:92:f7:d0:
                    dc:16:99:9d:24:5e:6d:ba:36:a9:cb:24:40:89:09:
                    5c:0e:43:55:8a:51:3f:63:4f:7d:3d:f4:42:57:36:
                    40:1c:66:99:f3:01:c8:d8:3c:91:c1:4c:2b:c5:ee:
                    3d:bf:3d:b0:49:ff:96:a1:d3:29:1d:9d:e7:fe:b8:
                    7e:dd:19:90:22:2f:b3:64:8f:4b:30:a1:30:86:67:
                    cc:18:54:8d:28:e8:c4:b6:1e:25:5f:2b:9b:29:31:
                    cd:17:2d:27:b8:74:b2:5b:8b:60:29:9c:2c:2f:7d:
                    aa:0a:8b:28:c9:b1:29:b0:bf:0b:04:8b:6e:59:b0:
                    6a:4e:a6:a3:b0:62:97:ac:bd:41:b1:bc:fd:81:ae:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:98:0F:8C:8A:A0:02:32:45:2A:28:99:C2:FF:94:EA:17:DB:2E:17
            X509v3 Authority Key Identifier:
                keyid:AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:85:df:2f:1d:78:df:f0:d2:a7:93:c2:24:8c:c3:80:e2:84:
         f3:71:9e:08:f3:e8:11:75:fb:c5:13:d2:fb:ac:46:f8:4b:e5:
         d0:c2:f3:64:62:a0:b7:86:bf:4b:57:61:4a:fd:6e:6f:bb:6a:
         56:2d:12:bf:c5:af:2c:2d:93:25:59:64:9d:ff:6b:94:d8:c4:
         78:72:86:6e:f6:07:cd:01:52:5d:a2:d3:61:d4:dc:1f:f0:26:
         1e:28:e2:87:dc:c4:1a:d1:b2:e3:56:10:5c:0f:91:3f:0c:9e:
         5f:56:78:9b:9e:4d:61:19:57:c4:d9:ec:38:c9:94:f4:14:12:
         20:63:ce:57:de:fc:c0:2c:22:a2:9c:b4:e7:e3:8b:0d:7a:c3:
         ab:7e:f9:d1:a5:e8:44:30:df:84:92:95:43:43:70:b7:b4:a1:
         a4:7f:9d:d6:b1:26:8a:5c:29:c2:59:a2:55:12:64:dd:25:6e:
         35:f5:c7:f7:26:dd:f1:73:aa:8e:70:1d:e4:1c:13:01:96:fa:
         41:73:72:ce:99:b0:e6:81:17:a6:00:f3:3e:12:c1:fa:36:57:
         a6:7c:3b:e2:cc:50:5e:ab:fe:ae:8c:cb:d2:24:39:cd:31:5e:
         de:42:a2:97:7b:97:2c:50:6d:d2:d4:da:c8:45:30:d5:8c:aa:
         29:21:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:31:17 2026 by rpki-client