Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa
File:                     34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa (raw, json)
Hash identifier:          0lEeLOayjjCoKA1gF6+kEoggPwJaKzwtInBqZ3xbZ04=
Subject key identifier:   E1:B6:D7:63:9C:90:BC:30:17:39:2C:71:0D:16:2F:C8:AA:8A:D5:8F
Certificate issuer:       /CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
Certificate serial:       1F63ED6C82070110A6992221BB01537E9E46BCE7
Authority key identifier: BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa
Signing time:             Mon 16 Mar 2026 20:33:51 +0000
ROA not before:           Mon 16 Mar 2026 20:28:51 +0000
ROA not after:            Mon 15 Mar 2027 20:33:51 +0000
asID:                     269298
IP address blocks:        45.183.188.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:63:ed:6c:82:07:01:10:a6:99:22:21:bb:01:53:7e:9e:46:bc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
        Validity
            Not Before: Mar 16 20:28:51 2026 GMT
            Not After : Mar 15 20:33:51 2027 GMT
        Subject: CN=E1B6D7639C90BC3017392C710D162FC8AA8AD58F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:04:ba:96:12:93:27:34:e6:4d:5b:1b:6c:
                    2b:16:fa:64:13:8d:c6:e1:6a:41:b2:a5:ae:87:50:
                    4a:74:77:f5:ee:0a:89:f7:b8:16:5e:77:a6:34:3e:
                    1f:7a:a6:de:cb:ad:34:20:86:7a:20:40:89:d6:ee:
                    f1:a1:5f:71:36:15:30:29:53:8f:62:df:2a:18:4a:
                    f0:7f:7e:09:f2:18:d8:cd:8e:e9:f0:cf:78:c8:71:
                    46:f0:35:b3:2e:a1:b2:d8:4a:0c:31:3f:bc:22:51:
                    7b:e9:4f:ba:a9:c9:8d:b9:9c:47:88:6f:69:0b:c4:
                    18:40:9b:66:07:e1:6a:ab:68:c5:00:44:6c:30:87:
                    e9:0a:de:58:ba:c5:9c:9c:bd:3b:4a:6d:f5:2e:3b:
                    ac:24:73:3b:18:5b:1c:15:09:ff:55:20:71:1e:f5:
                    74:73:2c:70:0f:9b:04:53:21:9b:0c:cd:6c:bb:d0:
                    33:f9:63:9f:c4:4c:06:1e:f8:e6:0c:1b:da:7f:8e:
                    e5:6a:a0:4d:e0:1a:35:49:fe:4a:94:37:46:a8:86:
                    9d:c8:b6:1f:c4:5b:3c:d8:db:52:e3:42:f0:14:cc:
                    27:34:ee:e9:0f:17:4d:9b:21:ca:3a:b5:b8:6b:38:
                    23:81:95:a9:64:df:e9:7e:85:45:28:62:f3:9f:31:
                    5f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B6:D7:63:9C:90:BC:30:17:39:2C:71:0D:16:2F:C8:AA:8A:D5:8F
            X509v3 Authority Key Identifier:
                keyid:BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:b8:c8:bd:e7:4e:33:e0:22:ec:4d:9a:99:b5:d1:7c:4e:a0:
         99:16:a8:da:8e:04:4f:98:01:10:3d:72:04:ca:fe:f5:57:d7:
         e6:ea:f8:ee:75:ca:9f:a1:1b:64:c8:a2:5d:41:98:f7:02:8e:
         72:74:ee:fd:dd:04:e1:dd:86:78:c2:83:76:b8:6a:bc:89:f1:
         56:2b:b2:48:03:a7:11:4b:17:0e:2a:58:9c:fe:fd:61:88:48:
         cb:fd:8b:e0:f8:d5:b2:70:1c:8d:1a:84:77:c5:36:9b:c7:10:
         68:68:fa:8b:95:17:77:de:d7:8c:60:90:53:5c:d7:4f:7b:1f:
         5b:d9:c2:58:ee:42:ab:c5:da:73:57:67:a4:41:7b:31:44:e3:
         88:93:fa:59:77:9b:dd:6e:76:f3:15:0b:81:f3:96:f8:63:ab:
         5e:58:9e:de:9c:6d:35:df:0a:36:9e:4d:72:c6:4a:8d:f4:bc:
         ba:f9:7f:12:0f:5b:61:c8:e0:bc:1f:9b:33:53:de:ae:cd:e7:
         88:9f:7b:f9:68:96:24:47:10:72:5c:c7:f6:32:66:86:f9:41:
         c8:77:cd:71:27:8e:37:60:ff:35:d1:4f:93:14:06:77:fc:af:
         ac:78:af:73:3a:2e:37:15:9a:ac:29:20:d6:81:e8:5a:20:5f:
         2e:3f:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:33:03 2026 by rpki-client