Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/34352e362e3139322e302f32322d3332203d3e20323636353435.roa
File:                     34352e362e3139322e302f32322d3332203d3e20323636353435.roa (raw, json)
Hash identifier:          R6Kb5skfzDL6kiHJ2H/FSHkxRS1NW3FgKKK9PAAYW/8=
Subject key identifier:   80:07:0A:AD:A2:7E:82:5E:0E:BA:67:1A:96:DD:31:05:9C:E2:BD:E7
Certificate issuer:       /CN=4BDF84FC21F1098668A6623C8310F7CB397FD86A
Certificate serial:       7F3B5EA5D4978EFF594B728BC84326CB3D1668F7
Authority key identifier: 4B:DF:84:FC:21:F1:09:86:68:A6:62:3C:83:10:F7:CB:39:7F:D8:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BDF84FC21F1098668A6623C8310F7CB397FD86A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/34352e362e3139322e302f32322d3332203d3e20323636353435.roa
Signing time:             Fri 30 Jan 2026 23:32:32 +0000
ROA not before:           Fri 30 Jan 2026 23:27:32 +0000
ROA not after:            Fri 29 Jan 2027 23:32:32 +0000
asID:                     266545
IP address blocks:        45.6.192.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3b:5e:a5:d4:97:8e:ff:59:4b:72:8b:c8:43:26:cb:3d:16:68:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BDF84FC21F1098668A6623C8310F7CB397FD86A
        Validity
            Not Before: Jan 30 23:27:32 2026 GMT
            Not After : Jan 29 23:32:32 2027 GMT
        Subject: CN=80070AADA27E825E0EBA671A96DD31059CE2BDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:3c:ea:15:b7:6e:51:c7:10:04:36:cb:41:
                    65:96:fa:ac:5f:2f:21:8c:3a:eb:3b:21:ad:ee:29:
                    b1:31:cd:c5:b8:00:e9:f6:17:70:74:ae:fe:6a:25:
                    5a:4f:05:6f:ad:94:13:1f:31:d7:0f:e5:4e:0b:25:
                    29:aa:12:d8:f7:28:3c:76:ee:30:cc:0c:45:e5:99:
                    40:26:9f:2a:16:3b:46:2a:72:93:63:e2:d5:55:c5:
                    80:5b:f7:3e:94:63:2e:7b:71:95:f1:b7:34:db:91:
                    54:50:93:a3:d9:ea:2c:f1:fb:8c:5f:28:ab:50:14:
                    6b:52:9a:81:92:67:a7:40:64:0f:0d:1d:6b:de:f2:
                    c7:0d:54:8d:c5:07:59:f3:09:be:1a:15:fa:99:d3:
                    f4:69:95:07:71:83:1d:f7:f9:66:9e:85:7e:c8:ac:
                    3c:4c:ca:eb:a8:df:e3:a9:b0:82:da:7f:99:b3:a9:
                    b0:78:b1:42:6e:25:b0:bf:ec:dd:c4:9c:46:42:2a:
                    65:48:f0:34:61:ae:58:e7:ca:52:81:f2:0d:88:ff:
                    e5:48:d0:aa:a8:f2:0e:b0:27:fe:b6:21:8f:3c:0a:
                    c9:7f:2e:b7:4c:18:e9:a8:30:2c:2c:ac:e2:ac:89:
                    43:10:0b:42:e5:f2:1a:70:ba:ff:87:73:a7:61:dc:
                    01:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:07:0A:AD:A2:7E:82:5E:0E:BA:67:1A:96:DD:31:05:9C:E2:BD:E7
            X509v3 Authority Key Identifier:
                keyid:4B:DF:84:FC:21:F1:09:86:68:A6:62:3C:83:10:F7:CB:39:7F:D8:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/4BDF84FC21F1098668A6623C8310F7CB397FD86A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BDF84FC21F1098668A6623C8310F7CB397FD86A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/34352e362e3139322e302f32322d3332203d3e20323636353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:36:84:41:e1:89:ae:72:ad:63:40:45:d3:8b:65:06:72:2f:
         bf:d8:b2:e7:05:20:55:7a:17:8f:4f:7b:b2:d5:96:62:90:60:
         9a:89:f0:1c:15:d4:72:ab:56:ae:e5:7d:0d:39:80:5e:70:6e:
         c6:17:cb:eb:1c:ac:be:b4:07:b3:da:b3:31:74:ed:c5:82:de:
         88:bf:70:a7:d4:e2:50:6c:40:47:6d:20:6a:60:f4:31:ff:8b:
         a0:f1:69:a3:af:ee:46:5a:99:85:7e:c8:6b:be:ab:b6:b0:e1:
         a7:d1:77:72:cb:f4:36:a5:99:aa:a6:54:9a:0d:4d:84:ff:78:
         9c:65:f9:72:fe:31:43:66:1c:7e:54:6d:c7:62:3d:0d:69:b3:
         21:52:ca:2f:65:c4:14:9f:f0:c5:e1:a8:a4:00:77:d3:bf:9c:
         ae:52:8f:a3:71:18:51:17:56:b5:65:50:75:98:fa:97:9a:1f:
         55:18:f6:91:2f:2f:57:6b:25:e7:44:4c:6d:b8:71:37:b9:9d:
         fb:39:ca:ab:a3:ea:52:ea:f3:4b:85:68:27:80:6c:50:9c:00:
         72:f9:dd:01:b9:ff:95:8d:01:33:7c:83:0f:a6:8c:47:90:74:
         fb:00:84:b5:57:45:90:7f:6c:86:02:d9:30:40:70:6d:19:8a:
         6d:fa:d8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:06 2026 by rpki-client