Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuvW1gXckLBDc6aWZpcGACao5uSNMeTKgycopDtLdtYt/0/34352e3233322e3136302e302f32322d3234203d3e20323637323734.roa
File:                     34352e3233322e3136302e302f32322d3234203d3e20323637323734.roa (raw, json)
Hash identifier:          v0zRZXIr4wftiJOQwgL4R8oGl/K7cbnsvhxZi1S6uOg=
Subject key identifier:   F8:6F:65:FA:2B:46:90:C6:07:ED:8B:C6:D9:28:E6:0C:42:B7:1A:32
Certificate issuer:       /CN=3BC92D05F6FE10F792EDA381A9E0C5F475079875
Certificate serial:       72E52A34F17FBD865D063862736AE294C5AFE120
Authority key identifier: 3B:C9:2D:05:F6:FE:10:F7:92:ED:A3:81:A9:E0:C5:F4:75:07:98:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC92D05F6FE10F792EDA381A9E0C5F475079875.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuvW1gXckLBDc6aWZpcGACao5uSNMeTKgycopDtLdtYt/0/34352e3233322e3136302e302f32322d3234203d3e20323637323734.roa
Signing time:             Mon 14 Jul 2025 18:41:11 +0000
ROA not before:           Mon 14 Jul 2025 18:36:11 +0000
ROA not after:            Mon 13 Jul 2026 18:41:11 +0000
asID:                     267274
IP address blocks:        45.232.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e5:2a:34:f1:7f:bd:86:5d:06:38:62:73:6a:e2:94:c5:af:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC92D05F6FE10F792EDA381A9E0C5F475079875
        Validity
            Not Before: Jul 14 18:36:11 2025 GMT
            Not After : Jul 13 18:41:11 2026 GMT
        Subject: CN=F86F65FA2B4690C607ED8BC6D928E60C42B71A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:0c:f0:a9:ae:0d:74:ff:00:46:0e:76:9d:
                    c7:36:79:29:7b:4e:8e:d5:60:f5:88:94:41:a6:78:
                    85:65:49:10:07:82:b6:8b:b3:03:b4:0a:71:4a:ac:
                    9a:54:a3:31:4f:f7:fb:a1:38:8a:ae:5f:57:91:8e:
                    63:65:58:10:66:9e:ea:56:c9:8f:9b:8e:d9:69:e9:
                    f1:8e:94:3d:ce:bd:d7:a7:03:43:10:f0:b3:9f:93:
                    63:7e:3c:85:98:5a:90:34:c8:4c:da:c8:b2:80:54:
                    b4:0d:cd:c8:81:f0:63:52:7a:b7:ec:d5:41:2a:9e:
                    34:ef:3b:0f:11:62:68:5d:77:9c:75:c0:b5:fd:57:
                    c8:f4:91:6f:c8:00:f0:8c:18:38:58:53:a2:7b:a9:
                    fa:f1:f5:4c:27:5c:2a:09:26:03:48:50:0d:1b:7d:
                    e1:f2:08:39:c1:c1:46:01:c3:cc:00:c8:8f:eb:4a:
                    76:d0:e5:ad:2b:c6:30:f2:49:de:62:6d:e1:29:10:
                    64:91:9e:e5:99:0e:3c:24:95:97:ae:62:b3:f0:07:
                    6d:9c:6e:c1:94:72:93:3e:e3:fc:02:68:61:bf:57:
                    9d:ba:c1:ff:72:ae:6c:14:85:11:31:42:c0:42:f8:
                    27:a0:92:54:65:c1:7f:28:69:dd:1a:5e:06:a5:c7:
                    c0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6F:65:FA:2B:46:90:C6:07:ED:8B:C6:D9:28:E6:0C:42:B7:1A:32
            X509v3 Authority Key Identifier:
                keyid:3B:C9:2D:05:F6:FE:10:F7:92:ED:A3:81:A9:E0:C5:F4:75:07:98:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuvW1gXckLBDc6aWZpcGACao5uSNMeTKgycopDtLdtYt/0/3BC92D05F6FE10F792EDA381A9E0C5F475079875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC92D05F6FE10F792EDA381A9E0C5F475079875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuvW1gXckLBDc6aWZpcGACao5uSNMeTKgycopDtLdtYt/0/34352e3233322e3136302e302f32322d3234203d3e20323637323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:39:48:5c:9f:19:d2:51:ee:7e:91:e3:9a:65:2f:34:6f:
         1d:76:81:d9:4e:31:41:88:85:f2:b5:6c:50:b7:b0:84:a9:59:
         f0:59:3d:e1:0c:4b:ad:42:e2:63:29:d7:8a:32:57:99:a0:bd:
         73:f9:2b:d7:6a:63:ee:55:f3:ff:0f:b6:37:a1:81:93:73:e1:
         aa:9b:30:10:59:ff:0f:67:ff:35:07:78:f3:3b:40:ca:69:28:
         97:c4:99:e6:7e:b9:f7:10:01:01:9f:32:e0:53:a3:a7:23:31:
         70:24:54:9a:e7:00:42:24:1e:29:f8:a8:f3:76:c8:cf:1c:d9:
         6c:0a:69:fd:a9:ab:2f:ac:e4:c7:cc:d9:c8:d3:92:b5:4c:19:
         3a:6c:ec:a0:23:0b:d3:48:4d:d6:90:24:0a:85:d1:13:b8:78:
         e7:1b:2d:d0:8b:61:0e:1e:85:74:1d:31:16:70:50:4f:79:30:
         b0:50:49:f7:06:ac:cd:1c:cd:16:13:97:6b:2b:77:1d:b0:81:
         98:89:81:90:e4:3c:5f:6b:2b:9e:e0:1b:60:cd:e1:66:23:df:
         79:16:33:58:d9:ea:5e:d9:77:d9:b8:80:eb:50:ea:1b:6a:be:
         89:a8:c4:bc:38:d4:92:3e:06:c5:1b:e8:ea:60:6b:57:03:4e:
         0c:20:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:47:07 2025 by rpki-client