Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa
File:                     34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa (raw, json)
Hash identifier:          S4z0WpIzUHBbwFho4TDEweXZUtzv7fS2TCOqnGWnf+A=
Subject key identifier:   2F:18:3A:05:A4:AC:43:4A:40:3F:49:7D:7C:04:E5:F6:78:62:8D:4A
Certificate issuer:       /CN=A1E6749C09E9E32D11C15678D45C1B936D525291
Certificate serial:       468D24F65BC1228E20680FEDC181076B2A2A94D8
Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa
Signing time:             Thu 05 Mar 2026 19:33:45 +0000
ROA not before:           Thu 05 Mar 2026 19:28:45 +0000
ROA not after:            Thu 04 Mar 2027 19:33:45 +0000
asID:                     263250
IP address blocks:        45.180.252.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8d:24:f6:5b:c1:22:8e:20:68:0f:ed:c1:81:07:6b:2a:2a:94:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291
        Validity
            Not Before: Mar  5 19:28:45 2026 GMT
            Not After : Mar  4 19:33:45 2027 GMT
        Subject: CN=2F183A05A4AC434A403F497D7C04E5F678628D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:0d:1f:ab:9c:9d:53:28:08:ee:b5:fc:fe:
                    4a:27:5d:f7:1d:a8:7d:de:db:0d:cb:6a:7e:e6:bb:
                    38:fb:fd:98:32:90:c5:89:fe:37:ac:ee:19:4d:55:
                    13:b3:87:9c:60:9f:c1:3b:44:e2:8a:49:c8:6c:2e:
                    91:b2:f8:7d:ce:9c:ae:58:79:9c:5d:ab:b2:2f:e5:
                    aa:50:25:28:11:50:84:23:85:61:ed:f2:de:37:42:
                    23:47:da:9b:f1:fd:d5:e2:96:aa:11:e9:c4:2a:ff:
                    84:5b:0e:b9:3b:69:47:d1:77:b3:7d:bd:6b:d1:c3:
                    b5:24:5d:cc:f0:6c:a2:1d:93:8d:0c:41:f4:17:d6:
                    ff:b6:e8:f4:3d:34:ee:cc:8b:5d:78:59:86:e3:02:
                    c0:66:94:b2:e0:9f:8d:d4:45:ff:0a:28:79:c4:be:
                    d9:e3:2e:7e:86:81:78:a1:01:bf:0b:ff:b4:73:b7:
                    88:ce:a3:ef:49:a0:1c:cd:1e:82:3a:fd:94:a3:15:
                    06:99:4e:ba:08:43:2c:e2:1f:ca:a0:cb:41:71:4a:
                    6e:0d:c4:03:f4:fb:96:0c:f8:15:41:e9:19:b7:b3:
                    33:a0:ec:86:d9:aa:f5:0f:c5:4b:fd:c6:b0:cd:56:
                    fe:7d:59:57:f8:db:bc:f7:59:d5:11:fd:e9:d0:ce:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:18:3A:05:A4:AC:43:4A:40:3F:49:7D:7C:04:E5:F6:78:62:8D:4A
            X509v3 Authority Key Identifier:
                keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:d0:ee:38:31:2c:64:20:d6:ba:a8:27:33:ec:7a:f4:8c:2d:
         3d:f5:f5:0c:30:c6:ba:7e:64:be:1f:f1:55:45:ff:32:90:2d:
         d3:2f:a5:18:4d:c0:b0:27:e5:68:d4:6b:8d:e7:6e:b7:13:34:
         ca:ee:0c:94:3b:5d:13:3c:e9:5e:31:f9:0b:ee:06:d6:92:04:
         cb:16:0f:6f:e2:a5:5e:4b:72:fc:84:01:80:87:f6:29:21:14:
         98:11:c4:b0:af:f7:b1:59:ee:0f:36:80:a4:c8:61:30:9e:5e:
         67:d4:5d:2d:90:fe:1c:90:1e:24:01:7c:a0:0a:a0:4e:98:00:
         75:ed:2d:e6:a2:02:87:ef:8a:a0:d9:7e:3a:8b:52:7e:71:85:
         85:0e:90:b3:28:66:71:d3:9a:61:57:18:e5:9d:a6:09:35:58:
         fb:cd:1a:dc:d5:c4:78:ee:4c:75:58:8c:24:ff:41:f2:16:f2:
         48:38:5c:5a:61:f1:1b:a8:e1:e3:b4:74:aa:47:9e:19:51:7e:
         90:9c:b8:58:13:ac:46:f3:a8:3e:73:98:74:29:05:c5:30:c7:
         47:27:4c:63:44:29:8c:7c:b4:87:72:4d:ff:43:0e:dd:c6:0e:
         40:b6:95:0e:46:08:ae:94:0f:7a:39:98:50:39:2f:00:03:eb:
         55:a7:41:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:43:12 2026 by rpki-client