Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34382e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e34382e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          B39VaEZatwEPGfYKdESuhmWahV/XQks4zQF5S3WGyDI=
Subject key identifier:   9B:07:19:26:C9:9D:10:4B:6A:1D:2A:49:E4:DF:36:ED:A8:43:9C:E7
Certificate issuer:       /CN=B4F54174CAB335222D5C3A179199900DBAC503F6
Certificate serial:       34D88F54E0CA2A26BAA31DFB948438137BC9CC40
Authority key identifier: B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34382e302f32342d3234203d3e20323637323536.roa
Signing time:             Thu 06 Mar 2025 18:59:19 +0000
ROA not before:           Thu 06 Mar 2025 18:54:19 +0000
ROA not after:            Thu 05 Mar 2026 18:59:19 +0000
asID:                     267256
IP address blocks:        45.232.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d8:8f:54:e0:ca:2a:26:ba:a3:1d:fb:94:84:38:13:7b:c9:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F54174CAB335222D5C3A179199900DBAC503F6
        Validity
            Not Before: Mar  6 18:54:19 2025 GMT
            Not After : Mar  5 18:59:19 2026 GMT
        Subject: CN=9B071926C99D104B6A1D2A49E4DF36EDA8439CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:84:45:ab:0e:fb:e1:18:61:d6:38:27:07:
                    51:8f:b1:80:0f:6f:48:ad:59:53:18:db:95:4f:15:
                    75:02:d8:74:f7:17:09:57:b3:b5:cd:c2:f6:d2:c7:
                    fa:e3:cd:dc:7d:f0:2d:44:cd:ce:c0:4b:d3:c2:8d:
                    06:3c:c5:ab:51:d7:f1:43:5a:74:f4:2e:a3:25:86:
                    ad:94:5f:fd:2f:fc:52:08:da:f2:eb:a1:6c:ee:9a:
                    f3:9d:11:fc:65:00:86:66:69:9a:30:51:5b:12:10:
                    ed:93:ed:60:7e:ff:20:75:59:12:7d:fa:28:2c:9f:
                    d4:cf:fa:9a:f3:5c:c9:82:d5:fa:28:00:72:88:2c:
                    c1:e3:52:b3:81:2b:63:a8:14:5d:46:73:b3:6c:e3:
                    23:8f:bc:78:ed:48:b6:de:7b:ea:96:54:0b:4d:4e:
                    77:c6:8b:79:f6:e9:f8:f1:8e:6d:8e:49:9c:9a:cd:
                    9e:a3:20:5b:6a:0c:86:12:bd:ea:7a:a0:65:80:d0:
                    ad:b5:3b:d1:92:1a:8a:38:23:fe:6c:9c:65:a9:2d:
                    6b:31:0a:c6:10:ac:d2:c5:7a:47:ce:bf:7f:2f:05:
                    8e:d9:eb:d6:30:9f:4a:64:78:e1:d1:63:79:15:4e:
                    64:dd:e1:11:b5:6e:3e:ba:0a:c5:1f:aa:44:f9:7f:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:07:19:26:C9:9D:10:4B:6A:1D:2A:49:E4:DF:36:ED:A8:43:9C:E7
            X509v3 Authority Key Identifier:
                keyid:B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34382e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:74:d2:46:f6:b7:fa:56:e0:5a:ee:7c:3c:ef:75:5d:95:73:
         13:0e:cd:38:5e:52:57:08:4c:53:e3:2d:fb:cd:8c:39:91:6c:
         f0:ae:17:a4:c4:3b:67:35:bb:27:a6:e8:1a:fd:30:d6:dc:de:
         e8:1a:0d:2d:78:3a:f7:f3:92:73:46:b4:be:99:68:de:63:df:
         c5:f5:5a:8e:33:4b:3e:f6:68:74:a6:16:9d:69:cf:e2:94:64:
         03:89:27:a8:ca:fb:6a:9f:80:69:d9:96:fb:10:23:e9:f5:ac:
         45:85:19:26:89:7a:99:1c:f1:5e:9f:f1:41:92:70:29:66:4c:
         e9:c1:d9:c3:4e:08:3b:78:89:09:b2:d7:d7:15:5f:da:0d:8e:
         e2:dc:88:f7:b7:50:a4:e7:3f:0e:ad:58:fa:97:f7:84:62:65:
         52:c4:7c:53:22:19:3f:b4:e5:9e:65:c0:8b:1c:61:02:fc:30:
         da:87:e7:0e:40:3d:43:12:a2:3b:24:4f:21:af:0c:15:2a:76:
         aa:8b:d3:3c:23:fb:be:e8:ab:06:8a:22:a9:b6:5f:83:bb:e1:
         7b:e4:40:21:91:18:ef:dc:aa:e3:09:4a:51:60:98:84:4c:31:
         cd:84:e6:42:62:1a:16:fb:91:ad:2f:d4:04:0f:2f:d5:24:ec:
         42:b6:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:27:27 2025 by rpki-client