Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35302e302f32332d3233203d3e20323637323536.roa
File:                     34352e3233322e35302e302f32332d3233203d3e20323637323536.roa (raw, json)
Hash identifier:          KrzO32o2EuJNi69kh8TFc/509i+Hra1HJWHH1t3LHrk=
Subject key identifier:   3E:1E:4A:6B:FC:BD:59:82:E0:AB:CA:56:97:B7:54:A2:DF:8C:22:D8
Certificate issuer:       /CN=B4F54174CAB335222D5C3A179199900DBAC503F6
Certificate serial:       6F1F04A5350AF4E9F8256DAEEEDD2EBE7A2157E7
Authority key identifier: B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35302e302f32332d3233203d3e20323637323536.roa
Signing time:             Thu 06 Mar 2025 18:59:21 +0000
ROA not before:           Thu 06 Mar 2025 18:54:21 +0000
ROA not after:            Thu 05 Mar 2026 18:59:21 +0000
asID:                     267256
IP address blocks:        45.232.50.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1f:04:a5:35:0a:f4:e9:f8:25:6d:ae:ee:dd:2e:be:7a:21:57:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F54174CAB335222D5C3A179199900DBAC503F6
        Validity
            Not Before: Mar  6 18:54:21 2025 GMT
            Not After : Mar  5 18:59:21 2026 GMT
        Subject: CN=3E1E4A6BFCBD5982E0ABCA5697B754A2DF8C22D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:b4:a7:d3:23:db:5d:64:1f:1a:e0:85:93:
                    84:59:ed:14:6b:91:6a:e9:06:5f:cf:17:b1:75:c8:
                    48:48:65:99:eb:73:27:bd:32:94:d4:37:91:d1:4d:
                    00:2a:19:75:ff:45:83:36:76:9f:53:25:40:dc:68:
                    67:4c:da:67:df:61:75:ed:cb:3e:5b:cb:b7:45:71:
                    8b:99:53:d8:43:55:52:ac:ea:15:0f:d2:48:69:8b:
                    77:c0:94:37:7e:d6:cf:6f:e5:56:4f:09:6b:27:6d:
                    a3:4d:47:fb:87:13:03:e7:b0:b3:ac:16:99:77:96:
                    84:ce:a6:cf:2e:13:c7:9d:22:89:ae:d6:0b:43:6a:
                    21:52:ef:26:73:12:ec:14:31:8b:2d:b3:9a:30:a1:
                    6c:3b:31:34:df:6d:96:3c:29:44:11:7c:9d:b0:42:
                    42:4e:c5:13:50:f4:d7:75:e2:68:a6:72:cf:83:a3:
                    9c:26:b1:d2:39:10:f9:8c:16:ca:cf:e3:5a:b2:56:
                    ff:e5:61:d1:fa:83:5b:28:ee:ce:06:fe:bc:a9:66:
                    e6:38:15:14:19:a2:79:a2:42:fd:6a:bf:4a:5d:85:
                    01:f9:b8:14:f8:7e:f2:0a:0d:bb:a6:c7:6b:80:f4:
                    56:9f:63:17:1e:a6:60:6f:06:b9:4d:93:4a:5e:99:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1E:4A:6B:FC:BD:59:82:E0:AB:CA:56:97:B7:54:A2:DF:8C:22:D8
            X509v3 Authority Key Identifier:
                keyid:B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35302e302f32332d3233203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:5d:5c:9a:80:7e:a0:2c:f8:59:54:4b:02:57:10:2f:c4:0c:
         64:18:3c:19:7f:c1:4f:f1:58:63:82:3c:5d:da:4a:7b:f9:90:
         80:42:05:91:70:bb:06:df:36:5c:44:b9:ff:8a:bd:90:e9:de:
         01:38:fe:88:64:81:64:83:43:05:18:e6:b0:25:dc:cf:ea:2b:
         b6:4c:70:a0:1e:e7:26:9c:81:e2:22:5f:1f:70:0a:04:38:e1:
         c7:e6:a2:be:2c:a7:1e:cb:a3:d3:af:39:fe:e4:58:21:93:51:
         03:0d:dc:4d:97:9f:fc:94:2a:ae:76:72:05:00:1e:51:e0:17:
         e1:37:21:26:35:5f:83:2e:50:e3:26:f8:73:db:9e:cd:18:db:
         e3:70:d4:ce:95:7a:66:09:ee:39:6e:d2:50:8f:99:35:b1:f9:
         9e:77:c7:90:a1:e9:c8:07:15:43:0a:8e:d6:34:ec:a5:4c:66:
         16:45:c9:81:83:6e:37:c7:6b:40:16:96:a6:c0:49:b5:0b:bc:
         75:6d:d6:ff:02:68:83:fa:57:ad:dd:a7:64:66:c1:6c:b4:7a:
         31:a2:61:9f:38:5e:a5:4a:b7:17:78:b2:ce:45:71:61:fa:88:
         7b:57:8b:74:42:89:1f:03:71:39:a1:ad:e3:ab:f3:8d:2d:58:
         21:85:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:39:52 2025 by rpki-client