Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa
File:                     34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa (raw, json)
Hash identifier:          m441PKH6GHa8TLskpfNFKr2NOf53H5ZQEYrLZiBeoV0=
Subject key identifier:   B5:B4:89:BD:60:D1:EB:2E:0F:82:49:9E:53:9C:67:AD:1D:F8:3B:3A
Certificate issuer:       /CN=9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7
Certificate serial:       16772C4B39AF650647E9CDB83FCEE8A6CC321AF1
Authority key identifier: 9B:BE:F1:05:0D:0F:0E:92:36:7C:82:3D:2A:9C:8B:46:DD:90:E9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa
Signing time:             Wed 05 Mar 2025 21:31:26 +0000
ROA not before:           Wed 05 Mar 2025 21:26:26 +0000
ROA not after:            Wed 04 Mar 2026 21:31:26 +0000
asID:                     268063
IP address blocks:        45.168.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:77:2c:4b:39:af:65:06:47:e9:cd:b8:3f:ce:e8:a6:cc:32:1a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7
        Validity
            Not Before: Mar  5 21:26:26 2025 GMT
            Not After : Mar  4 21:31:26 2026 GMT
        Subject: CN=B5B489BD60D1EB2E0F82499E539C67AD1DF83B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3c:fb:38:69:a8:e0:98:40:29:58:e7:db:24:
                    79:c2:ca:59:8f:fc:d4:1a:30:67:11:52:c4:68:fe:
                    b5:ab:80:13:c4:3f:00:6f:29:00:85:09:93:c7:f9:
                    6b:5a:33:c6:c8:89:ac:aa:b7:80:25:36:a2:4c:8e:
                    99:a1:a7:a5:32:b3:e2:fe:8b:81:27:9a:9c:4d:cc:
                    e9:38:6e:39:e6:f4:e5:10:76:d3:64:01:42:28:5c:
                    bb:44:d6:fd:d6:49:c6:d9:3c:b1:40:ca:10:e5:16:
                    81:1b:d5:ab:ad:ad:14:48:44:1b:7a:56:fd:c3:a2:
                    1f:d0:bc:46:d7:9e:30:d9:d3:34:e6:bf:a3:c3:01:
                    64:b7:fc:43:fb:84:ee:12:31:99:e9:99:e0:7f:18:
                    a3:93:8d:a9:75:bd:9a:5a:e3:74:b0:36:10:c6:6f:
                    30:b3:dd:a8:1a:a0:8f:d7:bb:83:20:7e:4a:06:1d:
                    dc:5a:88:d8:42:bf:32:d4:bc:05:6c:eb:27:1d:4a:
                    f8:b7:6e:11:5b:ca:b3:16:c6:8b:2f:54:67:02:46:
                    f6:f4:6d:e6:9f:db:4c:c8:c2:87:bf:47:8e:56:ee:
                    df:9f:0a:09:a0:87:4b:4d:a2:ed:8a:9d:25:65:0d:
                    84:66:d7:94:e3:d8:d6:ea:72:33:09:c5:d8:d4:eb:
                    70:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B4:89:BD:60:D1:EB:2E:0F:82:49:9E:53:9C:67:AD:1D:F8:3B:3A
            X509v3 Authority Key Identifier:
                keyid:9B:BE:F1:05:0D:0F:0E:92:36:7C:82:3D:2A:9C:8B:46:DD:90:E9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:5d:4b:6e:4f:f0:a2:e2:56:93:77:eb:d7:d7:b6:be:52:c7:
         73:cf:1f:5e:c8:15:0e:b4:fb:ec:d5:38:5b:8f:ed:af:a5:0c:
         fd:19:29:e3:45:72:4c:a0:1a:14:49:7b:1c:27:25:46:d4:45:
         93:e3:57:6b:0b:d6:16:3c:a8:2e:f9:65:87:33:f6:e7:3a:57:
         c5:0c:f0:9f:f0:b4:58:ca:93:16:d0:a4:62:22:00:54:c6:35:
         f3:f0:23:d9:f4:81:69:1f:95:ec:6c:0d:51:6e:13:71:a4:c9:
         55:b6:8c:7e:d9:ed:c8:d7:08:89:b7:6d:73:0f:8f:29:41:e7:
         df:fe:c9:63:2e:87:18:f2:fe:d0:eb:62:cd:31:e3:67:d2:1f:
         67:a4:f2:04:82:60:80:35:a8:20:ca:91:2b:84:38:21:3f:07:
         1f:0b:79:66:ae:d5:a2:2b:0c:46:df:33:bd:4d:b1:3c:a1:c6:
         8d:fd:bb:ff:a5:57:97:fa:9d:3f:fb:b1:2d:f8:fb:78:d9:88:
         5a:b1:55:24:5a:d3:42:1b:72:fe:6f:3b:71:07:90:2b:4b:ef:
         a4:57:69:54:8e:b1:76:eb:f6:87:ca:13:33:b8:ee:0f:25:03:
         de:a8:1f:7e:ce:1a:3f:0e:a0:a0:b6:78:38:a1:9a:a1:a4:cf:
         2d:de:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:28:03 2025 by rpki-client