Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa
File:                     34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa (raw, json)
Hash identifier:          R6WH9nd6SKjQaxf3t2luZ14n7cajZPhhK4UIKA5nNTs=
Subject key identifier:   72:60:6D:D2:BF:A8:FD:B6:6A:25:3E:5D:D1:E7:44:C7:88:78:F3:85
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       605822F9154268288541B6E7345F872236E224C3
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:12:57 +0000
ROA not before:           Fri 09 Jun 2023 22:07:57 +0000
ROA not after:            Fri 07 Jun 2024 22:12:57 +0000
asID:                     263427
IP address blocks:        45.162.240.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:58:22:f9:15:42:68:28:85:41:b6:e7:34:5f:87:22:36:e2:24:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 22:07:57 2023 GMT
            Not After : Jun  7 22:12:57 2024 GMT
        Subject: CN=72606DD2BFA8FDB66A253E5DD1E744C78878F385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:c5:6a:ab:0b:34:e3:3f:c5:20:0b:6f:b8:
                    a3:b6:bd:c7:0f:af:02:39:f0:7f:3e:2d:ff:0c:8c:
                    6f:8f:4f:0c:77:63:d9:1e:c5:8d:53:0e:1f:48:81:
                    e7:b1:d8:16:16:79:52:b2:b3:44:cb:6c:ca:af:f1:
                    15:58:4b:c7:08:58:59:93:55:3b:b6:7c:af:da:2a:
                    9b:12:75:52:53:5a:ee:aa:77:47:86:ad:b1:1f:81:
                    5c:f0:a3:cd:70:e5:ea:3a:ed:4c:69:af:66:26:bb:
                    cb:a1:c2:08:93:09:53:56:50:29:11:b7:b7:2e:b7:
                    b1:e9:82:22:6d:bd:95:e3:8a:50:3f:43:02:86:e0:
                    b5:af:a9:34:7d:28:49:71:8c:e6:4a:1f:be:e1:29:
                    17:f2:d8:4f:a2:89:7f:73:93:75:56:fb:2c:a0:f9:
                    ec:3c:18:77:26:14:31:df:65:52:68:f2:89:db:f4:
                    c8:d7:36:24:c6:61:03:d4:6c:ea:55:b0:3c:a9:f2:
                    5b:b4:d6:3b:1a:1b:f4:76:d3:81:28:a5:7c:12:30:
                    a2:da:e3:b3:0f:52:71:65:33:b0:55:1e:1a:2a:89:
                    8f:7c:80:e3:fd:fd:9c:d3:52:28:67:2a:7f:eb:9c:
                    a4:48:d8:7b:f3:c8:11:e2:bc:34:56:86:bb:8e:d0:
                    fa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:60:6D:D2:BF:A8:FD:B6:6A:25:3E:5D:D1:E7:44:C7:88:78:F3:85
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:51:a5:60:d0:ac:b8:b8:bd:63:47:b9:9b:da:a6:8c:fb:46:
         98:eb:73:c0:eb:c2:b5:e4:e2:c7:45:f0:b0:94:ed:bc:b0:8b:
         28:6c:e2:19:d6:3b:34:13:2d:e8:ff:df:a4:1c:86:18:f8:71:
         b3:dc:e1:2e:94:65:be:f1:9e:46:05:3b:e5:84:92:15:eb:47:
         79:fc:e1:e3:95:40:35:c8:84:c2:53:3d:95:d2:7a:35:19:d5:
         9b:d8:19:78:b9:4b:a4:73:61:94:a0:af:a4:a0:ea:09:eb:4f:
         18:a3:ec:5e:56:0d:2e:33:13:69:40:d4:85:e1:bd:26:79:81:
         3a:84:74:d4:9b:18:21:f3:07:90:46:34:97:e3:4b:61:e3:09:
         01:cc:ff:81:8a:00:c0:d6:c8:8f:a6:14:1a:f1:5e:50:54:12:
         53:71:dc:d6:91:b9:22:ee:1b:77:96:b5:75:cb:ce:ea:24:5b:
         63:fd:38:a0:2e:f4:db:1c:3d:b1:9b:e3:32:7b:94:31:c2:fa:
         08:bd:01:0a:85:cf:f2:af:3f:b3:e2:ea:d2:35:8f:cc:9a:ce:
         8d:94:c4:0f:08:34:8f:5d:37:cc:50:c3:c0:1b:93:41:73:95:
         0d:31:1b:42:db:45:df:40:b5:73:66:26:84:73:10:d9:de:80:
         44:09:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:31:51 2025 by rpki-client