Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/34352e3232362e3139362e302f32332d3234203d3e20323636393738.roa
File:                     34352e3232362e3139362e302f32332d3234203d3e20323636393738.roa (raw, json)
Hash identifier:          CWXM7HCeU16+ZRxMOR/VC3CLpxPCtNUSO1TT7Ic5gv0=
Subject key identifier:   80:5C:8D:D1:A9:8E:98:52:70:27:AF:5D:30:F9:10:ED:02:1D:B7:51
Certificate issuer:       /CN=8E25E1C1B57F298C43C3BCB248611C3AAA49BB38
Certificate serial:       0603AFE9303B176303C7606726262D249F3F4E88
Authority key identifier: 8E:25:E1:C1:B5:7F:29:8C:43:C3:BC:B2:48:61:1C:3A:AA:49:BB:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E25E1C1B57F298C43C3BCB248611C3AAA49BB38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/34352e3232362e3139362e302f32332d3234203d3e20323636393738.roa
Signing time:             Sun 02 Mar 2025 20:21:41 +0000
ROA not before:           Sun 02 Mar 2025 20:16:41 +0000
ROA not after:            Sun 01 Mar 2026 20:21:41 +0000
asID:                     266978
IP address blocks:        45.226.196.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:03:af:e9:30:3b:17:63:03:c7:60:67:26:26:2d:24:9f:3f:4e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E25E1C1B57F298C43C3BCB248611C3AAA49BB38
        Validity
            Not Before: Mar  2 20:16:41 2025 GMT
            Not After : Mar  1 20:21:41 2026 GMT
        Subject: CN=805C8DD1A98E98527027AF5D30F910ED021DB751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:f9:dd:c4:97:bb:84:9b:c0:ab:18:7a:1a:
                    18:a1:e6:35:d5:66:aa:3c:37:39:b1:f4:a5:a1:af:
                    0e:cf:ae:49:20:8b:73:f7:08:0c:a9:67:0b:8e:10:
                    43:9b:4f:bd:fc:7f:84:f7:f3:b5:98:c6:b8:bc:6c:
                    8c:49:cf:0c:cd:e8:ee:e0:6d:9d:bd:f6:73:fb:f3:
                    38:1f:98:c5:b0:0c:84:2c:05:e6:bc:16:cd:f1:c8:
                    fd:8c:b4:ae:27:05:a2:8d:53:1c:50:03:e0:c1:78:
                    71:b1:8f:34:46:11:86:be:bc:37:ac:de:d8:1a:89:
                    1b:77:44:03:d3:ab:bf:82:e1:79:16:d8:cb:db:12:
                    cf:f5:2b:9d:74:d4:b8:83:7c:75:45:e1:4c:92:26:
                    29:2f:7b:2a:23:23:09:9b:af:c3:85:4f:84:8e:d1:
                    57:cf:d8:08:25:65:de:d5:a6:f7:67:f9:fa:10:33:
                    05:d9:e4:71:b6:d3:45:c3:90:48:5f:ad:56:af:93:
                    04:5a:ab:b5:b5:c1:9a:66:68:3e:18:d1:77:7d:be:
                    dc:3a:17:47:76:74:99:6e:ab:08:fa:6b:6c:84:8d:
                    7a:3e:86:13:57:cc:bd:96:75:a7:5e:e8:37:a7:0f:
                    ad:91:d6:c2:7f:c4:10:b8:f9:4a:4c:91:af:9b:a6:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5C:8D:D1:A9:8E:98:52:70:27:AF:5D:30:F9:10:ED:02:1D:B7:51
            X509v3 Authority Key Identifier:
                keyid:8E:25:E1:C1:B5:7F:29:8C:43:C3:BC:B2:48:61:1C:3A:AA:49:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/8E25E1C1B57F298C43C3BCB248611C3AAA49BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E25E1C1B57F298C43C3BCB248611C3AAA49BB38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/34352e3232362e3139362e302f32332d3234203d3e20323636393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:4c:86:b3:90:24:44:79:05:17:6f:ab:51:4e:aa:6a:ec:02:
         a6:43:41:71:3b:46:30:54:ab:ee:1f:d9:4d:03:83:99:ba:92:
         bc:a7:93:40:44:b4:79:44:31:79:85:73:4d:9b:95:df:39:fc:
         8a:26:47:19:f4:c8:a5:4e:99:0b:9b:e8:49:e9:ab:80:1d:f8:
         47:4c:e9:38:8e:c7:c5:97:81:5b:49:ee:95:49:73:56:a1:cf:
         1f:03:0d:ae:2a:8c:a8:d3:ed:3b:36:92:11:f8:a6:3c:07:d6:
         2f:25:46:5c:bc:c2:78:49:52:4d:e5:85:12:22:f2:cb:28:dc:
         68:aa:c7:e1:cb:e6:e7:74:5b:25:87:97:bd:e9:7b:fc:3f:a7:
         0a:bf:f5:5c:90:2d:16:76:51:47:df:6f:62:04:e5:c1:de:5b:
         98:e0:00:23:f0:c9:17:35:a5:7a:a4:8d:2b:3d:ff:bb:70:46:
         9d:e8:a9:53:57:0e:07:cd:08:60:7f:67:b7:ef:de:0c:9a:3c:
         18:0a:d6:07:4f:a1:e6:60:41:e1:01:b9:8a:10:07:03:88:23:
         2e:f2:af:0b:e5:eb:2c:36:39:1f:e9:c5:ee:7f:62:b0:69:69:
         0e:48:45:5f:35:5d:06:82:53:fc:a3:ea:3f:5e:18:86:66:25:
         5e:f6:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:30:40 2025 by rpki-client