Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33362e302f32322d3232203d3e20323636313532.roa
File:                     34352e362e33362e302f32322d3232203d3e20323636313532.roa (raw, json)
Hash identifier:          Jj0hAqpQFlebGDgHPmjakGxjlG/3TKBsNHAsdeSJE/g=
Subject key identifier:   84:8A:5A:6C:BD:FC:E7:1E:08:EF:DA:FF:AE:BC:34:7B:7A:0C:F2:63
Certificate issuer:       /CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
Certificate serial:       06F00FA1C56B8104DA2C2896633BAB1EA6A79708
Authority key identifier: BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33362e302f32322d3232203d3e20323636313532.roa
Signing time:             Wed 01 Mar 2023 18:25:15 +0000
ROA not before:           Wed 01 Mar 2023 18:20:15 +0000
ROA not after:            Wed 28 Feb 2024 18:25:15 +0000
asID:                     266152
IP address blocks:        45.6.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f0:0f:a1:c5:6b:81:04:da:2c:28:96:63:3b:ab:1e:a6:a7:97:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
        Validity
            Not Before: Mar  1 18:20:15 2023 GMT
            Not After : Feb 28 18:25:15 2024 GMT
        Subject: CN=848A5A6CBDFCE71E08EFDAFFAEBC347B7A0CF263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6b:19:b5:55:a4:a8:f1:8c:12:51:ef:af:c4:
                    e9:0a:06:f2:bd:e2:37:8c:16:46:96:40:51:70:f0:
                    cf:c4:f1:01:39:97:a9:ae:88:8b:96:33:7b:d1:9a:
                    85:43:22:1d:20:86:ee:4d:71:42:7c:3e:04:fa:6f:
                    9b:ad:e1:7b:b0:18:7d:7e:12:2f:f6:b5:a6:61:3a:
                    99:3f:cd:3f:fb:f5:02:30:b6:fc:de:ef:20:ff:ea:
                    cb:d1:a0:91:00:99:a4:cc:c1:ae:90:4e:80:71:a8:
                    ea:6c:1a:2b:c4:55:99:a6:c6:c3:79:e7:dc:1f:a8:
                    da:f7:48:fb:19:1a:44:85:a1:92:31:e0:45:cd:8d:
                    e3:0f:db:64:31:4c:f7:4d:d2:6f:d8:c2:6b:f1:7d:
                    0b:85:46:d9:fa:fe:a5:27:d3:7b:4e:7b:85:2c:63:
                    53:61:24:04:ac:e6:bb:a0:4e:08:74:0a:c7:cb:5c:
                    b4:b3:6e:80:9a:1a:8c:41:9c:06:b5:36:3b:a7:56:
                    86:6d:2d:bb:ec:35:05:fd:67:cb:af:e7:67:4d:a6:
                    3b:ed:61:16:b7:b3:24:4a:ca:7e:93:dd:7f:d0:c6:
                    4f:5b:e4:2a:c6:6e:4d:12:d2:32:bf:39:83:6c:a3:
                    dd:ab:7f:5e:a6:8a:62:4d:1e:bd:a7:5f:e5:12:a6:
                    db:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8A:5A:6C:BD:FC:E7:1E:08:EF:DA:FF:AE:BC:34:7B:7A:0C:F2:63
            X509v3 Authority Key Identifier:
                keyid:BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33362e302f32322d3232203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:77:67:bb:22:79:8f:6b:05:3b:7b:fc:97:65:97:47:44:35:
         64:4a:57:fd:81:fd:89:44:54:42:f4:e8:46:02:fe:32:5a:cf:
         23:eb:99:a0:f7:29:4a:ae:84:8b:28:65:38:a3:c7:67:49:03:
         3d:23:73:01:83:f0:0c:07:e8:8b:ed:ef:da:43:6e:db:ea:83:
         da:8d:66:69:3c:5f:22:6d:c2:a0:dc:b1:77:42:3d:9d:1e:8f:
         82:5e:7f:d2:9f:9d:2f:56:5f:60:b1:60:48:f7:41:5c:71:bd:
         08:0e:c5:db:4c:cb:fb:68:3c:6d:b0:d7:32:69:58:20:76:c5:
         95:58:f8:01:63:ea:4f:a7:ac:10:ba:c1:31:e3:ec:60:34:cc:
         9f:2d:ad:d8:84:04:73:7e:4b:fd:b1:ec:0d:c9:b6:dd:2b:cf:
         67:aa:ef:79:59:cd:65:8f:62:de:51:6e:fb:5b:9d:47:96:f0:
         b9:78:d3:a2:fa:a9:eb:f1:bd:cb:0a:ec:93:90:68:ba:1d:95:
         1f:ce:b8:bb:bb:a3:fa:33:59:82:e6:65:9a:f0:d7:64:b4:9b:
         32:1c:f0:8d:14:46:6d:a3:df:e9:5a:36:fb:6b:11:5d:0d:9d:
         25:4b:75:fc:50:58:a4:3d:b2:07:bf:cd:41:27:1f:28:b9:dd:
         a3:26:f8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 09:32:57 2025 by rpki-client