Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33362e302f32332d3233203d3e20323636313532.roa
File:                     34352e362e33362e302f32332d3233203d3e20323636313532.roa (raw, json)
Hash identifier:          0wDDKrAQ6PR1qhELPfE+wtacjIiztDe+rIhJuy8pOFs=
Subject key identifier:   06:0C:4C:4C:30:EF:D7:46:DB:C6:79:26:5F:9E:49:9A:BD:22:BA:F1
Certificate issuer:       /CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
Certificate serial:       6FE8410F5DF0A13615F3AA455A5C3B58605E9326
Authority key identifier: BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33362e302f32332d3233203d3e20323636313532.roa
Signing time:             Wed 13 Dec 2023 13:20:28 +0000
ROA not before:           Wed 13 Dec 2023 13:15:28 +0000
ROA not after:            Wed 11 Dec 2024 13:20:28 +0000
asID:                     266152
IP address blocks:        45.6.36.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e8:41:0f:5d:f0:a1:36:15:f3:aa:45:5a:5c:3b:58:60:5e:93:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
        Validity
            Not Before: Dec 13 13:15:28 2023 GMT
            Not After : Dec 11 13:20:28 2024 GMT
        Subject: CN=060C4C4C30EFD746DBC679265F9E499ABD22BAF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:53:62:ce:a4:d3:02:a6:c7:a3:8e:55:d2:
                    b3:ac:90:f3:92:8a:9b:4f:da:1a:b3:44:1f:7f:81:
                    e9:c0:70:c4:ee:3b:ce:56:c0:6b:ad:fe:c8:c3:42:
                    84:c1:8d:5a:cf:4c:d0:05:77:fd:4a:03:d2:ca:bb:
                    bb:99:f8:5f:97:19:6d:7b:f1:93:00:9f:51:08:74:
                    9a:19:54:7a:87:85:46:df:48:98:70:8e:a9:a4:5d:
                    05:43:ae:8d:cf:59:7f:db:e4:66:fd:de:57:14:39:
                    5e:f6:21:61:66:f9:ef:5b:bb:69:f6:20:1f:5d:8d:
                    e4:ba:27:9f:20:e7:50:32:8b:b7:41:b1:8c:94:8e:
                    b2:06:59:d4:70:c7:71:ce:d0:ec:54:c8:93:cb:2a:
                    18:0c:2c:7f:54:55:e6:d3:31:0c:08:09:8a:90:71:
                    7e:12:31:dd:ad:76:4a:10:6b:c4:aa:e5:a7:b9:df:
                    ba:b3:50:65:36:3c:21:0e:c3:3f:c9:25:49:f4:52:
                    d0:40:bb:83:31:67:aa:28:28:1c:09:65:df:ce:0a:
                    48:49:f8:52:00:c9:70:30:df:75:7d:76:bd:b6:c6:
                    a8:72:fd:c4:51:8d:10:0d:28:05:29:68:6e:84:1c:
                    60:c4:1a:81:7a:38:64:ee:11:8d:8a:83:bd:a6:e9:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0C:4C:4C:30:EF:D7:46:DB:C6:79:26:5F:9E:49:9A:BD:22:BA:F1
            X509v3 Authority Key Identifier:
                keyid:BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33362e302f32332d3233203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:c8:2f:1c:be:fd:e4:0f:5c:de:79:6b:83:13:0e:e1:0d:0b:
         17:80:e3:33:c2:05:10:cf:7f:72:db:6c:5f:79:94:f8:b5:f0:
         2c:dc:d3:41:e3:fe:71:ff:1b:49:8e:4b:66:98:ce:b3:99:76:
         c3:e7:be:ef:e0:64:68:65:4c:ab:4c:f5:a0:2e:57:19:a6:4a:
         fc:ac:49:cf:1c:88:fe:0f:46:0a:68:1b:07:67:7a:62:da:d5:
         18:1d:15:3e:fa:37:9f:81:aa:ea:d6:68:2a:c6:14:54:ca:07:
         21:37:bd:97:99:5e:58:72:3e:fe:18:95:7a:20:78:9e:23:b9:
         8e:4b:56:0f:9c:71:ab:53:b4:cd:67:d7:93:6f:38:18:80:a1:
         4c:16:b4:08:36:99:aa:3f:92:a4:63:2d:b1:54:c2:aa:4f:74:
         85:f5:d2:c3:28:17:96:8b:50:26:5a:1c:c8:cf:34:b4:b3:bd:
         5a:b1:43:6b:24:51:a6:92:3e:5a:a0:73:a9:ff:1e:a3:49:e1:
         8d:8a:59:8e:d4:5c:9e:85:92:a4:a4:1c:12:cc:cc:66:6d:da:
         96:ea:69:36:91:b8:d2:b3:aa:79:d9:20:60:a8:42:a0:73:7b:
         7b:7f:ff:83:7d:0d:5b:ab:cf:7e:56:d1:10:d2:a9:18:3b:31:
         20:0c:01:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 09:56:04 2025 by rpki-client