Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33372e302f32342d3234203d3e20323636313532.roa
File:                     34352e362e33372e302f32342d3234203d3e20323636313532.roa (raw, json)
Hash identifier:          QHSEgSVdqXqqHtQ9J8RlKI/DKit1f2OQ4l4hraO06zI=
Subject key identifier:   AF:79:C7:AA:7D:C9:9F:70:99:81:6F:73:C3:F3:D6:5E:A6:BE:FC:A8
Certificate issuer:       /CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
Certificate serial:       04AFF55AE7961933FD9306235B4CEFFC3C108F44
Authority key identifier: BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33372e302f32342d3234203d3e20323636313532.roa
Signing time:             Wed 01 Mar 2023 18:25:20 +0000
ROA not before:           Wed 01 Mar 2023 18:20:20 +0000
ROA not after:            Wed 28 Feb 2024 18:25:20 +0000
asID:                     266152
IP address blocks:        45.6.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:af:f5:5a:e7:96:19:33:fd:93:06:23:5b:4c:ef:fc:3c:10:8f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
        Validity
            Not Before: Mar  1 18:20:20 2023 GMT
            Not After : Feb 28 18:25:20 2024 GMT
        Subject: CN=AF79C7AA7DC99F7099816F73C3F3D65EA6BEFCA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:d5:df:44:b7:7b:8b:76:26:b6:ab:ab:28:
                    bd:06:fb:4f:ce:b4:8e:a6:e6:17:33:e2:45:29:c5:
                    62:60:a4:05:b1:47:49:3e:76:35:19:8b:83:b3:fa:
                    52:f1:48:7f:b8:0b:17:e9:dc:03:98:ed:19:2c:29:
                    50:b5:d7:13:9c:87:0a:2c:60:ec:70:f9:62:59:b0:
                    fc:9d:e8:73:15:7f:ef:b0:55:b4:72:de:69:68:20:
                    a1:67:c8:17:0f:88:05:f7:e4:9f:0b:e0:14:b1:1b:
                    67:d9:a2:f5:97:84:c4:43:b2:ef:b7:ba:7c:71:c5:
                    40:e7:4e:36:e4:fd:95:da:b2:ba:a0:87:d0:8e:6c:
                    de:f2:c5:be:94:eb:dd:a4:5b:4a:db:33:eb:63:cf:
                    6c:fd:b3:a1:ec:1b:29:7c:5a:76:0a:50:86:4e:d6:
                    4b:f8:4c:a6:e1:ed:95:1e:93:34:70:00:cc:3b:cc:
                    04:42:2f:af:2f:c1:59:ea:1e:86:b4:e6:4a:35:73:
                    f6:f1:92:97:49:4b:d5:e4:b7:de:55:60:f4:48:5f:
                    bb:17:69:cf:c3:70:23:19:06:29:dd:9e:35:3b:a8:
                    37:74:a1:9c:c2:cb:e0:4d:fa:bc:cc:10:f3:fb:46:
                    c4:c0:24:d7:97:d3:72:16:fd:f3:05:06:a0:5d:a3:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:79:C7:AA:7D:C9:9F:70:99:81:6F:73:C3:F3:D6:5E:A6:BE:FC:A8
            X509v3 Authority Key Identifier:
                keyid:BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33372e302f32342d3234203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:d3:58:27:d0:4f:2e:f5:a3:fb:da:72:7d:36:14:dd:6c:
         b1:01:1f:d8:f2:31:88:aa:4d:95:bb:76:a4:4e:e5:81:26:30:
         ee:ad:1a:55:84:5d:7d:7d:ad:aa:3a:d7:45:ab:9c:03:24:02:
         0d:97:95:70:59:fd:26:9c:9c:e4:10:16:65:a8:66:19:79:f9:
         4e:65:77:9e:16:78:0d:72:6a:cd:16:88:23:91:dc:03:f7:34:
         01:53:c3:96:cd:eb:50:32:51:b4:ef:3f:e8:e0:66:c6:2e:99:
         b1:80:06:c1:38:03:55:be:82:a9:eb:b2:0b:c5:56:be:04:f3:
         f2:3c:24:60:9f:54:9c:f4:80:2d:da:57:eb:51:58:da:9f:d3:
         54:7e:60:76:fe:40:5d:27:eb:41:4d:38:6c:a2:1e:c8:70:6d:
         eb:a7:83:09:18:b9:4f:71:25:8f:87:d3:22:ee:2f:c7:8e:00:
         d4:92:77:b1:33:bb:2a:4d:f3:2f:65:ae:f4:35:db:99:f0:c8:
         4c:3c:ac:97:92:4b:9c:36:3e:d9:35:5d:35:81:9b:91:5f:7c:
         18:a5:2d:50:ef:cd:f4:77:11:e5:ab:c1:86:8b:0f:fd:86:bb:
         c4:0e:1a:0c:25:46:8d:08:14:0b:ac:ff:74:0c:c6:c1:b1:7b:
         21:8e:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 09:37:00 2025 by rpki-client