Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33392e302f32342d3234203d3e20323636313532.roa
File:                     34352e362e33392e302f32342d3234203d3e20323636313532.roa (raw, json)
Hash identifier:          AFNkHHY7m8YU7fIB89/6pBWPsQkr3RGD01qeg5YzY3c=
Subject key identifier:   FA:86:CC:C3:F9:10:5E:76:04:AD:6F:14:B6:8E:2C:29:31:E7:D8:B9
Certificate issuer:       /CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
Certificate serial:       05D4FC72B81848F0F8F391D6D90F5F67C9200DB9
Authority key identifier: BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33392e302f32342d3234203d3e20323636313532.roa
Signing time:             Wed 01 Mar 2023 18:25:25 +0000
ROA not before:           Wed 01 Mar 2023 18:20:25 +0000
ROA not after:            Wed 28 Feb 2024 18:25:25 +0000
asID:                     266152
IP address blocks:        45.6.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d4:fc:72:b8:18:48:f0:f8:f3:91:d6:d9:0f:5f:67:c9:20:0d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
        Validity
            Not Before: Mar  1 18:20:25 2023 GMT
            Not After : Feb 28 18:25:25 2024 GMT
        Subject: CN=FA86CCC3F9105E7604AD6F14B68E2C2931E7D8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:7f:df:8c:a4:e8:44:27:12:79:f1:f0:ac:
                    7f:f7:b7:9a:08:e7:e7:02:ca:3b:d3:19:ea:15:fa:
                    53:ae:ce:28:32:e4:de:67:ba:3f:08:34:05:13:5e:
                    bb:06:c0:56:b4:87:db:16:9c:3e:cb:e0:a6:ac:b0:
                    f1:2a:3f:aa:c1:df:1a:6b:da:9d:db:ec:84:fd:a7:
                    75:89:89:f5:4c:d9:e7:31:eb:b2:4a:bf:46:8f:75:
                    26:89:db:94:37:34:8a:c1:4e:ea:78:23:3a:2d:7f:
                    64:65:87:4a:61:08:aa:e2:9a:06:20:ba:4a:bd:6d:
                    63:df:6a:14:cb:b3:90:31:6a:80:a2:77:f2:09:0b:
                    15:5e:17:d2:26:e3:a2:bd:39:13:7c:93:89:b1:a5:
                    3f:40:c3:30:a8:69:34:1c:fd:f9:c0:27:2d:29:57:
                    09:ed:94:73:63:de:c0:93:0a:b0:5a:8e:9e:03:66:
                    69:c6:63:dc:fb:17:4f:90:c1:d9:ac:36:bb:9e:77:
                    72:b3:c0:85:d1:a2:3c:cb:cb:73:68:06:53:6c:21:
                    c0:e0:78:24:70:1d:80:93:5f:1a:1e:78:5d:cb:6a:
                    54:ad:82:ed:9e:49:95:cc:85:e6:2f:a2:58:b3:8f:
                    c9:5b:1a:65:e0:e7:aa:61:f3:86:65:e2:a0:ba:65:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:86:CC:C3:F9:10:5E:76:04:AD:6F:14:B6:8E:2C:29:31:E7:D8:B9
            X509v3 Authority Key Identifier:
                keyid:BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33392e302f32342d3234203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:91:5e:5f:78:ba:02:cd:93:ca:ba:47:56:c0:b8:4b:9c:54:
         12:92:8c:06:48:26:2c:e3:4f:ad:d7:82:6f:a2:fd:76:c1:f2:
         c4:c9:76:ae:54:4f:ce:94:8f:93:b8:cb:39:e5:76:73:48:00:
         5b:9e:46:f7:91:48:4e:dd:8f:df:ca:f5:ec:b7:e7:a6:3d:55:
         0d:12:fe:44:c0:65:38:15:e5:02:06:75:55:d3:65:2e:0b:60:
         35:20:fe:dc:3b:46:55:8f:2f:14:41:2a:88:9a:92:54:b4:15:
         77:b0:96:71:4f:d9:32:6d:4b:cf:c2:55:fb:82:49:29:86:00:
         a6:44:d5:50:e6:94:9c:8c:7c:e5:06:2a:13:55:f0:48:f7:f1:
         52:fd:60:f7:cd:86:1b:bc:65:04:51:56:88:48:9e:79:33:ce:
         d9:f0:dd:c6:f5:d9:74:6e:4c:4c:de:7f:d3:59:86:79:c2:4c:
         5b:1b:82:10:2a:75:73:40:20:06:bd:9c:e1:7e:63:31:cd:ee:
         8f:20:66:6a:ff:24:76:71:db:cf:ad:e2:49:96:f3:63:9d:c1:
         54:a4:2f:98:fa:25:21:42:84:3c:09:26:68:b4:13:83:0e:da:
         15:ec:46:ff:89:bf:64:47:1f:5b:22:af:9a:cc:0e:ac:67:69:
         e2:99:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 09:20:56 2025 by rpki-client