Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32322d3332203d3e20323637343039.roa
File:                     34352e3136362e3130342e302f32322d3332203d3e20323637343039.roa (raw, json)
Hash identifier:          Hol6yTjenap3Ca+GpOMwPXCwgjnE/BqdXAkXWxlW/cI=
Subject key identifier:   92:56:85:C1:26:D5:50:24:9C:4A:4E:B6:CC:3C:CC:E6:FC:50:47:42
Certificate issuer:       /CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
Certificate serial:       6DBE73598E5E9DF5E527C0949FD68ADE2A469751
Authority key identifier: 52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32322d3332203d3e20323637343039.roa
Signing time:             Mon 17 Feb 2025 18:08:28 +0000
ROA not before:           Mon 17 Feb 2025 18:03:28 +0000
ROA not after:            Mon 16 Feb 2026 18:08:28 +0000
asID:                     267409
IP address blocks:        45.166.104.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:be:73:59:8e:5e:9d:f5:e5:27:c0:94:9f:d6:8a:de:2a:46:97:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
        Validity
            Not Before: Feb 17 18:03:28 2025 GMT
            Not After : Feb 16 18:08:28 2026 GMT
        Subject: CN=925685C126D550249C4A4EB6CC3CCCE6FC504742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9d:91:33:ba:5e:4b:4a:6f:45:79:82:bc:37:
                    f2:a1:b2:4b:ae:75:59:64:4a:d8:cb:2b:18:30:d2:
                    69:75:f2:77:9c:79:fa:e0:32:6c:a3:7f:24:55:aa:
                    da:22:05:36:30:ff:fe:18:9d:3b:16:40:17:f1:e4:
                    4a:78:fa:5e:c8:05:52:e4:d7:fa:9e:99:13:34:96:
                    65:26:ec:18:c0:0a:5c:77:11:a1:9a:6d:53:2d:0b:
                    ad:78:3b:b5:2b:c1:bd:ff:f5:3a:8d:7f:77:aa:02:
                    2f:f8:b5:44:a3:cd:43:56:f8:2f:57:b0:73:9f:ec:
                    e9:a9:f6:6b:38:f5:0b:84:06:ee:0c:33:64:21:d9:
                    26:f7:d9:6d:3f:c3:a7:33:24:e9:22:99:81:91:90:
                    3c:39:29:0f:bc:91:e7:1c:3d:f9:ab:b6:2a:54:ab:
                    42:bd:f5:f6:3e:d6:bb:bf:0b:e5:36:2e:f9:9d:4c:
                    dd:4a:62:17:85:56:63:7e:eb:44:40:d4:f4:8d:00:
                    41:50:0a:b8:a1:b8:66:04:21:ad:7d:84:09:04:d8:
                    ea:45:c8:01:25:7d:53:d3:2a:c9:32:53:2a:25:95:
                    fe:91:bf:a4:a0:60:60:9d:8b:69:1b:e0:34:c5:f3:
                    b4:5d:3d:69:e8:7c:fb:d9:d3:fc:59:79:46:fd:77:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:56:85:C1:26:D5:50:24:9C:4A:4E:B6:CC:3C:CC:E6:FC:50:47:42
            X509v3 Authority Key Identifier:
                keyid:52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32322d3332203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:93:7c:2f:b3:02:04:1f:61:89:8e:af:d7:f9:62:e7:e2:8d:
         4a:ad:c6:d8:79:f2:3f:07:79:d1:38:d5:5c:26:ab:d7:2d:9a:
         6d:54:67:d4:92:55:09:b1:9b:ca:dd:69:6d:aa:ce:c5:57:3d:
         3d:8f:aa:05:b0:87:ad:bf:bd:a0:85:d4:3b:4e:aa:29:03:87:
         2e:f2:4e:98:a0:10:21:49:3b:04:ad:d1:ba:bd:e6:07:f2:57:
         60:d7:72:fe:ac:65:6c:7f:0d:39:dc:c2:b7:ac:a4:69:cc:3c:
         92:3b:3b:cd:49:cd:fd:1d:91:f0:14:14:b4:d8:89:c6:f0:b9:
         f7:2c:ef:17:e2:52:0a:1e:3f:f0:c9:1a:25:0e:ac:df:52:95:
         b5:6a:80:e7:19:7d:6e:4f:79:f3:50:14:81:65:2f:1b:b8:ab:
         2a:1b:22:6e:b1:a2:11:45:55:75:94:e1:99:7d:a8:95:f0:b1:
         88:a4:71:23:4d:6b:14:eb:5c:91:ee:56:5b:7b:f2:83:28:69:
         9c:d4:ec:13:26:be:4e:a3:25:e8:f6:16:f3:92:92:6b:42:01:
         2e:d2:b6:e8:7f:f6:60:8a:b3:40:29:3c:ea:2d:08:d3:64:67:
         e1:bd:43:f1:9f:99:fe:92:61:11:52:35:bf:f2:ed:95:50:18:
         45:df:e2:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbb5zWY5enfXlJ8CUn9aK3ipGl1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJFM0E3MjhBRTZDQ0ExQ0VCNjg2QUZEMjgxNjY2MjRC
MTUyOUNGNTAeFw0yNTAyMTcxODAzMjhaFw0yNjAyMTYxODA4MjhaMDMxMTAvBgNV
BAMTKDkyNTY4NUMxMjZENTUwMjQ5QzRBNEVCNkNDM0NDQ0U2RkM1MDQ3NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDynZEzul5LSm9FeYK8N/Khskuu
dVlkStjLKxgw0ml18necefrgMmyjfyRVqtoiBTYw//4YnTsWQBfx5Ep4+l7IBVLk
1/qemRM0lmUm7BjAClx3EaGabVMtC614O7Urwb3/9TqNf3eqAi/4tUSjzUNW+C9X
sHOf7Omp9ms49QuEBu4MM2Qh2Sb32W0/w6czJOkimYGRkDw5KQ+8keccPfmrtipU
q0K99fY+1ru/C+U2LvmdTN1KYheFVmN+60RA1PSNAEFQCrihuGYEIa19hAkE2OpF
yAElfVPTKskyUyollf6Rv6SgYGCdi2kb4DTF87RdPWnofPvZ0/xZeUb9d3sNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUklaFwSbVUCScSk62zDzM5vxQR0IwHwYDVR0j
BBgwFoAUUuOnKK5syhzraGr9KBZmJLFSnPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkpDNGRmaVNKVURoR0hWc2tYb2tWMXZ4U0toQ1V4Y1c1U25mSmhEaFZT
SFAvMC81MkUzQTcyOEFFNkNDQTFDRUI2ODZBRkQyODE2NjYyNEIxNTI5Q0Y1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRTNBNzI4QUU2Q0NBMUNF
QjY4NkFGRDI4MTY2NjI0QjE1MjlDRjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JKQzRkZmlTSlVEaEdIVnNrWG9rVjF2eFNLaENVeGNXNVNuZkpoRGhWU0hQLzAv
MzQzNTJlMzEzNjM2MmUzMTMwMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzczNDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpmgwDQYJKoZIhvcNAQELBQADggEBAECTfC+z
AgQfYYmOr9f5YufijUqtxth58j8HedE41Vwmq9ctmm1UZ9SSVQmxm8rdaW2qzsVX
PT2PqgWwh62/vaCF1DtOqikDhy7yTpigECFJOwSt0bq95gfyV2DXcv6sZWx/DTnc
wrespGnMPJI7O81Jzf0dkfAUFLTYicbwufcs7xfiUgoeP/DJGiUOrN9SlbVqgOcZ
fW5PefNQFIFlLxu4qyobIm6xohFFVXWU4Zl9qJXwsYikcSNNaxTrXJHuVlt78oMo
aZzU7BMmvk6jJej2FvOSkmtCAS7Stuh/9mCKs0ApPOotCNNkZ+G9Q/Gfmf6SYRFS
Nb/y7ZVQGEXf4o0=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:11:09 2025 by rpki-client