Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32332d3233203d3e20323637343039.roa
File:                     34352e3136362e3130342e302f32332d3233203d3e20323637343039.roa (raw, json)
Hash identifier:          039KQt15v6OsV5iWV0V98c5l6FvqhIfDBWHUeZbJ/1I=
Subject key identifier:   F8:B4:34:66:FB:B8:47:63:50:18:9A:E0:8C:45:78:AF:01:C8:35:D6
Certificate issuer:       /CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
Certificate serial:       52717C882F359E8C96CCF260E9C8680EFAF79F08
Authority key identifier: 91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32332d3233203d3e20323637343039.roa
Signing time:             Fri 21 Feb 2025 13:45:14 +0000
ROA not before:           Fri 21 Feb 2025 13:40:14 +0000
ROA not after:            Fri 20 Feb 2026 13:45:14 +0000
asID:                     267409
IP address blocks:        45.166.104.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:71:7c:88:2f:35:9e:8c:96:cc:f2:60:e9:c8:68:0e:fa:f7:9f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
        Validity
            Not Before: Feb 21 13:40:14 2025 GMT
            Not After : Feb 20 13:45:14 2026 GMT
        Subject: CN=F8B43466FBB8476350189AE08C4578AF01C835D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:cf:e5:43:19:ec:6f:52:bd:c0:c0:78:7a:
                    1b:41:0c:6b:a7:ec:0c:a1:6d:56:fe:e1:04:49:cb:
                    86:fe:b0:fe:7d:42:c7:48:fa:f2:37:d3:c1:15:53:
                    92:86:bc:a3:8d:b1:46:56:6a:43:6a:80:dd:af:55:
                    36:58:5b:5a:f0:0c:ed:a7:26:01:a4:39:16:a3:a3:
                    6e:7c:78:fc:0f:91:28:52:f8:80:9c:9e:d1:10:e3:
                    17:fa:46:b2:b2:43:a5:07:c5:a9:c2:51:c1:a3:e0:
                    78:80:c0:5f:6a:6e:48:3f:92:ef:b0:7c:aa:31:81:
                    45:23:a5:e8:45:12:09:5f:c4:b5:8c:e8:f8:f7:b7:
                    7b:08:c7:cd:8e:39:bf:9a:2e:93:87:a8:f1:a3:e7:
                    54:b5:4f:86:f3:93:fd:ef:2e:87:eb:c2:9e:7f:0a:
                    1a:9b:bb:94:a7:05:6d:97:76:10:dc:f4:3b:96:ec:
                    84:f5:af:eb:93:3a:48:f8:d7:86:29:e0:41:78:e7:
                    c3:e9:f5:08:89:0d:50:c1:cb:65:cd:e2:e1:89:64:
                    26:2e:61:b4:13:c5:cb:ac:30:6d:b8:b9:5f:c6:0e:
                    d3:28:d4:58:6c:b8:8c:31:8f:b7:b9:c7:1e:26:be:
                    a3:7e:db:6b:42:1f:b5:75:30:67:a8:3c:6d:6e:eb:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B4:34:66:FB:B8:47:63:50:18:9A:E0:8C:45:78:AF:01:C8:35:D6
            X509v3 Authority Key Identifier:
                keyid:91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32332d3233203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:40:9d:e9:55:55:56:97:06:6c:e2:85:d7:d1:33:f6:b5:1f:
         64:eb:c0:7f:0d:1b:92:5a:7e:b8:99:7d:00:57:e7:11:70:41:
         32:c3:06:37:ba:aa:61:cd:2c:0d:44:6b:56:b0:71:14:10:e3:
         03:21:36:dd:47:07:94:64:c8:0c:a3:44:6b:61:91:cd:d8:e2:
         2d:7d:03:9f:dc:66:c0:69:bb:e3:73:50:09:4b:b8:ff:d5:7f:
         b3:84:b0:eb:72:b3:11:f9:c0:e7:ab:b7:38:8a:55:03:73:25:
         06:84:ca:51:d5:8b:1e:bb:11:ed:1a:23:39:0b:36:df:76:72:
         ae:07:47:a0:6d:3a:29:0a:08:e5:9b:0e:eb:c4:c7:2f:a6:b5:
         79:d9:a0:31:2f:3a:e4:71:98:81:ac:21:7e:e1:6c:e3:5e:25:
         66:68:00:f5:31:8f:5e:ba:6f:bc:59:67:00:81:07:57:19:6f:
         80:2f:59:74:09:5d:cb:16:ec:6f:a3:e1:65:28:67:ca:9b:11:
         71:6b:55:d6:14:20:7c:c4:bb:59:1a:0a:ba:df:61:7a:6e:06:
         2e:4b:c5:c6:31:7e:b4:71:d6:d6:b3:e8:6e:ad:82:f6:0e:1c:
         7d:50:f9:fb:23:e4:3e:bb:a8:97:90:8f:56:6a:b2:e9:4e:81:
         38:be:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:30 2025 by rpki-client