Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130362e302f32332d3233203d3e20323637343039.roa
File:                     34352e3136362e3130362e302f32332d3233203d3e20323637343039.roa (raw, json)
Hash identifier:          BNBy3DqDkDhBuXmM9JM68EvmpjOlqb2XmSM2hdvE/jc=
Subject key identifier:   3A:39:1E:C0:AE:F1:2E:A3:53:9B:49:81:87:7F:53:AF:94:BD:5D:DF
Certificate issuer:       /CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
Certificate serial:       27FD6A0CF88AE37E01CF88776B24A922A3E19C6A
Authority key identifier: 91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130362e302f32332d3233203d3e20323637343039.roa
Signing time:             Fri 21 Feb 2025 13:45:18 +0000
ROA not before:           Fri 21 Feb 2025 13:40:18 +0000
ROA not after:            Fri 20 Feb 2026 13:45:18 +0000
asID:                     267409
IP address blocks:        45.166.106.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:fd:6a:0c:f8:8a:e3:7e:01:cf:88:77:6b:24:a9:22:a3:e1:9c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
        Validity
            Not Before: Feb 21 13:40:18 2025 GMT
            Not After : Feb 20 13:45:18 2026 GMT
        Subject: CN=3A391EC0AEF12EA3539B4981877F53AF94BD5DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:eb:b2:87:d2:0c:59:1e:cf:a8:f0:8c:f0:4b:
                    f6:fb:ae:22:3a:9f:bb:65:e5:70:7c:43:c8:dc:78:
                    29:ba:4f:8f:fe:79:89:45:1a:17:8a:cf:c2:2c:37:
                    96:bb:d4:1c:bb:33:30:68:75:32:c0:d9:fd:27:d7:
                    c4:a9:27:8c:6b:a3:74:49:da:1a:21:88:c4:2b:b4:
                    e7:92:58:13:d3:55:a9:63:c8:9f:37:9b:f3:25:9f:
                    95:c9:d1:c3:1c:89:41:30:9e:c7:4c:28:60:58:f1:
                    01:25:e0:dc:9d:39:48:26:20:91:a2:ff:a1:c7:e1:
                    73:33:0a:ab:ef:68:98:6b:ae:d0:0e:11:bc:1f:01:
                    b5:cc:03:ab:07:66:52:a7:ba:ac:61:43:97:d6:05:
                    3b:3f:c5:c8:65:a5:ba:b0:2a:7c:58:7f:63:33:47:
                    95:6b:c2:85:14:ab:f0:da:87:9e:12:eb:40:92:42:
                    af:e1:dd:5e:38:99:79:6d:ae:e9:07:62:d3:3f:ef:
                    77:60:88:e1:98:84:0c:3c:76:f0:c7:1b:3c:79:b8:
                    9f:57:66:b4:3e:e0:aa:68:65:51:94:08:fc:c9:ab:
                    a6:38:c0:72:ab:2a:bc:94:a4:ec:3c:fe:33:a1:e5:
                    9f:43:a6:c7:c2:4e:65:be:2a:66:b6:9c:bb:74:a8:
                    8f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:39:1E:C0:AE:F1:2E:A3:53:9B:49:81:87:7F:53:AF:94:BD:5D:DF
            X509v3 Authority Key Identifier:
                keyid:91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130362e302f32332d3233203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:82:0c:fa:b8:15:e8:eb:76:7c:99:83:7c:da:6d:a0:ff:
         ab:d6:fa:2c:a1:b9:4f:a5:0e:8f:7e:ea:eb:ed:d3:7e:9f:f9:
         a9:16:f6:6b:a5:12:a3:7f:c1:33:ae:d8:d8:24:68:73:11:3d:
         99:d8:5b:df:63:43:92:a2:31:16:2b:d7:df:58:a5:7e:bf:2c:
         d9:15:d5:78:4a:60:a3:06:58:ec:d5:f9:db:64:46:be:8b:a4:
         a2:14:3b:52:5d:97:01:3b:34:f1:2a:12:1c:d5:ce:d9:65:8c:
         ea:0e:11:13:66:fb:18:1b:02:64:c6:13:f0:59:93:15:ba:b1:
         b8:6f:14:84:5b:e2:e3:57:a2:01:b3:40:09:bf:00:d1:dd:e9:
         bb:51:ab:39:d6:46:4b:05:d4:21:a2:0b:0f:86:8b:78:d2:6d:
         bc:bc:c3:65:c5:0d:5b:2b:6e:3c:d4:3d:b7:d5:18:3f:56:f1:
         ab:ef:20:09:6e:4f:22:ab:72:06:36:f9:4d:99:70:63:5e:5d:
         76:5e:44:e7:d2:f3:cb:ba:82:98:91:03:7d:51:58:3f:7c:4f:
         47:7e:07:7f:02:43:6c:6a:c9:3c:f3:6d:2b:64:f6:63:64:34:
         df:b1:56:37:c1:66:94:2b:eb:b8:53:eb:45:0c:b0:16:5d:1d:
         12:90:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:13:30 2025 by rpki-client