Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134342e302f32342d3234203d3e20323638313937.roa
File:                     34352e3233352e3134342e302f32342d3234203d3e20323638313937.roa (raw, json)
Hash identifier:          BeLJ0z2hO6xCeEkgdggp6OGgkmTeWw+UF+XggwcvR7M=
Subject key identifier:   10:AE:93:95:C7:BC:7B:D6:A9:A3:6B:B4:2C:C7:EF:09:DA:5C:85:EA
Certificate issuer:       /CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
Certificate serial:       1B055F4A849379217ECAC2792338460A8C638FAD
Authority key identifier: BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134342e302f32342d3234203d3e20323638313937.roa
Signing time:             Mon 02 Dec 2024 22:55:55 +0000
ROA not before:           Mon 02 Dec 2024 22:50:55 +0000
ROA not after:            Mon 01 Dec 2025 22:55:55 +0000
asID:                     268197
IP address blocks:        45.235.144.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:05:5f:4a:84:93:79:21:7e:ca:c2:79:23:38:46:0a:8c:63:8f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
        Validity
            Not Before: Dec  2 22:50:55 2024 GMT
            Not After : Dec  1 22:55:55 2025 GMT
        Subject: CN=10AE9395C7BC7BD6A9A36BB42CC7EF09DA5C85EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:b1:23:20:67:0e:f7:a3:1b:83:81:fa:47:
                    24:b0:56:e6:52:e1:a1:da:f5:0d:a3:29:17:c7:5f:
                    7d:9e:3e:d7:6f:60:82:72:d5:4d:01:e9:72:5b:6a:
                    25:a4:ed:06:07:e6:03:be:3a:15:1e:2d:e0:80:e3:
                    27:ae:06:25:78:35:e5:5d:b3:3f:42:30:b6:9d:f6:
                    c1:ee:17:5b:3a:38:d1:81:35:55:b9:3a:6c:a4:84:
                    df:ab:fb:49:11:f8:f4:53:f1:5f:57:7a:e1:97:34:
                    6a:1f:01:24:98:41:c6:37:6c:15:3d:9c:cf:af:a6:
                    35:5f:e7:36:bb:ca:c7:6c:42:87:67:42:15:59:b5:
                    08:bb:10:38:4d:7a:67:9f:f7:5a:a8:36:99:01:d7:
                    ea:28:21:56:a8:1d:ff:e2:4f:1e:5f:e1:5e:33:4f:
                    41:77:65:0d:8d:a7:83:bf:fc:57:8f:a0:e4:fa:4f:
                    af:83:c6:fe:44:f8:a1:7d:5f:f0:34:0a:c7:7d:a4:
                    95:0a:4b:03:e7:25:2b:53:f1:fc:ae:9f:36:f4:6c:
                    37:0a:f2:4e:8f:ae:8c:44:60:89:0f:94:cf:cd:68:
                    27:b3:1a:67:3b:68:37:7d:76:45:d6:6a:97:ad:ab:
                    4f:29:0b:a0:14:c2:7c:29:92:be:8c:f1:db:99:ec:
                    55:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AE:93:95:C7:BC:7B:D6:A9:A3:6B:B4:2C:C7:EF:09:DA:5C:85:EA
            X509v3 Authority Key Identifier:
                keyid:BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/BDFF256F0AD0E81FD186456828CFF572637DF2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134342e302f32342d3234203d3e20323638313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:95:95:64:e2:2c:7f:16:bb:16:9c:41:2e:2e:fd:f6:10:15:
         5e:e2:5e:c1:8e:c2:20:61:f4:c6:49:08:25:a0:0b:5c:81:f1:
         7b:01:e8:84:81:1d:56:e1:7f:9b:99:f4:15:80:5d:0a:66:7e:
         2b:50:5d:30:ac:85:3b:d8:2b:d4:cd:7e:6a:07:be:3f:6d:dd:
         cc:e0:9b:06:11:0a:a9:03:3a:4b:e6:52:73:be:95:91:0c:27:
         1e:31:87:0c:ae:cb:b2:cb:28:ed:f7:16:d3:6d:95:2d:45:d5:
         15:c2:26:23:cb:7e:74:b7:32:56:77:b2:d2:f0:88:44:57:d4:
         78:0b:b1:b2:58:54:cc:54:76:9d:12:3c:32:43:78:44:7e:e1:
         dc:0a:93:eb:af:8f:5b:21:a8:f5:40:7f:17:c1:dd:57:28:3e:
         22:43:d3:32:28:63:fe:36:59:98:e1:f1:a5:a4:3f:22:05:16:
         3a:90:f0:85:40:2c:3f:f3:68:83:49:7e:ae:26:8f:6e:7d:bc:
         3d:de:01:15:b3:5a:7b:b6:cf:e5:06:34:41:8a:9a:0f:a0:7a:
         90:3c:ae:e0:77:93:b9:91:a9:f1:b5:2a:74:28:e5:8b:05:8f:
         aa:bf:9b:1f:b8:8b:2d:12:a0:70:7d:32:4b:a2:8c:72:5e:c4:
         66:fa:d1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:35:20 2025 by rpki-client