Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134352e302f32342d3234203d3e20323638313937.roa
File:                     34352e3233352e3134352e302f32342d3234203d3e20323638313937.roa (raw, json)
Hash identifier:          l+t5s7NHRWHvLcxItZXEoMXhjRPEENml7llyOPPzIqs=
Subject key identifier:   5D:45:2C:04:4D:8B:8A:AB:41:2E:B8:17:24:ED:06:D7:68:26:DA:31
Certificate issuer:       /CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
Certificate serial:       62644F6405D28034528533F2149BE84787D8FDC9
Authority key identifier: BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134352e302f32342d3234203d3e20323638313937.roa
Signing time:             Mon 02 Dec 2024 22:55:54 +0000
ROA not before:           Mon 02 Dec 2024 22:50:54 +0000
ROA not after:            Mon 01 Dec 2025 22:55:54 +0000
asID:                     268197
IP address blocks:        45.235.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:64:4f:64:05:d2:80:34:52:85:33:f2:14:9b:e8:47:87:d8:fd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
        Validity
            Not Before: Dec  2 22:50:54 2024 GMT
            Not After : Dec  1 22:55:54 2025 GMT
        Subject: CN=5D452C044D8B8AAB412EB81724ED06D76826DA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:5d:c5:0d:ab:b9:eb:9e:01:cf:81:20:3c:
                    f3:15:a2:c2:4c:3e:08:a6:bd:45:b4:9b:92:3b:cb:
                    05:45:39:e7:d8:42:2a:11:f9:9c:23:4b:bc:77:88:
                    4d:51:8e:5c:32:f1:af:e2:da:39:7e:f0:fc:03:02:
                    da:e0:ec:2c:de:0c:56:10:85:81:c4:51:a7:73:ff:
                    ff:f2:4a:3a:f2:a8:f1:5d:88:d4:ef:1e:14:7d:c8:
                    e2:1e:0b:dd:de:b3:5e:cf:fa:4b:ff:8e:9a:66:aa:
                    b0:e0:41:8d:55:34:8e:9a:53:a8:9c:e5:f2:3c:48:
                    36:15:77:00:9e:f0:aa:f6:1a:fa:2b:33:23:b0:9b:
                    63:95:e8:bf:4c:df:32:cb:91:cb:19:46:0b:95:08:
                    e1:8a:38:fb:71:fc:dd:a7:27:4e:78:2a:79:ab:82:
                    fc:e6:ea:92:01:3a:55:9a:2d:71:03:7e:a1:4d:54:
                    c4:36:fc:a5:29:6f:86:a3:14:42:3f:4c:d2:9f:d7:
                    20:85:9f:7f:ff:24:b9:c8:64:1b:c5:9e:92:56:00:
                    94:ef:03:ba:5a:90:2a:26:d5:64:ed:d8:e2:da:6e:
                    a4:f5:c8:52:6b:bf:06:0d:d9:a4:1d:7d:5a:5a:7a:
                    71:ec:bf:3f:8b:8c:49:de:c0:7e:e8:68:74:83:c8:
                    6e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:45:2C:04:4D:8B:8A:AB:41:2E:B8:17:24:ED:06:D7:68:26:DA:31
            X509v3 Authority Key Identifier:
                keyid:BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/BDFF256F0AD0E81FD186456828CFF572637DF2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134352e302f32342d3234203d3e20323638313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d9:63:da:22:0b:20:9f:ff:02:fa:1b:71:9e:08:55:38:18:
         ba:b7:5a:24:92:4f:db:57:06:e0:8a:fd:2b:ce:59:ea:39:c2:
         a7:8f:01:33:c2:f3:68:5e:00:1f:ea:bc:47:70:95:08:25:7b:
         f2:17:91:0b:8e:f7:08:45:bb:f1:3e:88:8c:09:cc:0f:92:90:
         82:df:6c:a9:43:1d:6a:98:e4:62:10:d9:c5:04:37:f5:7c:94:
         e2:cb:11:40:70:6b:b8:19:86:34:a6:fb:66:3d:18:67:7e:a7:
         52:fb:27:89:81:ce:e1:05:17:3b:3f:0e:ea:f1:e8:3e:ca:cf:
         3d:86:88:86:bf:3d:e2:78:da:2c:6b:bc:cb:ed:6f:49:f5:27:
         12:2d:28:3a:c0:a2:5a:66:fa:42:7a:eb:aa:05:78:9e:99:42:
         e0:bf:80:5e:73:fe:1c:de:36:53:48:c5:a1:1b:e2:f4:a8:d1:
         47:30:de:8b:a3:7e:31:b9:39:83:61:4e:89:ff:8c:89:b0:fa:
         70:64:6a:0f:7c:6a:bc:b1:11:b5:f8:99:66:ee:40:3a:ae:57:
         b0:c3:86:d3:48:86:58:bd:ca:11:19:ae:2c:c7:4b:c4:55:29:
         44:38:78:ab:91:0b:68:a4:af:23:13:52:10:78:89:2a:58:21:
         d8:3b:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:36:02 2025 by rpki-client