Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134362e302f32332d3233203d3e20323638313937.roa
File:                     34352e3233352e3134362e302f32332d3233203d3e20323638313937.roa (raw, json)
Hash identifier:          T9xedo83N3DdNlbfRT+P6XLtPwq6qVPHKtxrUVSMqxg=
Subject key identifier:   F0:2E:D2:2E:48:59:E6:04:4C:52:58:7B:DF:3B:26:1C:7C:3F:3A:44
Certificate issuer:       /CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
Certificate serial:       2733BCB53CAB3113AA590212BDCBE04A925BD991
Authority key identifier: BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134362e302f32332d3233203d3e20323638313937.roa
Signing time:             Mon 02 Dec 2024 22:55:55 +0000
ROA not before:           Mon 02 Dec 2024 22:50:55 +0000
ROA not after:            Mon 01 Dec 2025 22:55:55 +0000
asID:                     268197
IP address blocks:        45.235.146.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:33:bc:b5:3c:ab:31:13:aa:59:02:12:bd:cb:e0:4a:92:5b:d9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
        Validity
            Not Before: Dec  2 22:50:55 2024 GMT
            Not After : Dec  1 22:55:55 2025 GMT
        Subject: CN=F02ED22E4859E6044C52587BDF3B261C7C3F3A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:8b:fd:83:5e:73:2f:05:93:f9:11:ab:33:
                    82:50:60:b9:56:79:af:a3:5f:bc:a1:e1:b5:ea:73:
                    16:ad:09:0b:a7:0e:84:fa:d9:de:7c:11:b9:3e:aa:
                    d1:c9:d3:55:0d:e9:13:c7:99:c5:75:46:a9:ee:35:
                    28:01:23:00:5c:38:63:0f:81:6f:14:70:58:09:2e:
                    d7:0e:8d:08:57:a6:ad:3e:76:74:4c:16:cd:6a:5a:
                    c7:35:08:cd:b0:05:db:5b:3b:0a:fe:6d:9d:fd:ea:
                    bc:48:92:ef:91:aa:66:d4:3a:da:cd:82:b1:47:42:
                    80:9b:bf:04:49:4b:f5:a9:93:15:1d:62:1b:f9:19:
                    86:b8:25:56:8d:3f:dd:d2:5d:0e:33:b5:1d:d0:77:
                    64:98:d2:59:22:94:91:e4:94:13:26:06:17:77:1e:
                    8c:7d:f9:93:fa:cd:c0:4c:bc:5a:59:b0:73:a6:89:
                    2e:f3:d6:2c:b0:8d:fd:4b:87:09:6a:49:bc:58:83:
                    25:75:e1:2c:4d:11:f4:54:22:54:ff:a5:9b:79:7c:
                    89:f8:2c:37:ec:a7:81:53:5b:3a:66:db:9b:c5:c9:
                    d7:d6:85:48:5a:33:30:df:a5:6e:76:1d:19:75:5e:
                    c8:e8:ca:0b:2f:cc:ce:d9:50:ba:01:d7:18:bf:22:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2E:D2:2E:48:59:E6:04:4C:52:58:7B:DF:3B:26:1C:7C:3F:3A:44
            X509v3 Authority Key Identifier:
                keyid:BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/BDFF256F0AD0E81FD186456828CFF572637DF2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134362e302f32332d3233203d3e20323638313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:23:30:44:79:a9:f2:c0:cb:f5:aa:f8:72:4e:ae:08:de:a5:
         c4:7d:ee:e4:64:22:ac:fb:56:7f:89:88:e6:da:46:d7:2d:59:
         17:72:f0:cc:35:5e:79:04:2a:27:e7:58:4a:9b:6f:ea:8a:c2:
         b5:66:e5:e5:28:2e:63:4e:52:17:79:a7:21:ce:6d:0b:e5:8a:
         30:26:5d:dc:63:e4:cb:32:b5:d5:fd:66:83:2c:0d:f0:67:17:
         e5:2a:bc:b6:5c:6f:da:ec:73:b5:f2:c7:71:4b:f4:4c:1e:a3:
         a1:a6:8f:ea:16:0c:25:16:f3:b6:56:dd:ce:bc:d1:4f:29:9e:
         aa:e6:2a:1c:75:3c:d1:17:23:87:20:8a:eb:ac:52:f7:c3:35:
         b4:21:32:01:b4:4e:2a:1f:ec:d4:df:31:da:60:31:22:ee:a4:
         9b:c4:35:8f:4e:ac:9a:e7:6c:91:ce:48:7e:5e:03:b6:a2:99:
         9e:d9:1f:91:fa:9d:63:5c:8b:68:88:23:aa:a2:ee:35:05:f5:
         77:55:9d:68:ff:c3:18:99:e5:91:89:6c:6b:99:85:91:dd:5a:
         71:ec:99:62:7f:7e:e9:b0:d9:9b:90:c1:c7:88:4a:9b:db:c1:
         84:c8:de:2e:63:9f:db:e8:72:1d:fe:1b:43:d4:35:fd:75:94:
         17:1a:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:44:07 2025 by rpki-client