Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa
File:                     34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa (raw, json)
Hash identifier:          Zl8SCHLZLBgSw64JXRLFElp0yQLk3uHt6/xq4xF/EhY=
Subject key identifier:   FE:E4:BD:D4:57:EC:07:49:96:D9:EB:F2:E7:05:4E:8C:C8:6C:0E:AA
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       7747109591AC218C3FD70175EFC17A01577D4C12
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     267334
IP address blocks:        45.233.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:47:10:95:91:ac:21:8c:3f:d7:01:75:ef:c1:7a:01:57:7d:4c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=FEE4BDD457EC074996D9EBF2E7054E8CC86C0EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:58:93:17:05:d3:24:18:ea:71:7c:4e:d2:6f:
                    3c:e8:67:ad:a2:7d:46:56:6b:51:79:df:71:ab:c1:
                    71:93:a4:e6:a0:ab:1e:59:b9:c4:eb:f9:66:49:e1:
                    bf:86:5b:4c:21:f5:9c:85:bd:4e:b4:70:f5:8a:18:
                    d7:db:f4:21:d9:4b:45:9e:29:c5:8f:f5:e8:40:11:
                    10:61:7d:9e:62:e6:29:ff:78:ad:7b:f8:1c:1c:2c:
                    ca:53:bb:83:5e:2a:a2:28:6f:cf:b8:54:d2:18:3f:
                    9f:1c:fe:b9:da:13:67:c4:23:60:4b:20:49:a3:28:
                    67:4d:ec:00:3b:95:d8:8c:45:5d:16:79:b8:64:03:
                    3a:3d:a1:60:e7:2d:a5:79:33:a1:18:4e:a1:fc:17:
                    46:f4:fe:b1:f1:36:a6:a7:8f:48:b4:e2:07:98:09:
                    5e:ba:d1:04:93:25:4a:c5:d7:0b:56:7d:b3:04:8b:
                    2e:68:70:69:6b:87:b1:29:18:8d:64:37:71:dc:b9:
                    c1:a0:a9:7b:25:46:b6:94:91:db:f0:02:ec:2b:a8:
                    67:1b:99:0e:45:48:cf:a5:21:cd:18:ba:6f:9b:01:
                    72:09:b9:f9:5f:18:96:24:83:ad:c2:68:3d:99:f9:
                    8c:13:29:0a:83:3e:83:e0:ec:d2:72:7a:3a:9e:a6:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E4:BD:D4:57:EC:07:49:96:D9:EB:F2:E7:05:4E:8C:C8:6C:0E:AA
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:0f:35:cf:a1:fa:86:45:32:fa:4c:4d:15:32:d1:6b:f1:8e:
         3b:e5:8b:3a:ca:ba:22:2e:da:2f:ea:23:7c:02:51:d1:d1:1e:
         74:00:2b:ed:65:0c:a9:cd:f2:60:5c:1c:0c:cd:01:61:2c:a7:
         3e:99:b8:de:c0:ba:1b:d5:3f:a8:6c:14:9a:37:45:e3:91:b5:
         0d:57:25:4b:b2:eb:a8:61:5f:8a:93:2e:03:86:94:f4:98:a5:
         8c:32:61:ef:69:1b:e3:f4:df:6a:cd:f4:8d:fe:89:4e:86:93:
         38:6a:fc:c8:bd:a0:1d:18:a3:35:ee:5b:5f:06:19:ef:dd:95:
         0d:92:9f:48:8c:e3:63:da:4d:6c:25:da:68:98:54:0f:a5:ea:
         46:60:8f:71:f4:b8:da:5a:05:43:de:80:71:b2:de:ec:00:f5:
         5b:3a:37:39:7d:16:52:b6:63:0a:08:77:e4:d9:9d:3e:78:ed:
         92:96:20:4e:55:ab:29:c5:e5:1c:09:2c:ef:4e:0f:14:1d:23:
         fe:03:0a:07:0b:ad:50:65:15:aa:29:1c:d1:57:c0:2d:c1:b5:
         6d:3e:b7:e5:17:e8:41:4c:a8:89:79:58:78:cb:fe:19:5b:91:
         cd:3e:40:e4:50:b6:c9:a3:8b:ae:08:38:98:32:9f:cb:b0:ba:
         a8:93:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:25:10 2025 by rpki-client