Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137392e302f32342d3234203d3e20323636313934.roa
File:                     34352e352e3137392e302f32342d3234203d3e20323636313934.roa (raw, json)
Hash identifier:          SaCzzyet1u9S08XZ8bvTakpESdkC9GTO/gLU68HkvlI=
Subject key identifier:   DA:42:F5:EA:66:F2:59:50:DB:D6:2C:7E:5E:77:2F:28:6B:A0:EC:1B
Certificate issuer:       /CN=72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE
Certificate serial:       62FE41ECE7CAF2E37864C0D1454E24BEF3FABEB1
Authority key identifier: 72:BE:3C:82:AB:3E:A6:1E:2E:88:36:DF:A2:3D:41:05:FA:F2:06:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137392e302f32342d3234203d3e20323636313934.roa
Signing time:             Wed 05 Mar 2025 21:00:50 +0000
ROA not before:           Wed 05 Mar 2025 20:55:50 +0000
ROA not after:            Wed 04 Mar 2026 21:00:50 +0000
asID:                     266194
IP address blocks:        45.5.179.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fe:41:ec:e7:ca:f2:e3:78:64:c0:d1:45:4e:24:be:f3:fa:be:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE
        Validity
            Not Before: Mar  5 20:55:50 2025 GMT
            Not After : Mar  4 21:00:50 2026 GMT
        Subject: CN=DA42F5EA66F25950DBD62C7E5E772F286BA0EC1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:3d:1e:da:0f:f1:e1:06:57:ab:bc:c3:8e:
                    68:62:ad:80:8b:a4:27:2d:71:ee:63:df:75:2c:fd:
                    a8:b8:d3:03:29:71:33:b2:66:8b:b3:6f:23:77:0b:
                    75:e0:08:58:e1:07:4b:17:e8:39:98:25:98:7e:21:
                    7d:63:17:eb:bd:9b:8d:09:af:74:a8:e5:77:bb:60:
                    e2:ed:60:75:72:71:52:75:7b:6f:56:ef:f8:13:22:
                    94:38:8a:13:65:28:c5:ba:29:f6:93:a7:26:3a:2c:
                    be:b7:d5:e6:21:83:ef:36:41:6b:15:c2:81:df:9f:
                    5c:49:cd:dc:3e:1a:0c:5d:f3:7f:54:0e:10:4c:30:
                    96:cd:47:b7:c5:c5:5c:a2:94:a7:dd:b9:05:75:5c:
                    a3:cc:d7:27:b4:ed:04:7a:eb:d3:52:53:ae:d1:45:
                    77:13:c5:79:72:69:da:24:58:6f:47:ab:a4:81:01:
                    b1:31:70:4a:c9:35:a2:c9:56:f5:09:0e:fd:12:07:
                    9f:d3:a2:e6:c0:fe:b3:9a:9c:1f:ae:f1:d1:52:87:
                    5d:c2:27:44:46:2e:51:90:02:34:69:0c:d7:91:83:
                    ba:9b:60:9b:39:7a:9e:8f:9b:8b:a5:5c:99:fb:04:
                    33:41:c7:4f:a8:4b:62:a3:20:57:ed:fc:f2:70:48:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:42:F5:EA:66:F2:59:50:DB:D6:2C:7E:5E:77:2F:28:6B:A0:EC:1B
            X509v3 Authority Key Identifier:
                keyid:72:BE:3C:82:AB:3E:A6:1E:2E:88:36:DF:A2:3D:41:05:FA:F2:06:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137392e302f32342d3234203d3e20323636313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:2d:ff:b1:60:13:4b:61:93:78:ed:08:69:41:c8:6c:fb:
         4a:2f:7e:a0:4e:e3:46:08:ee:98:45:32:60:ec:66:77:d2:d2:
         56:5a:99:db:a3:84:d6:40:19:8d:a1:08:a5:3b:38:ac:60:63:
         75:40:15:1a:1b:35:0b:b2:9e:38:48:eb:fd:19:7c:0d:2c:c3:
         b8:c7:10:92:9d:43:7d:f0:e2:dd:ce:dd:29:52:03:76:e8:ad:
         e2:83:cd:29:3b:be:8f:7b:c2:e6:f9:cb:95:f5:e2:c5:3a:54:
         b8:85:4c:d2:06:73:7a:a5:a3:73:f8:6c:d6:96:42:50:5a:94:
         4f:46:5c:21:9a:27:02:24:6f:31:08:72:95:7d:10:7f:1b:a9:
         4a:5c:a5:81:2f:11:ce:d5:c0:d1:1e:44:e3:d3:f7:13:79:f3:
         10:de:32:3e:4b:55:c6:3f:39:4f:d0:4a:f1:5a:b1:29:ec:5e:
         e1:1f:37:8a:3f:52:36:c8:1e:48:9a:90:a8:53:11:33:8d:15:
         0c:bf:92:7d:65:9e:9b:cd:0a:26:2c:8a:56:aa:d5:f4:48:4a:
         4a:24:b5:86:f6:3b:a4:e0:e8:10:b9:03:cc:25:2b:bd:48:5f:
         41:98:53:ee:cc:4a:9f:95:f3:36:b3:9c:c9:3f:4e:86:88:b4:
         2d:c2:c8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:31 2025 by rpki-client