Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34302e302f32332d3233203d3e20323636353134.roa
File:                     34352e3138362e34302e302f32332d3233203d3e20323636353134.roa (raw, json)
Hash identifier:          VRBl26Gzcl1v8kBSEoAPA5E8gm5NbokM4iwlHcbYaKk=
Subject key identifier:   F7:A8:8E:44:C5:7E:01:2B:3E:E0:25:CB:89:16:13:BC:F2:4D:71:F2
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       04501457A13AE2C88E3B31720A1C469ED5A79739
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34302e302f32332d3233203d3e20323636353134.roa
Signing time:             Mon 24 Mar 2025 12:56:57 +0000
ROA not before:           Mon 24 Mar 2025 12:51:57 +0000
ROA not after:            Mon 23 Mar 2026 12:56:57 +0000
asID:                     266514
IP address blocks:        45.186.40.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:50:14:57:a1:3a:e2:c8:8e:3b:31:72:0a:1c:46:9e:d5:a7:97:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Mar 24 12:51:57 2025 GMT
            Not After : Mar 23 12:56:57 2026 GMT
        Subject: CN=F7A88E44C57E012B3EE025CB891613BCF24D71F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:43:f7:14:cd:83:f1:a1:5d:05:81:8d:b0:
                    93:5f:a5:88:fc:4c:84:45:ac:94:e0:85:b1:f4:c7:
                    ca:35:a1:57:bd:8b:3b:ec:72:28:02:e8:87:4e:e0:
                    ba:03:c8:b4:87:f0:61:07:9b:4b:1b:7a:82:82:42:
                    67:58:49:97:4c:97:02:3f:6c:60:35:e5:3b:8f:eb:
                    f4:97:3e:70:51:45:f9:3d:10:e6:9a:6b:d8:09:ee:
                    ae:6b:86:c7:60:1f:1f:44:12:bb:48:03:ac:96:cc:
                    64:e3:76:f8:4d:12:e5:cc:e0:45:c3:09:92:6f:65:
                    9c:34:33:b3:32:0a:65:b0:c8:d7:e8:d2:31:25:f5:
                    7d:da:54:c8:3c:1c:5e:fc:b3:86:6b:42:f2:0b:86:
                    8e:34:c2:3f:8b:65:a3:79:34:0c:47:c5:be:a4:0d:
                    b3:c9:e1:e1:ed:1b:8c:d3:e6:22:2d:83:50:bf:aa:
                    76:ca:23:9d:58:44:24:38:2e:da:f8:65:10:10:b5:
                    67:2d:a5:f1:2e:01:6a:56:9a:92:78:16:fa:1c:97:
                    52:0d:e2:cb:19:7d:fe:39:8e:b3:8d:ec:d4:bf:62:
                    d0:fb:e7:b9:82:dd:43:0e:d8:98:e1:f5:7e:52:bc:
                    16:fe:51:2e:12:d2:23:a2:c4:75:7c:e7:8c:af:77:
                    2c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A8:8E:44:C5:7E:01:2B:3E:E0:25:CB:89:16:13:BC:F2:4D:71:F2
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34302e302f32332d3233203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:3d:ef:64:38:72:5a:5e:c7:84:67:7a:82:15:81:9b:cb:1d:
         ac:eb:07:72:ce:ae:6c:b2:24:51:4f:28:76:92:c4:ce:1d:aa:
         ba:cc:39:84:00:53:e3:50:29:34:14:83:3d:f8:36:57:57:d7:
         8d:2b:14:6c:ef:c0:54:ec:c5:08:f7:15:8a:b9:9a:23:e2:ed:
         19:87:01:46:01:81:03:a9:0d:e1:70:fb:11:15:6f:a6:8b:84:
         59:28:cf:ed:6c:1e:ea:2c:35:01:ad:ac:24:fb:09:6f:a0:f7:
         6d:b5:c0:7b:8e:74:78:be:6e:85:84:10:3a:4a:ad:c6:68:0d:
         74:e2:bf:f0:88:d3:47:5c:5c:fb:cf:df:1f:ff:2b:ec:0c:a1:
         18:b9:0f:cc:fd:a1:1e:20:38:83:83:c4:b2:b5:76:ba:4a:bd:
         af:57:23:06:91:40:8b:1a:d0:54:f3:0d:78:14:0d:c9:ac:c9:
         24:c7:74:a7:44:3e:92:ff:58:c1:29:3e:86:e9:89:70:65:3d:
         ba:3c:99:58:f9:02:4f:82:c1:7e:4e:66:a5:92:53:72:20:79:
         f1:b6:43:79:b5:f0:f1:32:b6:f0:f8:74:b6:f2:3a:ff:65:98:
         e9:2e:cc:01:27:74:2d:8f:95:2d:84:e6:9c:e5:a7:97:ac:cd:
         f2:00:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:01:20 2025 by rpki-client