Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa
File:                     34352e3136352e39312e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          t/dR9dYkWND2+7gSU40fhtC29G72U21LdERRbWWw2b4=
Subject key identifier:   B1:7C:12:30:99:1E:DA:7C:6C:52:0B:8F:B0:C5:F1:01:7B:9D:DA:B6
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       405E0F8774EF6527DB78FB2ABA9E201442E54762
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa
Signing time:             Thu 06 Mar 2025 19:04:20 +0000
ROA not before:           Thu 06 Mar 2025 18:59:20 +0000
ROA not after:            Thu 05 Mar 2026 19:04:20 +0000
asID:                     264479
IP address blocks:        45.165.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5e:0f:87:74:ef:65:27:db:78:fb:2a:ba:9e:20:14:42:e5:47:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Mar  6 18:59:20 2025 GMT
            Not After : Mar  5 19:04:20 2026 GMT
        Subject: CN=B17C1230991EDA7C6C520B8FB0C5F1017B9DDAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:cd:17:bd:0a:90:bd:a2:c9:9b:0f:49:8e:
                    e9:be:3e:60:86:9d:23:e9:20:9d:1e:e1:d3:13:bf:
                    88:bc:6c:27:a7:d8:ed:8a:f5:f1:83:a7:45:bd:15:
                    b4:a3:8e:49:d9:b7:47:3d:9a:bf:eb:26:39:64:fa:
                    74:d7:62:df:e1:f0:f9:52:8f:77:08:c3:8a:94:75:
                    3c:73:f1:cf:0c:cf:7b:27:58:ad:a8:49:1e:5e:d1:
                    26:db:4a:1d:b2:1f:0a:00:d0:4a:da:11:7c:c2:15:
                    9e:b5:11:96:bb:6e:cb:06:5e:04:37:0e:d6:1c:d6:
                    c7:26:04:39:b9:e0:70:db:d3:12:d3:55:60:42:3f:
                    22:f5:a7:6e:39:3b:d2:f8:a8:99:4b:dc:9f:8e:90:
                    48:4f:a9:11:2d:1c:cd:2e:54:0b:f7:68:1b:8d:ef:
                    db:ea:c6:ce:4a:4b:be:f5:73:24:85:93:6a:58:c2:
                    c4:89:0f:b6:e4:93:01:55:4b:7a:c4:b6:73:53:66:
                    1e:d1:f4:8c:d2:2d:6c:32:01:77:27:68:49:25:65:
                    df:12:8b:0d:ca:03:ab:c2:82:8d:77:66:df:69:42:
                    41:22:3f:10:df:3f:89:11:e8:bc:de:3e:68:22:4a:
                    9c:1c:51:a1:95:42:f5:68:43:28:12:6a:72:f2:35:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7C:12:30:99:1E:DA:7C:6C:52:0B:8F:B0:C5:F1:01:7B:9D:DA:B6
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ef:7a:d3:c5:cf:1a:2e:e4:fb:af:77:d2:1b:bf:74:2f:dc:
         95:ee:52:43:1a:ec:52:86:28:9e:47:3e:10:0a:d9:76:ea:79:
         8a:f8:e6:8e:af:8b:2f:c8:ca:02:98:89:6b:39:ff:cf:a3:0f:
         bb:9c:97:04:79:72:f4:b9:c7:be:06:79:fb:a5:9b:80:45:e2:
         bf:3d:9f:23:43:83:f4:df:b6:3c:d0:b0:f4:29:32:0b:48:9d:
         3c:85:2b:cb:a3:18:53:85:d9:bd:e5:69:54:2b:07:3a:55:ec:
         0b:4a:56:71:1a:9d:6d:89:92:2c:60:54:cc:62:f6:f1:c3:21:
         63:2a:42:c3:69:85:54:03:f0:1b:d3:a8:ac:3a:84:21:5e:46:
         ce:69:1e:56:15:88:71:68:75:6f:8d:df:df:77:83:ad:00:b8:
         52:c2:d4:50:a0:6b:46:f8:8a:71:12:bd:e1:c1:12:b5:88:b5:
         a6:7c:78:4c:a5:5e:f2:85:15:77:f9:73:99:94:43:ab:f5:6f:
         c9:89:db:d5:1a:cc:df:2c:f7:e4:61:80:3f:53:2d:7c:b2:37:
         b2:1e:02:35:a7:01:fd:c8:d1:63:6a:2f:34:cb:8d:04:d5:6d:
         9f:6c:77:38:83:0b:ca:c9:37:ee:a6:83:c3:4a:b1:b6:73:f5:
         82:2e:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:34:01 2025 by rpki-client