Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e35302e302f32332d3233203d3e20323637393532.roa
File:                     34352e3136362e35302e302f32332d3233203d3e20323637393532.roa (raw, json)
Hash identifier:          MEu4xoCbahL7qyRbkcj8Gl8oqGAQvNo08j54ScZ79tc=
Subject key identifier:   82:A4:87:F4:9F:5A:28:96:32:E3:25:1D:F9:81:FD:12:62:C4:D2:33
Certificate issuer:       /CN=1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332
Certificate serial:       4606E6B8FA2D128EE2B4DD767EF74C1EB787233B
Authority key identifier: 1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e35302e302f32332d3233203d3e20323637393532.roa
Signing time:             Thu 04 Apr 2024 03:00:19 +0000
ROA not before:           Thu 04 Apr 2024 02:55:19 +0000
ROA not after:            Thu 03 Apr 2025 03:00:19 +0000
asID:                     267952
IP address blocks:        45.166.50.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:06:e6:b8:fa:2d:12:8e:e2:b4:dd:76:7e:f7:4c:1e:b7:87:23:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332
        Validity
            Not Before: Apr  4 02:55:19 2024 GMT
            Not After : Apr  3 03:00:19 2025 GMT
        Subject: CN=82A487F49F5A289632E3251DF981FD1262C4D233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:de:a0:56:03:e6:e0:67:ae:54:e1:03:68:be:
                    5c:4e:6d:93:d0:b8:e3:d1:54:fc:d6:dd:b8:1d:fc:
                    42:1c:ab:5a:ab:24:ff:6f:74:8e:53:67:b1:a2:1e:
                    f5:86:ae:06:5e:28:bc:8a:50:39:3e:67:1d:57:67:
                    de:c7:12:32:a4:09:6c:77:31:e7:88:08:ee:11:94:
                    ba:95:f5:82:48:30:21:df:33:21:32:d2:92:57:07:
                    dc:f6:81:04:e6:ba:ae:1b:f4:3c:2a:25:70:85:58:
                    5a:9f:77:cd:fd:b3:cc:b9:21:02:8b:6d:8f:62:2f:
                    85:d1:04:bc:d9:0b:ca:2e:b6:3d:85:fc:a9:8d:3d:
                    bf:d8:01:a3:93:6e:f9:cd:e4:6c:43:02:3d:86:53:
                    3f:62:dd:9e:c7:94:34:c3:bc:ff:66:a0:13:b1:c6:
                    3d:3a:0d:5a:e7:56:5c:22:d1:ef:d3:c1:fa:11:aa:
                    61:c0:51:4a:f2:cb:6b:68:c1:34:91:31:3c:3c:ac:
                    4c:5d:0d:02:ac:d9:07:3e:4f:d7:b6:4c:c4:62:17:
                    73:dc:98:ac:9d:9c:30:87:25:78:50:43:11:1c:b5:
                    48:24:b9:57:91:be:7e:7d:ed:c8:46:6f:53:b8:61:
                    5b:95:5c:1c:38:d4:e8:81:e9:b3:d9:e4:c1:d3:ad:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:87:F4:9F:5A:28:96:32:E3:25:1D:F9:81:FD:12:62:C4:D2:33
            X509v3 Authority Key Identifier:
                keyid:1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e35302e302f32332d3233203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:d8:8d:c1:27:db:89:1b:a1:40:0a:f3:8d:bb:34:32:d4:a5:
         49:5c:76:74:97:4d:e1:88:a5:fa:70:d7:11:19:db:63:d2:c8:
         87:c2:06:74:4b:ca:8a:d8:9b:e2:1d:7e:02:96:e0:51:e5:6c:
         41:9e:9c:7c:27:a2:98:a0:f1:3b:80:89:e3:a0:ab:b6:4c:a0:
         83:ac:a7:2e:fa:c3:f8:40:ae:df:27:3f:4b:e9:a1:35:c4:03:
         c6:a6:e8:e1:fe:be:f4:99:14:50:78:fd:fe:4d:38:f7:76:af:
         6c:f1:59:bd:43:7a:31:ef:7d:5a:04:49:5f:16:53:36:63:c7:
         b9:e3:df:60:f8:9f:74:df:12:94:fc:fc:30:68:21:e7:f1:b4:
         9e:46:84:3a:95:7a:f0:27:da:f0:4a:9b:a1:f5:9f:4b:8e:68:
         47:55:6d:22:10:b6:d8:78:2b:5f:bb:8d:c8:d3:16:ae:7c:68:
         a1:a1:ce:ce:6c:15:93:6a:7c:82:bf:a6:ed:97:97:d9:3c:81:
         3f:54:fd:61:de:99:53:95:e5:58:2b:52:4f:95:24:5b:33:0e:
         ef:f6:4d:a6:b5:7e:9a:5c:a5:58:f0:52:0c:b8:fd:de:30:86:
         13:0a:d6:d4:ac:29:41:d7:7c:a1:00:48:3d:7d:d1:4c:7a:29:
         a1:7e:b6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:27:08 2025 by rpki-client