Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/3230302e31362e39322e302f32342d3234203d3e20323731363338.roa
File:                     3230302e31362e39322e302f32342d3234203d3e20323731363338.roa (raw, json)
Hash identifier:          0oY8zhzb2uDTcVHoBLepS3cp62tBbko14B453nE4mms=
Subject key identifier:   86:59:C5:9F:12:6B:FA:16:95:E6:7E:90:CF:88:AB:6E:96:92:6E:B3
Certificate issuer:       /CN=0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62
Certificate serial:       2F0F3E40EE10B0860F4303A4C88B6AA90CE2133F
Authority key identifier: 0F:63:54:D9:DD:1A:15:AF:5B:0D:DC:AF:83:FC:E9:B6:5D:1B:DC:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/3230302e31362e39322e302f32342d3234203d3e20323731363338.roa
Signing time:             Fri 08 Sep 2023 22:18:30 +0000
ROA not before:           Fri 08 Sep 2023 22:13:30 +0000
ROA not after:            Fri 06 Sep 2024 22:18:30 +0000
asID:                     271638
IP address blocks:        200.16.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0f:3e:40:ee:10:b0:86:0f:43:03:a4:c8:8b:6a:a9:0c:e2:13:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62
        Validity
            Not Before: Sep  8 22:13:30 2023 GMT
            Not After : Sep  6 22:18:30 2024 GMT
        Subject: CN=8659C59F126BFA1695E67E90CF88AB6E96926EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:4c:a7:b5:29:c4:94:6b:15:66:f3:25:63:
                    13:38:63:af:04:88:d3:aa:f0:d6:77:cb:92:ad:23:
                    6a:f8:2c:80:fe:b6:8a:54:29:b7:13:a6:b5:dd:e3:
                    50:7e:31:6d:51:9d:62:f7:53:e3:e4:5c:32:3a:be:
                    dd:2c:ed:f1:4d:d0:f5:c8:fb:81:1a:a4:07:f6:28:
                    86:ce:f6:3f:9e:20:23:9e:80:7f:e8:74:f3:eb:36:
                    d4:21:4e:fe:75:7d:c1:ec:8c:53:5e:05:6e:b4:8b:
                    1a:92:8c:11:eb:f2:36:51:fa:a6:16:b2:54:7c:fb:
                    0e:e7:b3:47:64:20:89:7f:ca:a3:d8:24:2a:16:eb:
                    f9:00:74:bc:d0:cc:b5:91:f5:5e:db:dc:bf:15:75:
                    3a:f1:be:96:96:cf:2e:a2:cf:63:57:c1:d1:dd:a0:
                    8a:e9:68:b9:45:e0:ec:5d:be:49:37:5a:a7:de:b3:
                    be:b6:8e:2a:34:3a:b9:56:4c:ed:78:c5:38:16:67:
                    29:03:0e:e4:ee:99:f9:0a:f0:1c:75:8b:31:28:a9:
                    f9:1c:b6:ee:b9:e0:1a:c5:35:ff:a7:02:d3:f6:07:
                    13:bd:14:76:2d:f4:34:6f:a5:8b:78:f7:7f:a8:22:
                    6b:e9:80:88:e8:ee:29:5f:13:3c:a3:71:16:73:ba:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:59:C5:9F:12:6B:FA:16:95:E6:7E:90:CF:88:AB:6E:96:92:6E:B3
            X509v3 Authority Key Identifier:
                keyid:0F:63:54:D9:DD:1A:15:AF:5B:0D:DC:AF:83:FC:E9:B6:5D:1B:DC:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F6354D9DD1A15AF5B0DDCAF83FCE9B65D1BDC62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/3230302e31362e39322e302f32342d3234203d3e20323731363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:65:58:13:4a:8b:64:aa:69:8f:23:68:94:6e:1b:0f:4c:
         b3:a1:fb:68:b2:99:12:12:7a:6a:2d:12:d7:14:24:06:fb:b0:
         83:04:79:65:88:3d:08:17:7b:58:07:0f:d6:ac:71:32:f4:eb:
         38:c8:b1:0f:6e:7f:06:67:1c:60:3d:55:3b:f2:1a:29:3b:f7:
         d3:4a:17:ea:e5:05:e2:d4:e8:39:be:e3:d2:a2:9f:25:e6:f8:
         be:aa:77:fd:14:9d:77:25:41:f8:bb:95:30:cb:d3:64:5e:7d:
         9d:cd:c6:1c:88:16:55:bb:c8:3d:e9:b4:91:d4:3a:37:a9:1e:
         67:c1:39:8d:cb:af:e8:4c:c7:6d:cd:70:bf:3a:3d:90:be:4d:
         68:de:b5:01:11:a0:7b:f6:35:d0:20:4a:0e:61:8c:4c:71:7d:
         65:d2:62:9f:0d:ba:df:64:5f:1f:42:9e:c1:30:5d:92:0c:d3:
         7a:ab:a9:a6:32:4b:20:03:e2:2e:db:02:97:f5:cf:6c:a7:7c:
         c4:58:bf:9b:0c:51:6e:d2:33:f2:b6:27:b0:fc:8d:fe:95:b7:
         f1:1e:11:1f:f0:34:20:74:1c:34:54:7b:b1:12:f2:14:31:b1:
         a1:20:09:10:a3:fa:db:cc:cd:ca:7a:67:e6:47:25:bb:bf:97:
         38:d9:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:12:26 2025 by rpki-client