Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3234382e302f32332d3233203d3e203631363936.roa
File:                     3230312e3134302e3234382e302f32332d3233203d3e203631363936.roa (raw, json)
Hash identifier:          G7sJhNHgYXTfYQRjt3AkTDDK1IyYlhSNW7RS2TbquTo=
Subject key identifier:   19:9E:36:47:B7:3A:5C:DD:35:5C:74:D0:F4:4C:71:99:CA:B9:63:51
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       7D06C7C0F0CD861F64FE924ABA97DEB76E1E4E13
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3234382e302f32332d3233203d3e203631363936.roa
Signing time:             Fri 06 Oct 2023 19:46:56 +0000
ROA not before:           Fri 06 Oct 2023 19:41:56 +0000
ROA not after:            Fri 04 Oct 2024 19:46:56 +0000
asID:                     61696
IP address blocks:        201.140.248.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:06:c7:c0:f0:cd:86:1f:64:fe:92:4a:ba:97:de:b7:6e:1e:4e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct  6 19:41:56 2023 GMT
            Not After : Oct  4 19:46:56 2024 GMT
        Subject: CN=199E3647B73A5CDD355C74D0F44C7199CAB96351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:66:b8:fa:fd:e5:73:67:37:65:7c:2a:a2:58:
                    22:d9:c1:41:5c:9e:ec:e6:d6:da:ca:17:44:ad:ec:
                    1e:cc:e2:0f:06:bb:a3:8d:40:21:7f:cc:04:73:b0:
                    cf:82:f7:64:ea:61:95:f0:72:e0:cf:32:17:b6:d7:
                    30:84:32:44:76:61:f3:41:d5:fd:1f:94:7f:13:b5:
                    0e:e6:2c:0d:db:1c:7d:cf:0e:a2:a5:01:0a:a0:f4:
                    da:86:9d:32:cf:60:d0:70:e7:15:9c:8f:34:00:1b:
                    a7:14:21:e8:a6:74:0c:75:bb:e2:e6:52:d9:be:28:
                    ad:24:12:e6:ac:dc:ac:69:37:ba:83:d3:b2:71:fc:
                    65:4d:fd:87:4c:49:f0:88:48:f6:99:a9:de:89:f2:
                    45:f1:e3:fa:c8:68:70:2a:73:23:b6:00:53:f9:6e:
                    80:23:d6:45:36:d4:8a:8e:9a:83:a8:92:05:d6:0a:
                    16:45:66:46:67:d0:5d:03:d3:3b:d2:6b:7a:ba:94:
                    c2:dd:28:f0:cb:44:38:4b:4d:61:c2:f8:00:8f:48:
                    9a:64:9e:a3:0f:c7:5e:f4:e4:5d:3c:b8:7f:fd:d4:
                    e8:12:32:af:fb:7b:77:3e:e8:9d:4a:8e:ba:a8:05:
                    bc:e3:8e:12:73:ef:31:a4:1e:86:c2:f4:b4:45:7f:
                    3d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9E:36:47:B7:3A:5C:DD:35:5C:74:D0:F4:4C:71:99:CA:B9:63:51
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3234382e302f32332d3233203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:8d:15:2c:48:36:dd:03:96:9e:55:14:f4:f5:db:e8:59:41:
         fc:df:96:38:a8:38:d0:3e:6f:fb:58:03:57:d3:7a:9f:3c:a4:
         60:20:81:b5:10:df:34:ed:43:8c:d6:2c:22:61:77:90:41:27:
         3b:bd:1c:ad:83:f0:b2:69:8e:3e:4a:ff:b7:f4:10:30:29:6e:
         79:70:26:64:3e:f0:11:e9:58:5c:34:5e:46:dd:75:61:dc:33:
         60:2f:b8:24:96:d7:90:25:fd:57:cf:16:70:de:f0:89:f7:c9:
         2e:96:ec:c7:ad:19:50:3e:9d:79:89:4a:c9:fd:2d:81:7e:ba:
         de:eb:37:fa:1b:64:a3:de:b6:28:1b:7a:06:35:47:da:45:c1:
         e8:2a:c6:f5:de:6a:fa:eb:8f:66:c3:a6:28:08:2b:66:6d:e8:
         db:ef:21:bf:b5:21:76:da:49:14:95:c2:8e:a3:6a:21:2d:7f:
         4b:ef:b8:94:57:f1:e1:c2:fe:71:f3:3b:b0:82:26:5b:c7:89:
         0f:05:24:0c:ea:98:bb:e4:cf:12:f5:3d:c4:7a:97:3a:0c:1b:
         d1:34:33:c4:5c:89:b1:76:23:bd:42:e0:cd:ac:1c:74:b9:1c:
         05:56:d8:4d:55:08:47:af:fe:76:f4:eb:7f:b8:45:55:53:b6:
         67:c7:0c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:54 2025 by rpki-client