Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32342d3234203d3e20323730323533.roa
File:                     3230302e3131302e3230342e302f32342d3234203d3e20323730323533.roa (raw, json)
Hash identifier:          UXwhoGQ/X9XlHq8bm7/Gr2CHrd3A2ybid/DEY2cBTZw=
Subject key identifier:   F7:53:62:78:9F:BF:51:C7:18:42:D9:37:2C:71:96:6E:F5:81:5C:B8
Certificate issuer:       /CN=64D90A43947522D97FADCCA2C5687D60AD8508E5
Certificate serial:       12DB006BF63C60584C0D040F99F6EFCE06CE24AC
Authority key identifier: 64:D9:0A:43:94:75:22:D9:7F:AD:CC:A2:C5:68:7D:60:AD:85:08:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64D90A43947522D97FADCCA2C5687D60AD8508E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32342d3234203d3e20323730323533.roa
Signing time:             Fri 20 Oct 2023 18:42:53 +0000
ROA not before:           Fri 20 Oct 2023 18:37:53 +0000
ROA not after:            Fri 18 Oct 2024 18:42:53 +0000
asID:                     270253
IP address blocks:        200.110.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:db:00:6b:f6:3c:60:58:4c:0d:04:0f:99:f6:ef:ce:06:ce:24:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64D90A43947522D97FADCCA2C5687D60AD8508E5
        Validity
            Not Before: Oct 20 18:37:53 2023 GMT
            Not After : Oct 18 18:42:53 2024 GMT
        Subject: CN=F75362789FBF51C71842D9372C71966EF5815CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:40:51:c8:4e:96:ab:c0:bf:7c:32:32:78:
                    96:c5:92:ec:14:56:6f:a7:75:75:ac:9b:ee:8d:b8:
                    b9:67:49:c8:94:c1:0b:2d:34:42:c6:a5:fa:f5:b2:
                    2e:86:4e:29:88:eb:de:e0:0b:db:10:37:78:32:9d:
                    0a:8b:53:d8:41:92:d9:25:90:10:a6:07:fe:3b:d3:
                    7b:3e:2c:20:18:6e:fa:e2:9a:11:b7:88:0b:ff:12:
                    a7:79:68:e4:36:b2:a5:8d:e9:1e:98:c2:f2:03:31:
                    69:56:c1:22:55:7f:ac:66:58:93:ab:9b:74:82:8f:
                    48:61:57:ec:65:d2:06:13:55:5c:29:84:59:a4:a2:
                    99:78:64:42:32:44:9c:d3:36:44:50:27:ab:f8:ee:
                    b8:d2:95:a6:8a:f1:80:c8:db:5f:90:ce:f9:26:0a:
                    8f:7b:2a:2f:9e:c9:39:b9:6c:fc:19:96:ed:08:54:
                    5b:83:cb:6d:df:35:3b:8d:d0:77:6c:03:c9:8d:39:
                    05:a1:4f:8d:4f:e7:b7:33:b4:05:c1:3c:74:b0:d8:
                    d6:b3:70:46:fe:c5:49:e1:03:9f:96:63:f3:20:65:
                    62:64:02:5c:bb:fa:52:31:c0:fa:43:4a:c3:fe:d0:
                    4b:f5:36:25:4c:2c:8d:5a:25:a8:88:5a:64:db:99:
                    26:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:53:62:78:9F:BF:51:C7:18:42:D9:37:2C:71:96:6E:F5:81:5C:B8
            X509v3 Authority Key Identifier:
                keyid:64:D9:0A:43:94:75:22:D9:7F:AD:CC:A2:C5:68:7D:60:AD:85:08:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/64D90A43947522D97FADCCA2C5687D60AD8508E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64D90A43947522D97FADCCA2C5687D60AD8508E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32342d3234203d3e20323730323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:7c:f7:3d:e9:49:86:ea:1f:0d:c8:00:a5:62:c6:07:5c:
         f7:3c:50:1f:30:a7:d3:a2:b4:6f:6b:c8:25:26:0c:09:0a:30:
         2f:80:e5:ef:18:7b:e0:5c:cd:f9:a4:9b:0b:c6:57:29:17:fc:
         f0:4f:79:ce:af:90:33:86:14:80:4d:d5:b2:32:d1:42:f6:8e:
         40:6a:26:4a:f7:eb:29:12:05:d8:b1:b8:f4:66:01:55:aa:44:
         18:e1:b1:2b:ba:e6:e8:19:06:04:f7:36:ae:f6:75:1e:4e:fd:
         e7:65:ec:c3:5f:2c:b8:5e:75:77:53:20:a2:59:27:88:4e:62:
         3f:fd:81:3d:35:dc:f0:eb:7f:4a:14:fc:38:a3:04:bb:dd:a6:
         a3:46:45:5f:1f:11:b7:b6:d0:45:45:d3:6c:d8:e2:8e:8d:c8:
         88:59:11:cb:07:6e:e3:7a:3f:88:35:53:e8:40:ed:c2:34:49:
         5e:4d:6e:a0:6e:a2:4d:5c:9e:f8:63:9f:0e:b6:65:46:88:d7:
         cd:f5:ad:3f:e4:58:0e:6b:7d:9a:37:16:5b:dc:9d:49:18:a6:
         86:b8:16:dc:cf:6b:9a:f5:ff:12:a0:3a:77:a7:a5:ac:1d:3b:
         20:d0:d1:f5:b5:e3:51:ea:c3:3f:60:b4:60:a7:09:e5:f4:d0:
         52:31:df:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:40 2025 by rpki-client