Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138302e302f32342d3234203d3e20323731363433.roa
File:                     3230302e3139342e3138302e302f32342d3234203d3e20323731363433.roa (raw, json)
Hash identifier:          DBzgpD6AaMMfL2gkvovguZMaVpFmPK9sok2/mqhEW9o=
Subject key identifier:   98:F0:84:B9:45:8F:DB:30:D6:83:B9:FB:FC:F2:00:BE:DC:0E:7D:50
Certificate issuer:       /CN=A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228
Certificate serial:       099FE3E2286DC1C88C251BDC59F993F23E7AAC8D
Authority key identifier: A5:AD:02:60:80:AD:9F:E5:5C:60:BE:DF:E7:4E:0C:A8:7D:7B:F2:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138302e302f32342d3234203d3e20323731363433.roa
Signing time:             Tue 24 Oct 2023 04:36:56 +0000
ROA not before:           Tue 24 Oct 2023 04:31:56 +0000
ROA not after:            Tue 22 Oct 2024 04:36:56 +0000
asID:                     271643
IP address blocks:        200.194.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9f:e3:e2:28:6d:c1:c8:8c:25:1b:dc:59:f9:93:f2:3e:7a:ac:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228
        Validity
            Not Before: Oct 24 04:31:56 2023 GMT
            Not After : Oct 22 04:36:56 2024 GMT
        Subject: CN=98F084B9458FDB30D683B9FBFCF200BEDC0E7D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:94:ea:79:60:d0:c7:6b:6b:6b:0c:56:ee:1b:
                    5f:ec:4b:85:60:be:b0:21:02:a2:8d:44:7b:95:39:
                    f4:c9:d2:a9:58:75:ed:6a:d7:fa:99:02:b7:e2:9c:
                    bb:3a:b3:35:f3:13:ec:6f:ca:1f:c6:52:77:38:83:
                    f8:6e:3b:0b:0e:b6:fb:67:b6:39:1a:aa:1c:73:7b:
                    2c:53:36:83:87:1c:08:3a:00:3a:34:23:f4:27:7e:
                    5f:02:b8:61:b9:82:e9:30:81:4d:38:6d:72:68:a9:
                    68:42:4a:a5:5e:7e:d8:d6:9f:44:72:52:87:f7:51:
                    ec:d9:a6:a1:67:4b:7b:ba:b2:37:06:b6:e6:20:c2:
                    25:ab:d4:f2:c9:e9:01:d6:6e:e7:aa:5f:f2:94:23:
                    6b:90:51:e6:1f:81:21:79:c1:91:4e:b6:74:51:52:
                    a4:4b:3e:24:f2:d5:59:19:76:b2:c7:8d:b7:e6:99:
                    c2:98:fd:c2:11:9b:94:c6:b6:e8:d2:38:c8:23:05:
                    d7:2b:0d:41:e3:a0:22:7b:0f:da:90:3e:95:b2:12:
                    f8:e7:aa:5c:bd:02:23:4c:1e:da:83:6e:7b:af:43:
                    f6:04:1b:2f:5c:c2:f2:22:38:fd:be:f2:c4:9b:0a:
                    2e:7b:0a:03:e3:43:36:de:0b:83:ee:2e:64:2d:9c:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F0:84:B9:45:8F:DB:30:D6:83:B9:FB:FC:F2:00:BE:DC:0E:7D:50
            X509v3 Authority Key Identifier:
                keyid:A5:AD:02:60:80:AD:9F:E5:5C:60:BE:DF:E7:4E:0C:A8:7D:7B:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138302e302f32342d3234203d3e20323731363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:e4:e5:44:5b:89:98:86:25:6f:0b:6f:44:19:fd:f7:83:02:
         48:c6:2b:73:a4:d5:8b:df:74:b1:c7:a7:ea:92:85:c3:3f:71:
         de:2f:6a:06:0a:68:a9:4c:7f:b4:48:a9:70:a7:31:a6:34:ae:
         b7:76:f5:6a:50:9d:f2:f8:b0:d7:c7:db:61:e2:3a:55:06:28:
         3d:9f:35:16:d6:4d:b7:ce:86:bb:ec:85:2e:3e:36:09:00:2a:
         fa:8a:64:22:f1:8d:e6:16:a1:9c:d5:11:ff:c0:a7:ff:f7:b9:
         8d:d8:5d:c8:87:fa:9e:26:9b:09:3a:e3:d4:cb:2d:90:b8:cd:
         6a:f7:68:1a:6d:2c:d0:e6:2a:ba:0c:15:84:21:a7:a1:25:4e:
         9b:dc:96:d1:cf:e7:29:ba:fb:8f:68:70:ab:6e:c3:f4:9b:04:
         29:9d:78:e3:11:a2:f4:88:82:c9:6b:50:af:a5:89:0a:62:9d:
         b7:a0:37:1c:d8:e4:c3:d2:e7:f5:6b:b0:a9:dc:9f:74:09:b9:
         02:14:91:be:26:53:0d:77:a8:82:ba:cb:32:73:78:a0:e6:14:
         8a:54:1c:9e:22:81:e5:62:e6:ef:43:4e:7d:be:96:01:b4:bc:
         07:e5:7c:23:8d:e1:43:3e:71:9f:0d:ff:5f:03:5d:cd:f5:c1:
         5f:8b:f4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:22 2025 by rpki-client