Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138312e302f32342d3234203d3e20323731363433.roa
File:                     3230302e3139342e3138312e302f32342d3234203d3e20323731363433.roa (raw, json)
Hash identifier:          6CvAUc72JbMJVIYe7hJHn3+sqmkSHR/VrnPRDEoUHXk=
Subject key identifier:   33:FC:4E:B7:F6:C3:3C:09:61:3D:5F:F3:86:55:B8:3A:7C:3C:D4:A4
Certificate issuer:       /CN=A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228
Certificate serial:       1A24E61C0D37F45FD06A313F456AFB8A8B09DA21
Authority key identifier: A5:AD:02:60:80:AD:9F:E5:5C:60:BE:DF:E7:4E:0C:A8:7D:7B:F2:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138312e302f32342d3234203d3e20323731363433.roa
Signing time:             Tue 24 Oct 2023 04:37:10 +0000
ROA not before:           Tue 24 Oct 2023 04:32:10 +0000
ROA not after:            Tue 22 Oct 2024 04:37:10 +0000
asID:                     271643
IP address blocks:        200.194.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:24:e6:1c:0d:37:f4:5f:d0:6a:31:3f:45:6a:fb:8a:8b:09:da:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228
        Validity
            Not Before: Oct 24 04:32:10 2023 GMT
            Not After : Oct 22 04:37:10 2024 GMT
        Subject: CN=33FC4EB7F6C33C09613D5FF38655B83A7C3CD4A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:4e:e5:c3:4e:26:c7:af:72:ee:a9:47:13:
                    3a:9d:ee:ed:3c:df:eb:3e:80:4a:a7:8a:4e:1e:6c:
                    11:79:43:04:8e:80:f6:ca:d2:1a:3d:e7:bf:c6:ba:
                    fa:5c:14:a7:c8:db:f0:6e:11:5e:aa:d3:99:1e:89:
                    20:95:0e:1f:6f:5d:b5:23:0e:6f:34:e3:7e:31:29:
                    bc:f5:a4:0b:d2:2f:c1:6c:a1:07:26:0a:5a:3d:cf:
                    16:a8:34:51:34:7b:f0:60:8c:70:9f:67:df:6d:88:
                    9c:64:d0:79:40:e9:af:34:00:02:d3:cc:e9:5e:94:
                    cc:3e:06:43:f1:db:8e:10:70:7b:34:07:0b:59:b2:
                    be:cc:eb:0f:f8:33:a5:6d:ef:b7:9e:e6:f1:f0:fe:
                    4c:fb:57:42:f9:14:f4:b6:7f:54:02:01:8a:b4:ce:
                    08:83:01:eb:2c:ce:3f:a1:12:2e:b9:c4:ab:02:49:
                    62:1e:e7:35:c8:f5:cc:ae:d3:35:5f:e2:07:2e:aa:
                    16:56:fc:10:5f:f3:0c:7e:ff:a0:1c:0f:bf:77:1e:
                    d6:bb:ec:e2:22:b3:2b:14:d8:62:ea:a0:23:f9:40:
                    60:2d:81:48:e7:be:23:e8:e6:03:7a:8c:20:bf:1a:
                    15:41:c0:b7:6c:5c:33:db:09:fb:7e:be:ce:a1:29:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FC:4E:B7:F6:C3:3C:09:61:3D:5F:F3:86:55:B8:3A:7C:3C:D4:A4
            X509v3 Authority Key Identifier:
                keyid:A5:AD:02:60:80:AD:9F:E5:5C:60:BE:DF:E7:4E:0C:A8:7D:7B:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138312e302f32342d3234203d3e20323731363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:81:3c:cb:88:9d:47:e2:31:ac:0f:09:7f:ca:9e:f3:e1:ab:
         4d:4f:0c:ef:32:6c:c4:f0:5b:83:65:74:b2:46:f0:50:6b:f0:
         42:87:f6:2c:72:e3:95:14:6b:6f:91:0d:ae:c8:87:ab:59:4e:
         4d:32:b4:24:d1:0d:32:6e:d2:0a:60:e8:c8:e0:43:9e:a2:e3:
         6b:f9:6e:06:4f:60:53:4a:75:f8:14:af:ad:04:35:8f:15:d2:
         98:a7:35:b2:43:db:7f:ba:fb:9b:ef:1c:fd:3c:8d:77:d9:f9:
         c2:9c:7a:c1:d0:9e:8d:ef:d1:b3:9d:0a:b9:f0:a3:b9:19:bb:
         8b:a7:27:bd:21:cf:93:39:d9:fe:30:b7:20:99:6a:f4:c3:47:
         1d:3f:e1:2d:62:0a:d3:00:de:da:0f:80:2a:dc:4e:02:25:cc:
         ad:e0:e1:1d:e7:cb:ce:8d:c7:43:17:96:13:0d:a7:36:d7:99:
         c7:bf:29:cf:29:f0:22:f1:8f:be:86:df:83:20:98:9f:d3:8f:
         dd:90:89:86:e4:71:75:ac:e7:11:cd:f0:dc:63:ef:43:db:0b:
         6c:72:5f:84:ea:39:5d:80:42:0f:e6:d0:b2:42:b4:a6:ad:db:
         f7:c9:66:43:39:fd:4e:4c:d6:d0:42:21:7d:ca:da:73:85:17:
         1a:06:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:00 2025 by rpki-client