Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/3230302e3232392e38342e302f32322d3332203d3e203631373735.roa
File:                     3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (raw, json)
Hash identifier:          Lg7akBVg64j7DWEAkGTOoGbYqy6eZ66/+B9F9gzKgpE=
Subject key identifier:   81:84:9C:18:7D:E4:79:D5:D9:7A:16:82:12:97:96:3D:19:5E:0E:A5
Certificate issuer:       /CN=1F0DF3C10B489849F826B52958C15E39B8524EEB
Certificate serial:       49B31743BF2469F3282DF977D7D98D8001D09AE2
Authority key identifier: 1F:0D:F3:C1:0B:48:98:49:F8:26:B5:29:58:C1:5E:39:B8:52:4E:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F0DF3C10B489849F826B52958C15E39B8524EEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/3230302e3232392e38342e302f32322d3332203d3e203631373735.roa
Signing time:             Mon 08 Jan 2024 18:21:37 +0000
ROA not before:           Mon 08 Jan 2024 18:16:37 +0000
ROA not after:            Mon 06 Jan 2025 18:21:37 +0000
asID:                     61775
IP address blocks:        200.229.84.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b3:17:43:bf:24:69:f3:28:2d:f9:77:d7:d9:8d:80:01:d0:9a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F0DF3C10B489849F826B52958C15E39B8524EEB
        Validity
            Not Before: Jan  8 18:16:37 2024 GMT
            Not After : Jan  6 18:21:37 2025 GMT
        Subject: CN=81849C187DE479D5D97A16821297963D195E0EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:95:5b:2e:c0:d5:54:12:7d:34:c0:b2:ff:
                    85:9e:3c:e2:17:36:cc:6e:3e:eb:fa:b8:f0:d1:c2:
                    29:36:72:7c:81:a3:be:17:90:37:5d:ee:67:e5:ee:
                    5b:03:e7:89:1f:60:84:5b:38:1b:9f:29:24:6c:d4:
                    a1:1d:a0:3b:f8:58:e2:1e:95:d5:6a:3a:86:eb:c1:
                    a2:90:d0:53:02:6d:67:ba:1d:71:6f:79:95:54:6e:
                    b2:11:89:d6:8f:2c:1d:91:ac:ec:a9:3e:57:b9:46:
                    59:80:b3:87:2a:45:37:a4:27:82:78:f6:91:8a:6d:
                    d3:31:2c:ff:2d:80:54:9b:06:e0:d2:21:1d:cb:a1:
                    be:d4:98:55:93:8a:ea:00:e4:6a:ee:f4:eb:fa:4b:
                    62:0e:e9:7b:6a:ac:9b:06:2b:ab:8d:f2:31:fa:a8:
                    2a:a7:02:ec:ac:cd:08:e4:26:3b:58:1e:2a:83:41:
                    4a:6e:3d:64:2e:86:b3:eb:a4:fe:2f:cb:bb:68:d1:
                    97:85:1d:c0:dd:78:23:22:9c:a9:8d:13:73:55:91:
                    b9:cc:94:7a:fd:b1:0f:45:6d:22:64:cb:11:64:9d:
                    48:c1:31:77:89:bd:05:c8:9c:a1:29:1e:ec:ca:ba:
                    2e:a9:fd:03:96:aa:76:16:a9:e5:fe:eb:3a:10:27:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:84:9C:18:7D:E4:79:D5:D9:7A:16:82:12:97:96:3D:19:5E:0E:A5
            X509v3 Authority Key Identifier:
                keyid:1F:0D:F3:C1:0B:48:98:49:F8:26:B5:29:58:C1:5E:39:B8:52:4E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/1F0DF3C10B489849F826B52958C15E39B8524EEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F0DF3C10B489849F826B52958C15E39B8524EEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/3230302e3232392e38342e302f32322d3332203d3e203631373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c1:7b:6f:3f:ab:0a:c4:12:4b:b5:4f:f8:55:e0:fa:1e:4d:
         9c:69:35:09:84:c6:51:b7:ed:92:fb:d3:59:3a:3e:ac:c3:9d:
         95:b8:90:39:82:dc:e1:2a:fe:6f:3d:95:40:2a:4c:b6:3d:1a:
         37:de:d5:1c:1f:37:70:f8:89:5e:bd:bf:29:07:43:41:54:5b:
         e5:ab:89:98:e7:cc:6f:bb:00:6e:16:35:9b:be:d5:4a:be:e1:
         02:d1:92:43:cc:c5:5e:01:72:ce:5d:5f:71:e1:48:89:e0:0b:
         2a:b2:71:57:df:03:60:81:2a:ff:5f:66:b0:53:c4:d1:5a:59:
         ba:b2:1f:fd:c3:aa:55:34:66:48:bb:f5:f5:bf:07:3e:13:94:
         4b:dc:fb:b7:1c:ad:53:8e:9e:b0:a1:1c:7b:4e:d5:b0:32:58:
         a4:0e:5a:db:39:e1:78:a5:16:3b:03:75:20:81:aa:e3:9b:2b:
         94:61:89:58:f1:51:06:4c:f5:58:2e:18:28:b1:79:0c:76:62:
         06:3e:f5:98:c4:a7:58:bd:e3:8c:39:0a:a9:93:b3:28:2d:70:
         1d:7c:b0:0b:42:eb:4f:fc:73:e0:48:b9:4e:a3:5b:6e:05:3b:
         06:7c:1f:72:e4:bf:cf:78:b2:3b:bd:4d:4a:bf:6c:a1:9a:f2:
         a3:39:a6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:28 2025 by rpki-client