Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa
File:                     3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          YzseaW/hYElh7khxAdy3fsZ7ubaowhpJuXL4qopye9c=
Subject key identifier:   EA:CA:0A:FD:01:80:0F:9D:AE:DE:49:BB:A3:69:68:A8:39:62:7B:E6
Certificate issuer:       /CN=B6FA119FA160005A846B85E70D1592650CE34DE9
Certificate serial:       266A7573A36F24D41FED9D8DA29F23607D95DA2A
Authority key identifier: B6:FA:11:9F:A1:60:00:5A:84:6B:85:E7:0D:15:92:65:0C:E3:4D:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6FA119FA160005A846B85E70D1592650CE34DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa
Signing time:             Wed 14 Feb 2024 19:24:02 +0000
ROA not before:           Wed 14 Feb 2024 19:19:02 +0000
ROA not after:            Wed 12 Feb 2025 19:24:02 +0000
asID:                     262462
IP address blocks:        200.196.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6a:75:73:a3:6f:24:d4:1f:ed:9d:8d:a2:9f:23:60:7d:95:da:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6FA119FA160005A846B85E70D1592650CE34DE9
        Validity
            Not Before: Feb 14 19:19:02 2024 GMT
            Not After : Feb 12 19:24:02 2025 GMT
        Subject: CN=EACA0AFD01800F9DAEDE49BBA36968A839627BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8a:81:98:26:cb:91:8b:a2:20:a7:1b:96:3a:
                    78:77:8a:04:13:06:6a:fb:02:62:b2:66:0e:93:e3:
                    15:52:ed:07:1c:69:f6:b1:61:eb:72:94:bb:9f:98:
                    86:66:8e:f6:b6:da:73:6d:0b:69:be:74:32:05:d8:
                    5a:16:78:bf:68:e9:8c:17:07:c7:ef:26:e3:6d:9b:
                    39:19:2c:29:c1:41:68:4a:f7:99:3f:94:4d:57:07:
                    0e:62:3d:6d:74:59:bd:05:c2:51:a2:ef:2a:77:02:
                    74:4c:34:02:dd:07:78:e9:f4:f6:a5:a7:b0:d6:4b:
                    78:fa:cd:10:da:44:85:6d:fa:01:a8:97:ae:f2:5c:
                    bb:03:17:9f:f9:e9:d3:09:d3:99:4e:e6:c8:96:21:
                    2c:c5:d8:b7:f5:d1:88:25:91:a0:4f:5a:d6:3c:8c:
                    09:2b:da:8d:df:13:38:15:78:b5:85:9e:35:9e:40:
                    55:ea:ca:73:1b:d8:70:bc:a7:7a:9f:4e:35:cb:b8:
                    f6:5d:29:fe:0f:9f:20:87:ae:d8:bc:f0:9e:cb:eb:
                    48:5a:fe:57:e8:ba:43:ef:00:a1:7e:50:75:68:0d:
                    3a:85:14:ab:05:7d:9d:52:79:18:f0:74:e0:ae:89:
                    be:73:a5:1c:78:3d:b2:c7:85:d0:1b:cd:95:ac:c4:
                    91:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:0A:FD:01:80:0F:9D:AE:DE:49:BB:A3:69:68:A8:39:62:7B:E6
            X509v3 Authority Key Identifier:
                keyid:B6:FA:11:9F:A1:60:00:5A:84:6B:85:E7:0D:15:92:65:0C:E3:4D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/B6FA119FA160005A846B85E70D1592650CE34DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6FA119FA160005A846B85E70D1592650CE34DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:d0:d0:4e:4c:04:20:3f:27:28:0e:59:63:ef:c0:ef:b0:ee:
         c7:07:38:5d:eb:0c:56:83:65:a1:cf:09:88:49:47:7d:c7:34:
         a4:f7:1b:5b:96:80:45:d3:ab:81:77:6c:97:a7:3a:c3:66:ac:
         f3:da:36:1c:06:a1:b3:04:a7:f2:d5:f4:33:51:e5:60:8b:68:
         8c:21:9e:8b:e8:3e:66:a8:3b:e3:57:06:f8:38:b2:c4:54:bb:
         85:85:3d:59:da:53:b0:74:db:01:33:3e:85:c9:4b:55:fd:56:
         1b:0e:08:86:e0:38:06:e9:df:92:d7:7e:a7:3b:1d:50:e6:b4:
         98:4c:66:17:2b:a5:5b:4a:16:8d:b5:74:12:bc:76:a3:d6:95:
         22:8b:df:d4:b4:1f:c5:8e:21:d9:f1:84:35:bc:25:6b:f8:3e:
         f2:d3:b4:09:b1:7f:80:69:48:7e:69:11:ab:82:38:22:59:2c:
         78:26:9c:62:13:07:07:b2:44:84:a4:64:c4:58:24:c2:07:ea:
         2b:30:fe:6b:e1:64:68:94:aa:d0:22:17:0c:23:26:4d:75:1f:
         70:31:e2:46:ad:81:f9:f5:09:29:bd:5a:4a:63:83:17:8d:af:
         d2:76:2b:f7:81:e4:ac:f9:6e:2a:5d:ce:3a:92:a9:73:22:cc:
         55:7f:8c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:40:57 2025 by rpki-client