Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232362e302f32342d3234203d3e20323730393331.roa
File:                     3230302e3134322e3232362e302f32342d3234203d3e20323730393331.roa (raw, json)
Hash identifier:          qAoavMV7MPO6LDVK54nyuvAAsa9Qiul6mI57BuTHaD8=
Subject key identifier:   3D:F8:1D:93:F1:02:93:5A:B8:59:95:99:BB:A8:F5:EE:3C:AC:FF:55
Certificate issuer:       /CN=DBB73F660469C2567ABB9FC0CA341D1CFD435875
Certificate serial:       095D04890EF1F27288C3AB16D8FC01E08CCAE05E
Authority key identifier: DB:B7:3F:66:04:69:C2:56:7A:BB:9F:C0:CA:34:1D:1C:FD:43:58:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB73F660469C2567ABB9FC0CA341D1CFD435875.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232362e302f32342d3234203d3e20323730393331.roa
Signing time:             Fri 04 Oct 2024 11:07:55 +0000
ROA not before:           Fri 04 Oct 2024 11:02:55 +0000
ROA not after:            Fri 03 Oct 2025 11:07:55 +0000
asID:                     270931
IP address blocks:        200.142.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5d:04:89:0e:f1:f2:72:88:c3:ab:16:d8:fc:01:e0:8c:ca:e0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB73F660469C2567ABB9FC0CA341D1CFD435875
        Validity
            Not Before: Oct  4 11:02:55 2024 GMT
            Not After : Oct  3 11:07:55 2025 GMT
        Subject: CN=3DF81D93F102935AB8599599BBA8F5EE3CACFF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:05:45:f3:90:c7:b3:bf:f6:3e:8e:0f:c8:
                    db:19:ac:58:f6:e2:bc:83:d0:8d:05:cb:09:8f:d0:
                    72:1d:39:47:0c:3f:6a:95:da:1e:71:f5:6a:ce:33:
                    a9:1a:a2:64:7e:54:2a:dd:4e:ce:64:ae:ca:d1:25:
                    1e:f4:ea:ad:12:ca:6a:21:6a:5f:a2:1f:ee:0e:1f:
                    2b:e3:2a:d1:ac:c0:dc:ee:fa:b4:30:a1:8c:03:e8:
                    4d:53:32:ba:83:3b:34:ab:ec:8a:21:3c:12:1d:de:
                    45:17:5f:8e:2f:b8:e3:93:09:88:9c:1d:b0:4c:e9:
                    78:f0:be:5f:f8:4f:40:29:7f:4f:e1:70:ae:ab:45:
                    c8:fb:c1:56:e5:51:08:07:b2:2d:9d:a0:e7:eb:e6:
                    df:88:05:79:94:fa:4b:9a:a7:28:d5:e2:6e:0e:d9:
                    da:8b:ff:93:1a:96:d5:03:41:87:2e:a2:c5:55:eb:
                    29:c7:39:bb:d2:45:97:44:c8:db:9f:3e:53:ae:61:
                    1b:97:81:51:26:da:0f:5d:7a:01:03:15:6c:d0:15:
                    5f:17:dc:20:8d:ba:6b:08:64:1c:ff:87:da:85:bf:
                    72:1b:93:16:5b:97:57:ae:e7:a9:66:0f:04:31:da:
                    ac:37:c7:5b:7f:f5:1b:2b:66:7b:81:b9:e2:d2:e3:
                    6f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F8:1D:93:F1:02:93:5A:B8:59:95:99:BB:A8:F5:EE:3C:AC:FF:55
            X509v3 Authority Key Identifier:
                keyid:DB:B7:3F:66:04:69:C2:56:7A:BB:9F:C0:CA:34:1D:1C:FD:43:58:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/DBB73F660469C2567ABB9FC0CA341D1CFD435875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB73F660469C2567ABB9FC0CA341D1CFD435875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232362e302f32342d3234203d3e20323730393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:ed:f1:80:8e:74:5a:f2:7e:d6:f8:e4:26:c7:cb:35:32:
         24:c6:ea:f5:06:b2:59:54:bc:b9:d2:f4:31:b5:28:92:55:75:
         b7:39:14:2f:34:3b:93:5a:6f:2c:dc:e1:d9:c4:9f:8e:84:6b:
         cc:ab:3f:d7:c9:52:d1:54:b3:23:ef:fb:56:3d:54:5d:1e:23:
         5e:b9:7c:29:cd:ad:50:7d:4f:4f:8b:29:f7:cb:16:ca:ce:ac:
         d4:37:40:8f:65:e8:d4:0b:f8:15:22:98:82:90:4b:5a:87:45:
         6a:d8:06:b4:bf:2a:fb:ed:ec:20:61:db:98:11:a1:3e:8c:c1:
         47:d4:31:46:91:83:9d:19:07:36:3e:18:0a:47:86:9f:63:eb:
         f9:92:42:4d:16:27:9f:c2:63:1e:79:9e:27:ad:e7:f5:c3:48:
         93:57:fd:56:4e:70:2c:74:2c:12:56:57:8d:2e:fc:5f:cb:d5:
         f5:da:a5:f3:bc:98:77:e2:5d:e2:8f:52:3f:42:75:f1:fd:84:
         46:6d:65:de:d3:c9:b5:e4:bb:70:41:fc:28:0c:dd:31:25:5f:
         f0:1f:7d:4a:8a:83:c6:30:d6:df:8a:00:47:e3:d8:90:9d:7d:
         58:80:26:43:f1:44:75:71:63:98:e7:1f:52:8e:79:e0:eb:4d:
         7e:3e:f7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:46:43 2025 by rpki-client