Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32342d3234203d3e20323731343233.roa
File:                     3230302e33362e3139362e302f32342d3234203d3e20323731343233.roa (raw, json)
Hash identifier:          CX4q6L+ByoVNjELfb7YMKgR4VRgRX1v5m1YNsspvYBQ=
Subject key identifier:   B5:03:B5:4B:48:5A:BA:7E:5D:2D:0B:45:F4:C8:A4:5B:2A:9A:72:2D
Certificate issuer:       /CN=D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74
Certificate serial:       3F85D3539F708BFAC0CD107E9193A9EF0C7694FB
Authority key identifier: D0:EF:0D:E2:C9:A8:B3:47:D2:F9:1A:1A:82:A7:B5:53:AF:6B:0A:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32342d3234203d3e20323731343233.roa
Signing time:             Wed 10 Jan 2024 13:59:26 +0000
ROA not before:           Wed 10 Jan 2024 13:54:26 +0000
ROA not after:            Wed 08 Jan 2025 13:59:26 +0000
asID:                     271423
IP address blocks:        200.36.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:85:d3:53:9f:70:8b:fa:c0:cd:10:7e:91:93:a9:ef:0c:76:94:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74
        Validity
            Not Before: Jan 10 13:54:26 2024 GMT
            Not After : Jan  8 13:59:26 2025 GMT
        Subject: CN=B503B54B485ABA7E5D2D0B45F4C8A45B2A9A722D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:27:90:37:c6:de:ba:05:95:1b:7a:9b:d5:
                    80:8d:57:6b:97:0f:d4:ab:58:8d:be:90:09:7b:e5:
                    54:c3:96:75:1f:a8:0d:cd:11:fe:53:f6:8c:83:28:
                    50:7d:76:83:7e:f5:56:0f:ad:ea:9f:34:98:c9:82:
                    5f:af:cc:2f:40:f6:cc:37:6a:f8:3e:5e:67:d0:a7:
                    f7:15:8c:af:d0:c9:89:50:45:e8:76:92:96:55:a0:
                    98:70:f0:56:74:95:5e:da:ec:e8:ef:52:5d:6e:ad:
                    6b:ab:65:57:81:74:25:fe:c1:f1:9e:47:1b:93:ef:
                    13:e3:ba:fa:ee:ba:df:1b:8b:2d:5d:7d:b3:4e:cb:
                    ab:68:14:2a:10:51:53:7b:92:e3:3a:92:54:99:b4:
                    f0:4d:2f:09:4c:88:79:18:d5:18:e3:cd:0f:92:f1:
                    2e:26:40:9e:54:7d:90:8d:77:12:1b:5a:d1:a5:11:
                    9f:d2:15:92:2f:6f:d0:8a:c7:d1:df:d6:e5:13:5c:
                    e3:f4:21:da:40:8b:a8:57:f4:12:fe:65:dd:ba:a2:
                    49:ca:4c:d3:1f:18:e9:32:91:6b:a1:8c:8e:f7:00:
                    c2:f2:88:1b:8b:32:db:b3:95:86:33:a5:3e:f6:07:
                    90:58:56:61:a4:2e:0b:68:45:2d:2b:56:17:6f:42:
                    01:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:03:B5:4B:48:5A:BA:7E:5D:2D:0B:45:F4:C8:A4:5B:2A:9A:72:2D
            X509v3 Authority Key Identifier:
                keyid:D0:EF:0D:E2:C9:A8:B3:47:D2:F9:1A:1A:82:A7:B5:53:AF:6B:0A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32342d3234203d3e20323731343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:03:1d:bf:6e:69:ff:63:9f:c7:14:e3:ec:35:fe:a1:eb:3d:
         2a:96:fd:80:82:55:96:cd:05:c7:82:2c:64:c8:f2:b9:8d:56:
         da:8a:9a:ba:08:77:00:bf:eb:e2:86:f2:5a:ba:78:88:1b:13:
         2b:2a:5f:bd:de:3d:d3:45:b7:7d:04:b8:10:bd:b0:de:a7:d3:
         0e:cf:19:a2:03:de:f8:f2:33:cc:48:bd:44:5e:29:99:6c:1f:
         9f:45:ec:ec:85:0a:46:23:af:22:4d:df:2a:85:07:38:9a:34:
         8c:c9:cd:46:36:f6:5d:98:0b:a2:e9:64:78:62:e3:64:a4:e6:
         d2:a0:41:7e:51:0f:1a:dc:30:2a:8e:6d:2a:ff:9f:ca:23:b7:
         9a:6f:6c:ab:b6:09:c8:a2:36:4d:42:44:41:94:63:c7:70:f6:
         28:c9:dc:e6:fc:33:96:d4:50:5a:54:8b:a0:6c:9f:b3:83:6c:
         ba:55:22:0c:5c:89:3f:d2:96:8b:8f:44:c7:71:25:d9:33:5d:
         39:f6:0c:3f:aa:0d:6a:ec:d7:c3:1a:ef:d0:7a:ff:9f:e3:4f:
         cd:e3:21:c4:9e:51:31:8b:2b:8b:86:9b:99:34:ac:58:70:e8:
         ff:57:c2:9e:86:0b:10:f2:0c:4c:5b:1f:e8:31:b8:28:cc:08:
         c8:39:a7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:06 2025 by rpki-client