Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa
File:                     3230302e3233332e39362e302f31392d3234203d3e203232363839.roa (raw, json)
Hash identifier:          mSaOz6BTYvhSc8jkHjlEGyLEEIi81g8cQcZ8uyW8D1k=
Subject key identifier:   64:E3:BE:52:62:12:80:EC:63:73:28:72:3D:77:B1:C4:32:D6:45:47
Certificate issuer:       /CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
Certificate serial:       08A5A12E964D1F983F5DBF101E8B0B59EDB4E616
Authority key identifier: FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa
Signing time:             Fri 27 Aug 2021 14:18:01 +0000
ROA not before:           Fri 27 Aug 2021 14:13:01 +0000
ROA not after:            Fri 26 Aug 2022 14:18:01 +0000
asID:                     22689
IP address blocks:        200.233.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a5:a1:2e:96:4d:1f:98:3f:5d:bf:10:1e:8b:0b:59:ed:b4:e6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
        Validity
            Not Before: Aug 27 14:13:01 2021 GMT
            Not After : Aug 26 14:18:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:56:38:b7:0e:87:2d:75:ac:9f:45:15:ba:
                    a2:3f:e2:07:66:64:8e:de:e7:0a:74:ab:b1:b1:b0:
                    a7:e5:aa:3b:54:3d:15:d6:3d:73:22:69:d2:2b:79:
                    ad:2e:21:43:a2:63:20:7b:9a:00:45:df:2b:0c:13:
                    2c:d8:cf:51:da:ee:bf:45:17:8f:ef:56:7c:b2:00:
                    29:26:bd:5e:e0:56:64:ec:c6:e1:55:9f:5c:9c:53:
                    cd:d7:a3:ee:a9:64:35:f4:dc:0d:11:85:14:f8:0c:
                    64:ff:b1:d0:33:4d:1e:04:09:28:05:79:b0:47:c4:
                    4c:04:2b:3f:d2:52:0d:f2:f8:4f:c8:3a:f2:62:1f:
                    4d:cf:38:f4:d0:37:2e:ba:25:df:2d:08:ad:46:e7:
                    e8:2b:96:0c:45:05:d0:8d:97:70:97:91:19:9d:8e:
                    be:5c:d9:53:72:dd:3f:9d:c5:34:ac:ac:a8:18:11:
                    80:c1:f7:2e:19:68:d1:47:53:5d:e7:dd:4e:d6:45:
                    71:ce:59:a7:c8:f9:ee:33:7d:77:90:38:8f:ac:de:
                    9a:43:27:9c:7e:e6:04:e9:a3:a6:2a:7e:a7:68:31:
                    68:0e:7a:e3:d0:b1:07:30:b4:00:c3:ab:90:a9:00:
                    a1:21:6d:46:5a:82:82:f3:bf:eb:81:73:4f:23:9c:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E3:BE:52:62:12:80:EC:63:73:28:72:3D:77:B1:C4:32:D6:45:47
            X509v3 Authority Key Identifier:
                keyid:FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:14:ad:47:2d:7f:6e:93:39:b7:b9:0c:bc:e2:65:c9:02:23:
         3e:68:7f:72:e6:3d:47:80:8f:db:c7:3a:d9:f7:21:c7:74:33:
         79:13:21:fc:30:51:d2:87:f0:3e:28:a3:8e:c2:5e:eb:99:5e:
         f0:31:92:18:a8:e6:00:02:24:66:c3:6d:98:39:aa:78:52:db:
         1d:78:8e:8e:6a:1a:f9:7c:d8:14:22:bb:f2:3c:b7:1b:b5:d2:
         2d:d6:ed:89:4c:ae:e5:a5:4f:60:6f:00:a6:66:d8:ec:89:07:
         a6:9e:e7:25:5c:bd:a4:75:5e:7f:c5:49:43:18:f8:6e:dd:7d:
         cc:9d:06:6e:82:13:76:b4:97:4c:23:ba:c1:ac:62:c9:5f:bf:
         a1:f1:0f:ad:be:b3:7b:ff:c8:ab:13:74:23:86:54:04:e5:57:
         54:89:a3:97:2d:f6:5a:d7:a4:2c:af:05:55:95:3d:93:75:8f:
         df:4a:6e:16:f2:dc:b8:19:6d:1b:b3:8a:ce:e7:ac:c7:91:3f:
         82:a3:d6:9e:a4:39:12:09:ee:c4:72:60:94:71:fa:5a:dc:d1:
         e9:55:42:fb:ad:f0:50:3c:60:2b:74:83:02:3d:9f:55:5e:6a:
         7a:ee:d6:08:0a:80:40:1f:25:bc:70:a2:d4:92:5d:c4:c7:86:
         78:8a:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:36 2025 by rpki-client