Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/3230302e32332e3138302e302f32322d3234203d3e203631393332.roa
File:                     3230302e32332e3138302e302f32322d3234203d3e203631393332.roa (raw, json)
Hash identifier:          TENGnoTd8OJN2JpYGC7+bu/jAardoekxcE2q3hnJKqk=
Subject key identifier:   07:48:6D:D5:48:AE:5D:0D:9C:4C:D7:8E:B9:C0:A3:56:54:EA:64:64
Certificate issuer:       /CN=DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907
Certificate serial:       47C3A4FB89F6F665C2321FDEF82D91F71860D914
Authority key identifier: DA:35:6B:6D:E9:FF:AE:56:64:C7:73:DD:2B:7E:A0:D6:18:6F:39:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/3230302e32332e3138302e302f32322d3234203d3e203631393332.roa
Signing time:             Mon 23 Oct 2023 15:29:14 +0000
ROA not before:           Mon 23 Oct 2023 15:24:14 +0000
ROA not after:            Mon 21 Oct 2024 15:29:14 +0000
asID:                     61932
IP address blocks:        200.23.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c3:a4:fb:89:f6:f6:65:c2:32:1f:de:f8:2d:91:f7:18:60:d9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907
        Validity
            Not Before: Oct 23 15:24:14 2023 GMT
            Not After : Oct 21 15:29:14 2024 GMT
        Subject: CN=07486DD548AE5D0D9C4CD78EB9C0A35654EA6464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:82:ba:f7:df:8b:3a:72:67:46:42:19:91:
                    a4:36:39:7f:ee:91:ac:4b:fc:56:8c:a2:cb:05:f1:
                    a2:40:fc:65:89:8f:d2:a9:09:cf:e4:50:e3:93:46:
                    88:3d:ee:ec:f7:c8:57:95:e4:b2:08:e4:bf:33:f7:
                    35:bf:94:58:29:75:77:cc:e4:06:94:40:c8:38:dc:
                    d1:cc:23:0c:83:c9:7c:77:ac:9c:a2:1a:2b:94:19:
                    96:78:2e:d2:2e:fb:c6:d1:3d:38:90:a2:01:5d:94:
                    83:5e:24:d2:32:29:03:ac:c5:92:a0:63:34:10:24:
                    38:df:c7:52:56:26:cd:67:13:a5:6d:0d:9c:fd:7e:
                    a7:2b:c9:28:96:6d:9a:cd:23:41:0f:e0:f7:f0:ef:
                    4f:55:7b:63:f1:69:de:d9:b0:d4:0a:18:3d:17:b0:
                    07:1b:26:0b:e9:52:67:3e:8a:92:db:6b:d4:23:17:
                    1f:60:b2:6f:73:38:e4:99:58:12:7f:f7:d7:a3:0a:
                    2e:51:4c:7b:26:fb:03:91:3d:5c:b1:ba:91:c5:43:
                    9e:44:9d:3d:74:70:a5:dd:ac:17:3b:d2:c1:ad:0a:
                    e9:af:5e:f8:22:b2:ba:43:75:13:7b:91:06:ee:89:
                    d3:91:b9:3e:ee:66:4f:f9:72:ef:d8:36:37:54:77:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:48:6D:D5:48:AE:5D:0D:9C:4C:D7:8E:B9:C0:A3:56:54:EA:64:64
            X509v3 Authority Key Identifier:
                keyid:DA:35:6B:6D:E9:FF:AE:56:64:C7:73:DD:2B:7E:A0:D6:18:6F:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/3230302e32332e3138302e302f32322d3234203d3e203631393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:d5:66:63:dc:ed:f4:b1:e3:68:1b:bf:04:95:be:7d:1b:a6:
         57:83:52:52:2d:4e:bd:99:51:78:d1:79:08:68:71:5c:a8:63:
         34:fb:c3:7e:25:6f:78:0b:a3:56:84:8a:ec:33:15:aa:41:26:
         e5:e8:51:1d:dc:99:97:bf:1f:da:c5:0d:0c:fb:e9:d4:d3:fd:
         b0:2f:a2:00:19:b5:7b:69:a4:f3:6b:c8:b9:87:12:49:08:ec:
         8a:a5:fa:c7:59:e8:1e:15:da:05:09:12:66:c3:79:9a:8f:6d:
         fd:73:8d:ce:19:df:52:db:41:9f:12:59:12:35:75:75:61:4a:
         52:86:9c:3c:47:a9:50:8d:a9:4d:f6:55:c1:26:f5:a2:bd:a5:
         a4:d7:44:95:89:ab:0d:df:48:92:40:fd:27:11:6b:e8:52:33:
         3b:af:18:38:92:16:f7:b5:23:d2:7c:3d:3c:97:18:72:3f:0d:
         b3:bc:b3:32:56:1f:a1:01:c0:f3:6e:0a:40:4e:b0:d0:f4:f9:
         68:4e:ef:a0:52:15:7a:66:9b:fa:c5:66:e9:73:58:0a:16:4d:
         27:dc:b0:79:da:b4:96:a3:83:8b:9e:94:ce:cd:e3:a0:6d:ce:
         eb:7b:ac:19:e0:2e:b7:84:e8:8a:fe:27:58:92:13:e2:a9:ca:
         0f:82:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:51 2025 by rpki-client