Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/3230302e32332e3138302e302f32322d3332203d3e203631393332.roa
File:                     3230302e32332e3138302e302f32322d3332203d3e203631393332.roa (raw, json)
Hash identifier:          EC0jkpWZPIuGKri9TsJgkXS/hu8hJz107dnG/ql1pGc=
Subject key identifier:   47:76:32:F0:C3:D9:CA:51:2A:3D:77:34:76:D8:87:D9:B4:B2:84:EC
Certificate issuer:       /CN=04BE47C3E87D4501CC750E23D72CB9F4F7D1CFC2
Certificate serial:       05B90A52406D573298E310BAEEF307CB6F305DA0
Authority key identifier: 04:BE:47:C3:E8:7D:45:01:CC:75:0E:23:D7:2C:B9:F4:F7:D1:CF:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BE47C3E87D4501CC750E23D72CB9F4F7D1CFC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/3230302e32332e3138302e302f32322d3332203d3e203631393332.roa
Signing time:             Tue 03 Oct 2023 15:05:02 +0000
ROA not before:           Tue 03 Oct 2023 15:00:02 +0000
ROA not after:            Tue 01 Oct 2024 15:05:02 +0000
asID:                     61932
IP address blocks:        200.23.180.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b9:0a:52:40:6d:57:32:98:e3:10:ba:ee:f3:07:cb:6f:30:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04BE47C3E87D4501CC750E23D72CB9F4F7D1CFC2
        Validity
            Not Before: Oct  3 15:00:02 2023 GMT
            Not After : Oct  1 15:05:02 2024 GMT
        Subject: CN=477632F0C3D9CA512A3D773476D887D9B4B284EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:2d:2b:a6:fe:64:9b:c3:b1:ae:18:33:ea:
                    dc:f1:da:2a:ed:66:57:bf:d5:61:b4:e9:ef:37:fa:
                    0b:92:e1:71:7d:9d:99:4b:3d:7f:1e:4b:cb:0d:eb:
                    85:b3:4f:56:70:10:a0:de:ab:fb:d4:48:21:21:77:
                    62:58:3f:09:5e:65:26:c9:60:fc:d3:6f:86:e8:0b:
                    e5:ef:7a:28:aa:f1:3c:1a:88:47:a9:da:43:23:5f:
                    f0:46:f6:90:aa:68:e6:ea:32:61:4c:e7:58:da:7c:
                    d7:bc:86:6b:48:13:7a:fc:04:cb:42:da:27:7e:12:
                    3c:60:80:56:ea:73:a6:be:65:20:84:14:1a:7e:a4:
                    27:c8:3b:5e:fd:2a:ef:a5:7b:f2:14:ac:e7:cc:4f:
                    9e:61:fd:19:e6:a5:cd:f9:2b:6e:66:2f:fe:c4:83:
                    31:52:e9:3d:e7:ea:94:31:5c:9f:d1:d4:b4:82:4d:
                    51:e5:1d:b6:05:87:a9:5c:ca:b3:ff:47:ef:7b:12:
                    69:67:0a:a1:b1:77:35:cb:a5:90:a5:58:2c:27:2e:
                    ea:08:53:ef:68:30:95:cd:b1:87:39:53:54:a1:d3:
                    ae:26:c3:ed:01:2f:1e:7e:61:74:42:b8:c4:f9:58:
                    83:75:eb:20:b1:56:79:ab:7d:5c:54:1c:d1:e2:84:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:76:32:F0:C3:D9:CA:51:2A:3D:77:34:76:D8:87:D9:B4:B2:84:EC
            X509v3 Authority Key Identifier:
                keyid:04:BE:47:C3:E8:7D:45:01:CC:75:0E:23:D7:2C:B9:F4:F7:D1:CF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/04BE47C3E87D4501CC750E23D72CB9F4F7D1CFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BE47C3E87D4501CC750E23D72CB9F4F7D1CFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/3230302e32332e3138302e302f32322d3332203d3e203631393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:cb:2b:2f:01:b6:b1:53:9c:94:94:bf:88:36:77:8a:0b:a7:
         3e:75:af:2e:f9:a1:f0:6b:87:0e:1d:49:22:9d:bf:01:fb:ab:
         24:c8:e5:c1:2e:66:5d:32:eb:9d:18:89:61:3f:26:52:07:b3:
         b7:7c:cc:8b:4d:74:4c:8a:34:1a:15:e3:73:dd:f5:58:a2:d4:
         09:5d:d1:da:ad:4c:ec:e5:22:33:c6:90:94:88:a1:45:58:3a:
         7d:16:66:2f:ba:f5:b0:fe:91:8c:0f:b2:fb:c8:3a:c0:70:a4:
         ea:a4:73:ba:87:2c:ff:0f:eb:57:98:bf:af:61:94:5d:45:35:
         ef:d4:81:64:20:6f:51:b5:10:5c:ba:15:07:64:42:29:5a:16:
         e8:a8:d3:01:01:4b:19:94:6d:cf:4a:e9:06:02:b1:b9:02:c9:
         26:2f:83:79:dd:f9:8e:c9:79:49:84:d3:19:59:ae:87:1d:ec:
         d2:dc:69:f3:f0:dc:b2:c0:36:82:ec:1b:46:d5:45:1d:de:01:
         40:ac:2e:43:f4:28:b4:09:cc:f6:bb:9e:1e:f5:40:72:e2:c1:
         b4:f6:79:2f:7b:6e:b6:c4:8c:d9:d8:7e:bb:de:6e:31:3f:6c:
         ba:22:32:68:21:5f:1a:a7:fa:56:a5:37:16:ea:ff:24:86:46:
         6b:18:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:50 2025 by rpki-client