Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32332d3233203d3e20323733363633.roa
File:                     3230302e3132342e37382e302f32332d3233203d3e20323733363633.roa (raw, json)
Hash identifier:          6cub9Ckqg0w8BDXKPd2WHy2DZW9Nihp63D8/+faWF1E=
Subject key identifier:   83:4B:14:F4:21:2D:3F:4E:54:43:8C:4E:1D:89:AA:64:7A:79:99:7D
Certificate issuer:       /CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
Certificate serial:       6DF6A81C7B272EF9995056F9F4F9E42DBBB6BEA7
Authority key identifier: DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32332d3233203d3e20323733363633.roa
Signing time:             Fri 21 Mar 2025 19:04:28 +0000
ROA not before:           Fri 21 Mar 2025 18:59:28 +0000
ROA not after:            Fri 20 Mar 2026 19:04:28 +0000
asID:                     273663
IP address blocks:        200.124.78.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f6:a8:1c:7b:27:2e:f9:99:50:56:f9:f4:f9:e4:2d:bb:b6:be:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
        Validity
            Not Before: Mar 21 18:59:28 2025 GMT
            Not After : Mar 20 19:04:28 2026 GMT
        Subject: CN=834B14F4212D3F4E54438C4E1D89AA647A79997D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:f8:b3:08:50:85:af:5d:3d:ee:c9:ef:5c:
                    bb:32:f7:39:df:59:23:eb:38:57:49:ce:23:6d:d1:
                    e2:4d:6f:34:e3:b3:9e:3f:f0:eb:f5:d3:bf:55:4e:
                    e4:ae:33:ba:18:ee:d0:0d:95:04:d9:16:73:70:d2:
                    62:cb:3b:cd:e5:c4:6b:a1:f3:8c:ff:c3:27:8e:1d:
                    f1:2b:56:e0:1e:28:72:9a:1f:0a:78:99:b2:79:43:
                    51:13:ac:be:af:08:3e:fe:8d:88:c9:a1:79:ee:95:
                    e7:55:0a:0c:fa:0a:67:5b:bf:b2:09:23:3a:31:d4:
                    00:f6:f6:de:2f:70:81:2a:03:57:3b:6f:6c:11:99:
                    bf:17:d5:da:fc:82:25:1a:35:ff:59:db:b4:78:25:
                    92:10:bb:c5:91:29:37:2b:fb:c3:0d:96:d2:82:ca:
                    d0:48:01:1f:02:f3:5e:46:69:4e:a8:19:7a:fa:bb:
                    62:64:f1:88:f8:1b:4a:8f:9d:e1:c9:e7:2e:b7:4f:
                    de:81:cd:77:30:88:a1:56:2b:6c:c8:71:25:67:bd:
                    62:cb:9e:a7:22:20:eb:e7:62:35:6f:fc:f6:05:a6:
                    65:0d:c9:7d:8e:84:cb:4d:77:7b:7c:25:cf:3d:8d:
                    c1:e4:0e:a2:e2:42:aa:fc:9c:94:04:f7:05:a6:99:
                    7c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4B:14:F4:21:2D:3F:4E:54:43:8C:4E:1D:89:AA:64:7A:79:99:7D
            X509v3 Authority Key Identifier:
                keyid:DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32332d3233203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:25:fa:32:c7:7c:db:e0:31:b6:8e:fa:f3:12:19:50:24:e7:
         82:90:e3:80:5e:40:5d:b5:11:d6:05:29:b8:70:51:65:7c:b3:
         54:1c:3f:f1:98:85:37:33:80:31:10:a6:25:3c:18:4a:ad:1e:
         e2:82:ad:25:22:4b:60:b1:20:a0:42:9a:40:57:62:0b:ac:1c:
         56:c1:80:75:89:3d:82:0c:b3:f9:a1:d4:ac:e1:6e:07:d2:f4:
         5a:d6:ba:bf:42:b4:f4:ce:2a:9a:47:86:d5:f9:45:62:d7:97:
         72:27:37:f4:a8:2c:5b:7d:72:e9:02:0b:21:49:e4:a1:73:33:
         1e:d6:99:e0:b7:77:ab:4e:65:96:5a:5e:3c:26:a2:dc:7b:d2:
         6e:38:fb:9d:84:f9:8c:8e:07:ca:6e:33:8b:79:26:4f:1d:e5:
         e1:a8:64:a0:11:bf:11:1f:6e:5e:1d:01:de:fc:b9:1e:8b:ee:
         38:58:30:eb:91:83:fa:6e:af:1c:3f:14:f7:39:dc:21:13:9b:
         85:03:8f:e4:a9:25:91:c0:28:ed:a6:01:2a:c3:09:f7:74:ab:
         d2:cb:19:5f:e5:80:37:c1:cc:14:26:d3:11:05:96:92:15:ea:
         42:e7:51:b1:ea:dc:bd:31:8a:e3:90:9b:c0:21:6b:f2:cb:03:
         72:da:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:34:38 2025 by rpki-client