Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130342e302f32332d3233203d3e20323730343532.roa
File:                     3230302e37312e3130342e302f32332d3233203d3e20323730343532.roa (raw, json)
Hash identifier:          mWXDHgEMrJvWkiuyUxKvKnNDn+tGr7obhg92PTpRlrU=
Subject key identifier:   20:47:FC:6A:26:70:BC:6E:5D:B8:24:1D:FA:C8:A1:DE:3A:AE:7D:D0
Certificate issuer:       /CN=8E3851F43313167D4BDB68376AC94B4FD8516560
Certificate serial:       7C6709A6BAC811C3D895B4AE48EB7DD104E51A1A
Authority key identifier: 8E:38:51:F4:33:13:16:7D:4B:DB:68:37:6A:C9:4B:4F:D8:51:65:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E3851F43313167D4BDB68376AC94B4FD8516560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130342e302f32332d3233203d3e20323730343532.roa
Signing time:             Thu 21 Dec 2023 14:07:51 +0000
ROA not before:           Thu 21 Dec 2023 14:02:51 +0000
ROA not after:            Thu 19 Dec 2024 14:07:51 +0000
asID:                     270452
IP address blocks:        200.71.104.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:67:09:a6:ba:c8:11:c3:d8:95:b4:ae:48:eb:7d:d1:04:e5:1a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E3851F43313167D4BDB68376AC94B4FD8516560
        Validity
            Not Before: Dec 21 14:02:51 2023 GMT
            Not After : Dec 19 14:07:51 2024 GMT
        Subject: CN=2047FC6A2670BC6E5DB8241DFAC8A1DE3AAE7DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:56:23:c6:6a:d4:44:3c:d8:95:c5:a8:15:
                    c3:74:7a:6c:32:20:f7:5e:87:1f:fb:4f:24:f4:e6:
                    4b:72:53:e7:07:ab:b9:92:40:19:99:69:33:38:f4:
                    e7:f7:91:15:23:d9:8d:7d:52:f4:5f:6d:ef:b7:fd:
                    4a:cc:59:6f:ae:12:79:41:a3:c9:0a:58:82:56:c9:
                    bb:46:3c:1e:8d:41:53:8e:65:74:61:61:20:b0:b9:
                    fd:2e:a5:79:a1:39:c9:90:33:7a:c9:b2:fb:c2:a5:
                    3c:2f:b9:bf:01:11:17:70:1a:d8:f3:a4:d2:5e:1e:
                    de:d0:fa:f3:5d:cf:9b:52:c3:c6:c2:99:c5:60:ec:
                    3f:f8:4d:54:37:0d:9c:bc:9d:3b:98:5a:cb:5c:97:
                    5f:c0:4c:30:c3:53:b0:c3:37:48:e7:44:3c:98:ee:
                    9e:6c:e6:8a:6f:36:95:60:4b:73:cb:0c:00:1f:d7:
                    bf:5e:91:05:47:e8:5b:0b:f9:2b:12:b6:db:b7:e0:
                    36:4f:24:43:ed:9c:0a:13:45:07:07:8b:1e:4a:c2:
                    ae:28:47:f7:6b:2c:8a:8c:3f:44:25:69:bc:e9:d8:
                    9d:13:97:3d:41:73:e5:1d:ad:d9:17:61:0c:7c:c0:
                    83:1e:ba:58:84:e3:71:ce:bc:e5:8b:ab:77:6f:c9:
                    28:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:47:FC:6A:26:70:BC:6E:5D:B8:24:1D:FA:C8:A1:DE:3A:AE:7D:D0
            X509v3 Authority Key Identifier:
                keyid:8E:38:51:F4:33:13:16:7D:4B:DB:68:37:6A:C9:4B:4F:D8:51:65:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/8E3851F43313167D4BDB68376AC94B4FD8516560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E3851F43313167D4BDB68376AC94B4FD8516560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130342e302f32332d3233203d3e20323730343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:c0:87:c1:4a:0f:1e:25:9c:55:c2:52:63:b0:16:90:d7:a5:
         47:d1:36:8f:96:5d:cb:72:fc:2a:29:03:11:d5:c0:90:f3:6e:
         3d:ed:93:79:2d:fd:db:99:41:d7:30:71:a8:67:fe:63:62:77:
         97:9e:0f:04:09:bb:2c:73:3e:02:1d:34:27:ce:aa:8c:46:2c:
         ed:5f:fa:a2:41:ed:7b:2d:7b:55:33:e5:be:f1:74:56:23:3a:
         18:70:a9:59:ee:b0:da:5e:5c:33:2a:7a:aa:9f:72:b5:81:a8:
         90:be:48:d9:9f:dd:a5:61:fb:07:28:92:c8:08:e4:f6:5f:e0:
         74:59:91:4f:61:52:4b:f0:8b:a8:50:6c:7a:ce:d7:70:a1:2e:
         6b:f0:84:2e:9c:29:dd:7a:eb:7a:f9:ea:e1:35:6b:ab:91:38:
         20:90:41:da:b2:f3:6b:f9:26:40:bf:24:3a:71:bc:9a:94:d7:
         10:2f:a8:28:41:fd:12:34:44:2c:19:be:6a:35:4f:fb:5c:f8:
         60:be:6b:bb:df:2a:95:60:a4:e4:fa:d3:8b:4c:fc:ee:d7:1c:
         61:13:b2:b4:f0:1b:b8:31:c9:75:94:1c:c5:43:2a:f8:ea:ee:
         59:a9:33:20:0f:ff:60:21:60:fe:f3:c8:f7:de:1c:da:ae:f8:
         bb:c4:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:21:29 2025 by rpki-client