Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e302e302f32332d3234203d3e20323731303137.roa
File:                     3230302e3231392e302e302f32332d3234203d3e20323731303137.roa (raw, json)
Hash identifier:          eESu9Ni6dpMC20ZfVdXlePLaLm/3IXW/Y6voB6JUTOs=
Subject key identifier:   3E:FC:FD:56:93:45:6A:83:B5:59:64:FD:1B:06:97:E1:6B:82:F9:58
Certificate issuer:       /CN=4A7B1D273A29E52A919C6B66992B0B94316D67EE
Certificate serial:       0990FD4BD1DE0CF40669CD4523EC011ECA48C4AA
Authority key identifier: 4A:7B:1D:27:3A:29:E5:2A:91:9C:6B:66:99:2B:0B:94:31:6D:67:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e302e302f32332d3234203d3e20323731303137.roa
Signing time:             Sun 20 Aug 2023 15:42:54 +0000
ROA not before:           Sun 20 Aug 2023 15:37:54 +0000
ROA not after:            Sun 18 Aug 2024 15:42:54 +0000
asID:                     271017
IP address blocks:        200.219.0.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:90:fd:4b:d1:de:0c:f4:06:69:cd:45:23:ec:01:1e:ca:48:c4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A7B1D273A29E52A919C6B66992B0B94316D67EE
        Validity
            Not Before: Aug 20 15:37:54 2023 GMT
            Not After : Aug 18 15:42:54 2024 GMT
        Subject: CN=3EFCFD5693456A83B55964FD1B0697E16B82F958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:9f:e3:2d:4a:bb:4e:01:d9:34:86:6f:31:
                    3e:32:90:01:a1:bd:01:07:13:07:56:08:2e:4a:a4:
                    aa:1a:2f:19:c0:6b:79:12:b2:00:cf:fb:ac:38:e5:
                    9c:4e:3d:f8:cb:91:6c:26:02:ce:c0:d8:b7:17:25:
                    51:59:97:aa:a9:01:91:10:d1:a6:fe:20:b1:f7:3a:
                    d6:c5:85:dd:8e:50:9f:b7:83:3f:51:24:fe:77:50:
                    6d:0e:63:73:43:6f:8f:a2:09:68:c4:25:37:b6:59:
                    28:47:77:d2:64:d5:b5:97:66:74:b0:d7:a6:2e:ca:
                    70:b8:08:48:25:03:35:e9:56:37:a7:48:68:e4:f2:
                    5e:6c:ca:aa:4e:09:6b:86:48:a2:ab:5e:76:b3:6d:
                    51:72:f4:a5:f3:a5:8a:30:46:c3:09:b4:9c:87:eb:
                    c2:42:55:06:05:f9:1b:2d:b2:20:c2:c3:f0:b0:b8:
                    91:81:e7:9e:a0:26:e9:55:88:83:9f:82:97:aa:92:
                    68:e5:86:e6:37:a2:8a:8c:76:8b:da:1e:12:14:e1:
                    60:7c:0f:c3:17:49:81:ba:8c:ad:3a:97:67:ea:71:
                    3b:a5:a4:a9:98:b3:64:e2:bf:bb:79:6e:be:cd:8a:
                    20:99:12:3e:9e:66:2f:36:53:43:b6:e8:0b:2c:58:
                    38:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FC:FD:56:93:45:6A:83:B5:59:64:FD:1B:06:97:E1:6B:82:F9:58
            X509v3 Authority Key Identifier:
                keyid:4A:7B:1D:27:3A:29:E5:2A:91:9C:6B:66:99:2B:0B:94:31:6D:67:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e302e302f32332d3234203d3e20323731303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:6c:19:4d:86:1e:c0:c8:a4:4f:3e:3e:47:50:f4:74:cc:fb:
         4a:2f:28:57:f9:34:ff:85:46:c3:eb:51:70:62:a7:93:83:3a:
         d0:68:03:4b:5d:eb:6a:61:9f:e1:67:e5:3c:99:f7:56:9a:b3:
         c2:2b:dc:55:da:c6:86:30:40:bf:0b:bf:4a:8e:6d:0d:9d:32:
         e8:0c:35:56:06:ca:9f:5e:ef:cd:cb:28:1c:2f:97:f1:47:c3:
         2d:32:41:88:4d:7a:71:8a:e7:a9:5c:5d:9d:b3:4a:d1:1d:d6:
         32:99:87:de:37:1e:bf:47:e9:3a:62:06:c7:cd:96:cf:b5:6d:
         bc:97:28:7f:13:e3:87:26:5f:04:30:e4:9e:b1:81:d1:8b:49:
         b0:30:ef:45:22:6c:70:e5:4a:78:0b:9f:69:d1:bb:70:c1:d1:
         56:f2:90:32:50:bf:8e:e3:44:19:73:d9:b8:ac:fc:3d:af:9d:
         2e:b0:24:7b:65:96:2b:fd:03:47:a2:8f:ec:a2:c6:61:db:ab:
         bb:65:69:ec:b7:fd:f6:cd:f8:79:37:4a:f8:40:01:68:5f:44:
         95:4c:2b:85:bc:68:06:b7:72:be:4c:9d:05:09:35:4a:42:4d:
         43:d3:7b:8f:c1:7c:be:ff:1a:24:30:5f:da:c8:0e:a8:21:cb:
         ea:58:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:07 2025 by rpki-client