Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3134332e3230322e3132302e302f32342d3234203d3e20323633353433.roa
File:                     3134332e3230322e3132302e302f32342d3234203d3e20323633353433.roa (raw, json)
Hash identifier:          MWhG9DsuvpQyHA6cI4iwzO0GFxvTv3t6P/mv58w5Izo=
Subject key identifier:   4F:11:04:E5:6D:5D:FB:A1:E0:2D:B6:EE:EC:D9:6A:70:8B:42:D7:7F
Certificate issuer:       /CN=FC264A56450200CCB89788286F7FBCE41CDAA658
Certificate serial:       46BBFAC2955F1C613C110CA752DA667AF4BEF4E9
Authority key identifier: FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3134332e3230322e3132302e302f32342d3234203d3e20323633353433.roa
Signing time:             Mon 10 Jul 2023 12:37:51 +0000
ROA not before:           Mon 10 Jul 2023 12:32:51 +0000
ROA not after:            Mon 08 Jul 2024 12:37:51 +0000
asID:                     263543
IP address blocks:        143.202.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bb:fa:c2:95:5f:1c:61:3c:11:0c:a7:52:da:66:7a:f4:be:f4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC264A56450200CCB89788286F7FBCE41CDAA658
        Validity
            Not Before: Jul 10 12:32:51 2023 GMT
            Not After : Jul  8 12:37:51 2024 GMT
        Subject: CN=4F1104E56D5DFBA1E02DB6EEECD96A708B42D77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:30:87:02:7e:0c:e0:c3:b9:74:33:8f:d7:
                    ae:fa:e8:e2:07:ac:e9:df:cf:80:ae:cf:6b:f8:6c:
                    b4:1a:69:b6:19:6a:86:1f:4a:98:0c:02:e9:47:cf:
                    68:ee:26:cd:77:02:5b:bf:b9:0b:13:1d:3b:ac:9e:
                    a8:9f:ff:04:0c:8b:fd:2d:7f:ae:9e:1e:52:92:b1:
                    42:9d:a0:c5:9e:ec:4b:48:ea:d0:46:ca:51:38:44:
                    a5:f8:57:e2:54:cd:35:d4:7c:0a:54:a9:3a:e8:3f:
                    6b:9e:8c:31:1d:85:f7:e4:5b:dc:cb:72:aa:38:44:
                    15:e3:64:39:6e:a7:16:cf:8a:26:31:2e:65:72:48:
                    28:b3:57:d5:70:25:1a:c6:d0:3d:4c:4d:e3:f4:ab:
                    dd:b8:ff:41:ee:54:ba:df:33:68:06:07:c5:85:32:
                    49:75:de:47:33:a0:42:bc:0a:fd:48:d0:af:d8:3a:
                    15:69:9a:62:d0:65:3a:2b:d0:a4:d4:75:3b:11:cf:
                    6e:77:22:8f:c0:22:0d:7d:31:50:36:8b:fd:ea:5d:
                    8c:6b:0c:31:26:1a:e0:94:c1:14:54:ef:d8:a2:a2:
                    88:2e:4f:b1:0d:19:5d:d7:8c:e7:a4:3c:7d:0b:2f:
                    98:a7:3b:62:40:98:57:48:ae:c7:42:24:07:08:7d:
                    b9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:11:04:E5:6D:5D:FB:A1:E0:2D:B6:EE:EC:D9:6A:70:8B:42:D7:7F
            X509v3 Authority Key Identifier:
                keyid:FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/FC264A56450200CCB89788286F7FBCE41CDAA658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3134332e3230322e3132302e302f32342d3234203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:5d:69:0b:87:34:d3:81:87:e6:4a:f5:ca:24:1c:4d:f6:e7:
         96:dc:38:5a:32:51:08:88:99:ec:3c:ff:da:dd:d1:4d:48:50:
         dc:59:3c:ad:0e:2b:dc:5b:d1:f3:e9:d8:f6:1a:bb:e7:36:6b:
         30:55:3e:c8:f4:1a:56:95:31:bb:56:c0:40:6f:0f:04:ff:1f:
         ca:4a:cf:be:d0:ec:38:2e:ce:9d:f0:99:bb:db:8f:93:9a:54:
         42:a9:6d:11:99:dd:7f:d2:f2:8d:98:a2:bc:54:bf:ac:e1:7c:
         dd:c7:fa:b6:3c:20:e7:b7:5a:5d:07:7a:8b:05:3e:76:de:61:
         7e:b0:d4:e2:31:6e:29:30:8b:45:0d:04:83:99:0f:73:a3:40:
         d3:6c:e4:39:90:2b:e9:6e:9b:5d:6f:c1:47:fc:f6:ce:a0:c5:
         8c:3c:a3:03:75:1b:b7:04:36:ea:d7:18:a6:50:d7:55:a4:43:
         7f:7e:56:62:33:b2:2a:53:8d:aa:66:f0:d0:18:e0:1d:be:d3:
         9a:eb:a7:78:51:08:e1:c5:a2:de:8d:43:5f:2e:3f:07:57:a7:
         a4:ef:04:0e:e3:2b:53:de:2c:19:f5:19:b7:bd:c9:a0:26:88:
         23:c1:88:74:00:1a:2c:44:94:f5:43:6b:07:4c:8a:55:cf:09:
         88:a3:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:46 2025 by rpki-client