Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/1/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa
File:                     3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa (raw, json)
Hash identifier:          etWQ+hxxpPKzovgAwFVRkt9XK8D8/on6cpKoYpCbCIQ=
Subject key identifier:   9A:A5:91:51:20:AC:EA:92:04:34:06:7F:2D:80:18:42:2B:94:D7:87
Certificate issuer:       /CN=46EDF45B1643CD96084C46A7A17FEEF4054C22BE
Certificate serial:       4B69F5F3DD78503A71376E1545FDD21CC1F78B30
Authority key identifier: 46:ED:F4:5B:16:43:CD:96:08:4C:46:A7:A1:7F:EE:F4:05:4C:22:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46EDF45B1643CD96084C46A7A17FEEF4054C22BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/1/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa
Signing time:             Sat 02 Sep 2023 00:14:22 +0000
ROA not before:           Sat 02 Sep 2023 00:09:22 +0000
ROA not after:            Sat 31 Aug 2024 00:14:22 +0000
asID:                     23289
IP address blocks:        200.160.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:69:f5:f3:dd:78:50:3a:71:37:6e:15:45:fd:d2:1c:c1:f7:8b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46EDF45B1643CD96084C46A7A17FEEF4054C22BE
        Validity
            Not Before: Sep  2 00:09:22 2023 GMT
            Not After : Aug 31 00:14:22 2024 GMT
        Subject: CN=9AA5915120ACEA920434067F2D8018422B94D787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:3e:75:6d:3f:28:7e:ec:f2:1c:5e:62:c2:
                    99:89:3c:5f:a4:5d:52:79:8b:9c:10:cd:f1:c0:41:
                    94:2a:78:ee:1f:06:65:0f:c4:b1:e4:20:e6:b8:20:
                    a2:00:80:83:f6:d0:4b:ff:cb:7f:ef:48:5e:a9:21:
                    87:bf:43:e5:50:6e:d3:1a:84:bb:97:54:9f:18:76:
                    b5:ec:6c:e6:a9:d0:86:6d:d4:cd:a8:a6:84:d6:86:
                    4c:c3:43:59:cd:42:21:f6:74:e3:61:89:d0:92:37:
                    0a:0e:44:dd:a7:17:8b:da:10:27:70:13:db:26:bd:
                    78:f1:71:1d:30:7c:14:51:94:3b:aa:77:6f:d5:d4:
                    53:52:5b:19:58:b8:88:6f:39:71:1a:3d:11:23:dd:
                    77:b0:d2:8d:56:17:60:4c:13:ed:a5:e5:d8:57:4a:
                    44:80:fe:d9:63:8a:87:76:1f:fc:84:06:b6:65:72:
                    b4:91:bd:f5:42:86:4d:ff:f4:fb:a0:ae:9a:75:51:
                    d3:b3:8e:9f:97:9c:ad:3c:ef:41:3b:82:bf:19:2a:
                    81:79:95:94:80:93:49:3a:ab:e4:d9:12:17:5d:58:
                    7b:01:fc:80:48:e5:9e:9b:9a:fb:d8:13:50:39:2c:
                    7a:0b:72:9a:85:25:fc:b2:d2:65:95:d7:66:fd:df:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A5:91:51:20:AC:EA:92:04:34:06:7F:2D:80:18:42:2B:94:D7:87
            X509v3 Authority Key Identifier:
                keyid:46:ED:F4:5B:16:43:CD:96:08:4C:46:A7:A1:7F:EE:F4:05:4C:22:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/1/46EDF45B1643CD96084C46A7A17FEEF4054C22BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46EDF45B1643CD96084C46A7A17FEEF4054C22BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/1/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:38:78:2d:68:c4:2f:05:6f:cc:6a:a5:04:a6:ed:f6:6e:49:
         7f:55:e1:a3:c2:60:0a:03:85:a1:31:80:1b:ff:80:6f:a1:a2:
         d9:85:bc:36:76:a5:b4:69:c1:5d:6f:5c:44:47:28:6c:ec:29:
         4d:f3:c3:08:f4:02:51:ef:c7:a7:9a:ab:fe:78:e7:75:9a:d8:
         35:cc:6c:bd:69:7d:f5:8a:77:5d:54:10:20:f1:f3:51:e4:f4:
         b2:25:fd:60:e7:f0:82:d2:68:79:7c:ed:43:26:44:2d:34:2b:
         03:4d:27:47:85:e2:eb:71:a8:35:70:26:76:42:f0:1f:bb:ca:
         b0:89:06:b8:fb:c4:ba:26:2e:b9:d3:75:9b:b3:73:fe:2a:9e:
         c2:74:72:f2:6b:6d:fc:cc:3f:02:47:ba:57:ba:b6:66:51:ff:
         3b:aa:7f:e0:1d:f6:01:b1:e6:b0:73:01:e6:20:e5:43:11:3a:
         e1:c9:1a:7c:8f:77:58:62:89:1b:75:65:73:a7:c2:c5:01:02:
         4a:02:fc:cd:c8:f1:01:85:03:2f:68:f6:45:16:78:89:5c:a3:
         e0:2f:e1:e0:78:ab:12:5f:b2:17:a0:a6:47:12:3e:85:75:f8:
         c6:2e:d7:06:7a:d9:f0:c2:48:7b:99:d5:df:4b:47:81:b8:53:
         68:95:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:54 2025 by rpki-client