Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133332e302f32342d3234203d3e20323730373537.roa
File:                     3230302e33392e3133332e302f32342d3234203d3e20323730373537.roa (raw, json)
Hash identifier:          iDXvS2t/sIiVdcKOSsgox0ptTBOEWB3vDiFM+Za3yyg=
Subject key identifier:   17:8B:C5:DC:59:6E:32:53:0B:0F:4B:FB:04:EC:B4:C0:DF:8C:61:B0
Certificate issuer:       /CN=978C058CACCF9405ABB1475ABC54573C186268F7
Certificate serial:       2BEDC11A533DAF1C9BE0F809EE019E862EE6D3DB
Authority key identifier: 97:8C:05:8C:AC:CF:94:05:AB:B1:47:5A:BC:54:57:3C:18:62:68:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/978C058CACCF9405ABB1475ABC54573C186268F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133332e302f32342d3234203d3e20323730373537.roa
Signing time:             Sat 04 Mar 2023 17:16:22 +0000
ROA not before:           Sat 04 Mar 2023 17:11:22 +0000
ROA not after:            Sat 02 Mar 2024 17:16:22 +0000
asID:                     270757
IP address blocks:        200.39.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ed:c1:1a:53:3d:af:1c:9b:e0:f8:09:ee:01:9e:86:2e:e6:d3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978C058CACCF9405ABB1475ABC54573C186268F7
        Validity
            Not Before: Mar  4 17:11:22 2023 GMT
            Not After : Mar  2 17:16:22 2024 GMT
        Subject: CN=178BC5DC596E32530B0F4BFB04ECB4C0DF8C61B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:12:3b:6a:dc:a1:ba:b4:5c:90:d9:05:4f:
                    67:76:40:56:33:24:e3:6f:56:16:bf:bd:63:ba:7b:
                    02:00:bc:e0:fa:33:ab:63:ff:33:9a:54:57:77:59:
                    9c:94:ec:0a:f2:b6:a4:1b:c4:72:f8:39:7c:3d:7f:
                    b4:58:f6:4b:43:21:fc:a6:8a:54:07:e7:6d:41:a2:
                    35:ea:ae:f0:87:35:c9:96:06:64:01:8c:6b:a2:cb:
                    98:e1:b7:c8:d2:86:49:68:7e:73:82:c2:f9:6d:cb:
                    a2:dd:d6:c4:00:30:43:1b:02:c2:5a:af:6e:fe:ab:
                    c0:9a:d3:2d:57:e7:58:df:7a:d4:0e:03:e3:82:db:
                    b6:40:ce:61:42:c6:77:cb:89:55:8c:34:26:db:e3:
                    1b:03:5f:15:c9:a7:32:18:92:da:a7:c8:c3:b1:36:
                    c1:40:c7:d6:1d:e9:eb:71:59:d4:5c:63:16:8d:c4:
                    e4:64:3c:60:5d:cd:06:8b:85:8e:6b:4e:fe:a5:73:
                    48:ad:d0:d2:87:2e:72:c0:86:0f:95:da:06:ec:30:
                    b8:3d:0b:61:21:af:e9:da:e3:bd:2b:6c:ab:f6:b3:
                    97:cf:2c:94:31:c0:36:4f:11:e3:6d:8a:59:da:17:
                    ff:a6:81:9d:29:b3:b7:31:79:c4:c4:a0:07:07:72:
                    61:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8B:C5:DC:59:6E:32:53:0B:0F:4B:FB:04:EC:B4:C0:DF:8C:61:B0
            X509v3 Authority Key Identifier:
                keyid:97:8C:05:8C:AC:CF:94:05:AB:B1:47:5A:BC:54:57:3C:18:62:68:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/978C058CACCF9405ABB1475ABC54573C186268F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/978C058CACCF9405ABB1475ABC54573C186268F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133332e302f32342d3234203d3e20323730373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:73:bc:56:35:ea:e1:1b:0f:85:01:31:24:b1:01:3a:b2:ff:
         66:81:9f:35:b1:0f:46:7a:4d:54:da:c1:20:8e:a2:69:39:5a:
         b8:63:cf:70:aa:6f:ce:86:7d:67:82:6e:4a:92:93:bd:70:89:
         0f:f7:7e:57:7a:f3:42:35:52:46:10:c5:f9:19:e8:90:3a:81:
         9e:3e:ff:70:03:ac:1a:ed:13:52:7b:24:b5:56:6a:1c:b5:07:
         b4:1d:98:0d:a7:98:83:42:c9:b9:32:be:30:6a:b9:8e:04:50:
         fd:20:81:fa:9e:30:c5:9c:4c:6d:cf:0f:bd:ac:81:93:4b:02:
         15:a6:86:db:3c:1d:11:9a:6d:12:29:bf:34:c6:a8:bf:0b:3a:
         bc:ad:bf:f6:70:3d:d5:34:9d:79:6e:7b:74:38:42:ee:c5:8e:
         8d:09:03:34:56:84:b0:52:9c:da:96:16:52:6a:2a:0a:af:98:
         1b:35:36:13:2d:8a:f9:fb:ce:bd:4d:55:ab:08:3c:6b:96:f9:
         4d:04:6c:f3:43:9d:34:53:c2:f1:56:e3:7f:04:03:68:de:a4:
         cd:18:68:0b:eb:95:3f:3d:9b:cc:82:69:b6:b2:58:00:72:25:
         55:0c:9d:52:e1:21:b1:77:fc:51:3d:00:a7:b1:8b:57:23:12:
         12:a3:57:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:01 2025 by rpki-client