Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e3136302e302f32302d3234203d3e2032373136.roa
File:                     3230302e31372e3136302e302f32302d3234203d3e2032373136.roa (raw, json)
Hash identifier:          cKIDPvDeBTC9XQ/fPXPyfXLEHZKeLTn0i8ZL9Qz3nzA=
Subject key identifier:   00:30:AE:06:D2:20:B8:AF:23:5D:45:8E:6D:73:F6:9F:B9:88:E2:3A
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       47A0DA6C50851C9DB2787DBD2A7AAF3C8E696E98
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e3136302e302f32302d3234203d3e2032373136.roa
Signing time:             Fri 26 Nov 2021 12:42:07 +0000
ROA not before:           Fri 26 Nov 2021 12:37:07 +0000
ROA not after:            Fri 25 Nov 2022 12:42:07 +0000
asID:                     2716
IP address blocks:        200.17.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a0:da:6c:50:85:1c:9d:b2:78:7d:bd:2a:7a:af:3c:8e:69:6e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Nov 26 12:37:07 2021 GMT
            Not After : Nov 25 12:42:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:b6:a6:81:03:fd:f7:21:fe:76:6b:fb:16:
                    4a:63:8f:7f:e9:08:40:59:7c:d0:40:46:da:aa:53:
                    3c:79:56:c1:56:4f:f1:24:6b:ca:3b:1f:95:48:0d:
                    1c:9e:92:d3:8e:2a:82:fa:13:1f:1c:30:2a:27:02:
                    26:8a:4b:00:91:bc:57:31:f0:c6:d5:12:f1:99:77:
                    ba:37:fc:fa:1d:ec:79:2d:5c:13:d8:86:f6:77:79:
                    37:c3:63:45:43:04:37:a3:19:55:ad:cd:e0:bd:5d:
                    b4:88:a5:79:6b:0b:92:3c:44:2a:e8:1e:f7:20:22:
                    e8:da:28:a0:c5:f6:56:e0:f8:65:c3:a2:ea:b0:8d:
                    83:a2:0a:0c:f2:da:7e:de:5a:44:98:2b:f2:d6:99:
                    78:8b:d2:b2:66:84:d7:76:dc:b9:ab:6e:05:f6:9e:
                    b4:30:74:b1:4f:19:f7:52:5f:56:8f:8e:70:08:d3:
                    17:fe:25:b0:25:e1:e0:78:81:1e:fe:e9:66:6f:63:
                    aa:9f:d8:35:b6:f4:72:fc:2e:64:1e:b5:f6:11:ce:
                    47:e8:cd:8a:a2:85:2a:9e:c3:9d:08:c6:0b:45:65:
                    0a:c8:2f:bb:b6:cc:98:a6:9a:75:f6:fa:56:0c:44:
                    4b:37:c8:0d:0d:f4:da:12:28:65:b3:fa:61:99:a5:
                    d6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:30:AE:06:D2:20:B8:AF:23:5D:45:8E:6D:73:F6:9F:B9:88:E2:3A
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e3136302e302f32302d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:5d:3e:80:d9:8a:22:16:42:f5:7e:2a:b0:1f:3e:f8:38:ff:
         78:43:29:17:21:23:ea:f7:b1:7c:63:3b:fb:67:72:cd:ba:9e:
         1e:a6:54:94:fe:97:77:be:3e:38:61:2a:45:9a:39:35:30:8a:
         fe:c8:b8:1b:45:7a:62:97:75:58:f9:dd:1a:2b:9d:ad:82:73:
         56:7b:4e:b1:6f:3a:af:5b:f8:55:20:d3:54:7e:1b:a2:f5:d6:
         22:f8:92:0a:65:91:87:ea:30:9b:1f:fa:38:f1:cc:a0:4b:94:
         c7:94:a6:a2:d2:1a:ad:d6:d8:9c:8f:a2:3a:53:13:f3:1d:67:
         2f:49:05:09:26:69:c5:e0:03:d2:06:99:cd:23:68:5d:d5:e6:
         42:ab:eb:9c:b6:21:32:32:6a:ae:a1:ae:74:84:75:d5:62:84:
         46:94:b1:f6:6d:66:e8:68:b7:a0:cb:69:c5:b6:d8:77:30:56:
         22:33:00:b5:79:2c:cb:d2:18:b4:74:99:c2:22:d1:38:c8:51:
         96:0d:09:a5:b4:3a:80:b6:23:c6:2e:75:9b:11:8a:b5:a6:47:
         17:d6:26:c6:f8:0b:8d:64:48:fd:c4:d5:8c:c1:19:1c:3c:c8:
         ce:40:16:75:54:2c:88:df:ea:e4:4c:38:4e:02:f8:e1:16:04:
         5c:98:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:17 2025 by rpki-client