Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e3136302e302f32302d3230203d3e2032373136.roa
File:                     3230302e31372e3136302e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          xvBCgBVjgdOkkEY3L26D6ELpJwKoK9kyX7Auoj1xDvY=
Subject key identifier:   E1:EF:A2:B7:7B:ED:36:EE:9F:97:54:DD:79:B0:C2:2B:BB:53:89:08
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       12C1E58967F454D10F4DFDC325B9BD377F0A74FF
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e3136302e302f32302d3230203d3e2032373136.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     2716
IP address blocks:        200.17.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c1:e5:89:67:f4:54:d1:0f:4d:fd:c3:25:b9:bd:37:7f:0a:74:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:c7:5f:1d:c5:f0:bf:80:2d:c8:7a:1b:fd:
                    49:00:5b:9c:47:a6:52:94:43:d4:00:39:da:80:f2:
                    19:b6:27:6b:75:21:6c:65:13:87:30:7d:f2:f2:fa:
                    e6:61:8b:23:60:0a:7d:f1:9c:53:64:35:03:58:d3:
                    43:40:b0:3b:b3:ce:8b:f2:1a:ca:0f:1b:e8:2f:4f:
                    25:67:09:eb:71:a7:63:8d:76:5f:7a:a6:26:21:b0:
                    b2:a8:19:54:de:a1:7c:28:eb:4f:78:e9:a1:e0:11:
                    2e:66:09:2a:15:fc:c5:a2:69:83:d2:18:b6:e8:c9:
                    bd:cf:32:d7:38:34:60:e4:05:7b:4c:37:69:85:78:
                    28:48:4f:f9:6f:07:a1:ef:f9:e6:6a:b3:bd:f9:ce:
                    ab:25:be:f9:a0:df:4a:64:d5:c0:f3:df:de:bc:cd:
                    3b:8f:9c:05:82:47:a8:ac:5d:83:85:ae:59:9a:95:
                    ac:5e:c8:8a:ba:78:05:be:81:0b:47:83:e1:80:b7:
                    3d:2d:d6:ff:2f:ae:2d:d1:68:a3:5e:39:a8:28:63:
                    d1:ed:0e:7c:9b:f4:cb:79:9a:94:63:6a:63:4e:0a:
                    34:57:04:c8:ed:62:e6:80:cd:11:c0:11:b8:b9:85:
                    62:a0:05:b6:ce:87:c3:a9:58:3a:b6:b1:6c:12:3b:
                    aa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EF:A2:B7:7B:ED:36:EE:9F:97:54:DD:79:B0:C2:2B:BB:53:89:08
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e3136302e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:bd:60:3f:67:d1:cc:86:bc:62:c5:97:2b:99:82:26:ba:4a:
         03:44:d6:55:45:78:4f:2e:9e:0d:90:6c:24:02:4c:39:66:bc:
         db:3a:54:7e:03:94:0b:ec:a1:65:d6:5e:3b:38:c0:4d:6e:18:
         f1:de:74:bf:00:e0:0c:6b:e5:d0:39:77:6b:40:7b:b4:93:f5:
         5a:f9:39:d2:e6:96:78:e2:50:63:20:24:e8:f2:36:81:a6:f5:
         3c:17:f0:ec:2e:27:32:d8:9b:cc:5b:5d:59:3c:40:70:86:eb:
         d0:77:df:2a:82:d1:3e:5c:66:0f:77:21:ae:3e:f9:70:6d:b9:
         f4:fe:d2:2b:20:b8:54:d9:d7:2e:bc:1d:93:97:76:83:5b:03:
         30:0e:6c:dd:ea:b4:36:94:f6:8e:4f:81:4c:c9:58:da:75:d5:
         bd:30:c8:4b:43:3b:c8:a0:0c:db:0c:d6:af:8f:e7:67:06:30:
         e3:9d:86:1b:0d:53:40:d8:c8:58:19:1b:44:9c:0f:6c:73:32:
         92:8d:ec:27:b7:f8:f9:0b:4a:dd:d9:d3:be:56:23:27:f0:c0:
         1c:04:37:fc:30:89:dc:74:16:03:35:56:a6:80:5c:ce:86:c3:
         fb:8d:53:db:88:48:d5:df:77:6d:72:19:e9:0a:29:87:1e:c4:
         af:39:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:48 2025 by rpki-client