Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/3230312e372e3138382e302f32342d3234203d3e20333936393832.roa
File:                     3230312e372e3138382e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          Tc8QLDQsgO1CP10+kASAa5YIOxZu509sOagjTspLmx8=
Subject key identifier:   60:F3:BF:2A:A9:F3:1C:E2:1E:22:13:98:43:F4:4F:7D:BB:95:99:9D
Certificate issuer:       /CN=2ABA0459E992F662FCFC3A1DA24387258CF36F21
Certificate serial:       057783C0BA12873A289044EB0F6D30D8838E1A51
Authority key identifier: 2A:BA:04:59:E9:92:F6:62:FC:FC:3A:1D:A2:43:87:25:8C:F3:6F:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/3230312e372e3138382e302f32342d3234203d3e20333936393832.roa
Signing time:             Wed 04 Dec 2024 17:40:05 +0000
ROA not before:           Wed 04 Dec 2024 17:35:05 +0000
ROA not after:            Wed 03 Dec 2025 17:40:05 +0000
asID:                     396982
IP address blocks:        201.7.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:77:83:c0:ba:12:87:3a:28:90:44:eb:0f:6d:30:d8:83:8e:1a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ABA0459E992F662FCFC3A1DA24387258CF36F21
        Validity
            Not Before: Dec  4 17:35:05 2024 GMT
            Not After : Dec  3 17:40:05 2025 GMT
        Subject: CN=60F3BF2AA9F31CE21E22139843F44F7DBB95999D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:aa:3e:6d:9e:fd:ab:29:8e:62:a0:41:4d:
                    67:ff:02:07:47:de:38:01:5d:38:96:7c:a5:50:3c:
                    06:54:f5:cc:6d:60:aa:98:66:10:a6:5d:f8:a9:07:
                    29:bf:37:91:c8:62:11:a9:5a:a2:e6:ae:36:82:a7:
                    14:3d:0d:00:2c:36:64:bb:04:b9:e6:6d:84:a6:23:
                    8e:ef:e4:6a:13:63:6a:80:58:ce:63:33:7e:ac:fa:
                    8a:d5:61:e9:6f:24:39:bc:fe:47:b5:6e:ad:d5:42:
                    46:e8:be:c1:c3:70:a4:a4:db:82:9c:58:c3:5a:91:
                    80:58:38:44:7d:db:de:82:ea:e2:5d:9a:f1:3c:85:
                    d7:98:66:2c:1c:98:5c:b5:47:ad:8f:dd:84:be:22:
                    7b:2f:ad:f6:77:91:dd:50:eb:cd:e4:f0:a7:69:b2:
                    e2:0a:8f:90:15:f6:e1:95:3a:40:7e:07:ba:c0:b5:
                    92:e8:ec:3e:84:85:b0:59:ad:d0:60:7d:ad:40:55:
                    2d:13:ec:09:90:75:ef:4d:77:35:7f:3b:11:7f:29:
                    dd:21:6c:e3:53:25:da:d0:7d:1e:83:41:43:6d:5b:
                    2c:c3:89:cf:36:1c:fd:15:d3:26:c4:de:cc:54:1d:
                    e2:dd:b1:62:28:e4:31:f9:62:b7:dc:e8:ce:57:a8:
                    12:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F3:BF:2A:A9:F3:1C:E2:1E:22:13:98:43:F4:4F:7D:BB:95:99:9D
            X509v3 Authority Key Identifier:
                keyid:2A:BA:04:59:E9:92:F6:62:FC:FC:3A:1D:A2:43:87:25:8C:F3:6F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/3230312e372e3138382e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:3f:5e:ba:64:74:93:c4:39:a8:7d:02:00:e7:de:7b:e9:eb:
         24:4c:d2:b7:d6:4f:b9:b5:a9:21:45:b3:ea:58:15:2e:66:78:
         c2:35:de:8c:05:2d:88:55:02:12:f2:d4:52:29:23:c7:64:2d:
         d5:37:05:f1:3f:48:82:b7:da:0e:47:19:cb:8f:ea:20:66:12:
         2d:f9:5f:7a:bb:55:4d:51:9a:bd:4a:e5:1c:0f:d9:d8:52:ea:
         4a:a1:61:92:96:0a:f1:66:15:2a:03:15:c0:c9:b7:d9:60:cc:
         d7:35:ed:2e:c5:0b:cb:44:c5:5f:50:5b:5d:fa:fd:ba:30:37:
         73:61:d8:43:ad:c2:ec:f6:95:bb:28:ae:b4:6d:a6:5e:e0:fa:
         bc:d2:63:30:8d:0d:5f:37:bf:af:e0:45:14:86:56:cf:87:f5:
         20:e0:e4:70:b2:79:bb:2f:84:b7:78:8b:09:57:04:eb:49:d0:
         b8:95:45:b0:ca:05:62:c8:b6:32:0b:35:45:02:24:4a:61:8c:
         d9:d1:2f:74:93:80:79:94:b8:b8:fc:9d:9d:c7:b3:e3:70:93:
         28:33:d3:b3:2f:6a:a7:3d:c7:e5:45:4e:b6:b6:8e:41:16:2b:
         0f:51:99:b9:12:c9:d4:8c:e6:75:92:40:48:60:6e:93:17:1f:
         19:b2:16:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:51 2025 by rpki-client