Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32332d3233203d3e20323636323136.roa
File:                     3230302e37312e37322e302f32332d3233203d3e20323636323136.roa (raw, json)
Hash identifier:          KEx6NoiB+WhehKZk/HqRT3GUFVMRqTNIQ30eEKKRGR8=
Subject key identifier:   86:FD:0A:1D:70:7A:6E:45:F1:88:67:AF:54:C6:F9:55:96:BD:90:C5
Certificate issuer:       /CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
Certificate serial:       0DAB93F3E1FC70C08C22246ED8AFAC733DCFB653
Authority key identifier: EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32332d3233203d3e20323636323136.roa
Signing time:             Fri 17 Mar 2023 18:43:30 +0000
ROA not before:           Fri 17 Mar 2023 18:38:30 +0000
ROA not after:            Fri 15 Mar 2024 18:43:30 +0000
asID:                     266216
IP address blocks:        200.71.72.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ab:93:f3:e1:fc:70:c0:8c:22:24:6e:d8:af:ac:73:3d:cf:b6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
        Validity
            Not Before: Mar 17 18:38:30 2023 GMT
            Not After : Mar 15 18:43:30 2024 GMT
        Subject: CN=86FD0A1D707A6E45F18867AF54C6F95596BD90C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:1e:dc:0b:1c:52:4d:50:4b:88:29:fe:a4:
                    6f:7a:73:e6:93:10:c3:95:5f:b5:b1:a5:54:f0:78:
                    98:2a:9b:63:04:e0:aa:c8:3f:eb:cf:87:0e:3d:18:
                    58:72:d9:53:17:d0:2b:25:4e:20:bb:49:d2:e8:cb:
                    4b:6d:b4:a0:4c:95:91:74:c3:42:33:2a:c9:b9:12:
                    46:ad:2d:c2:e1:68:5e:78:17:e8:17:18:bf:65:8b:
                    8c:a7:cb:a3:db:1c:bf:b0:4d:5a:0e:0d:ef:39:ac:
                    2d:a7:48:17:2d:76:6f:5b:ae:89:57:47:78:29:13:
                    99:a7:c0:3b:80:c8:0f:ac:15:01:ce:71:25:0c:41:
                    55:3e:64:e2:a2:db:28:42:3d:b7:d3:72:b2:f4:df:
                    0d:ff:db:91:93:a6:82:8e:ce:23:34:e4:43:d2:17:
                    ef:1a:65:a2:86:93:c9:02:e1:59:fe:ca:8c:02:e1:
                    8d:7a:3e:b4:b4:79:c4:d1:b5:8c:3b:38:32:bd:2f:
                    4a:d3:d6:6f:ea:49:02:f2:54:9a:cc:47:1c:e1:7b:
                    40:5a:8b:49:7a:27:d7:06:1e:fc:ba:da:62:df:34:
                    7e:cc:98:bb:f9:3d:17:74:11:d9:ea:5a:10:9c:49:
                    b6:d0:07:ed:cf:21:30:f4:52:98:f6:88:b1:73:93:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FD:0A:1D:70:7A:6E:45:F1:88:67:AF:54:C6:F9:55:96:BD:90:C5
            X509v3 Authority Key Identifier:
                keyid:EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32332d3233203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:09:99:df:84:de:42:50:00:a2:c0:0b:8c:1d:94:f9:43:
         14:65:65:c4:f4:a7:bd:06:1a:c8:b4:f9:32:4f:b6:97:8c:33:
         91:cf:4e:f3:94:15:3d:1d:b3:fc:df:64:8f:a7:2a:49:8a:a9:
         19:ef:0a:4a:29:28:0f:72:97:37:c5:17:cb:dc:3a:2c:93:0c:
         05:f6:1b:d1:60:ff:2b:ef:c5:f1:97:52:af:f3:fa:f5:5f:7c:
         87:bc:07:4b:17:d8:87:59:67:50:07:44:b8:3d:a5:93:bf:26:
         dd:d3:1c:a6:7c:95:85:31:a7:b5:b2:c3:25:8d:1b:ea:81:e4:
         22:97:71:fd:88:17:e0:45:27:9d:36:5a:62:5b:a9:76:2e:2c:
         5f:c7:ac:ec:0c:3c:fd:63:16:e3:14:05:c7:94:b0:8b:f1:8f:
         45:4d:f2:5e:10:14:63:0f:1a:af:c4:b5:04:4e:b0:b7:6f:46:
         75:d5:f9:b7:2c:83:fd:b2:db:7e:16:d1:8b:df:86:67:dc:b5:
         b6:4e:89:c8:c1:83:6d:e3:41:5d:1b:68:18:da:52:63:e8:aa:
         d0:df:10:4f:c1:17:6b:cf:93:6c:e2:85:89:30:1b:f0:93:81:
         4e:40:3e:5b:d4:ef:fe:ee:1a:3a:64:6a:42:3e:cd:a7:ad:de:
         fc:8f:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:07 2025 by rpki-client