Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37342e302f32342d3234203d3e20323636323136.roa
File:                     3230302e37312e37342e302f32342d3234203d3e20323636323136.roa (raw, json)
Hash identifier:          sGMlq4voh30rsmhPe0iwd/UVrnMWZoC1Dnn2Mc6n3Pc=
Subject key identifier:   58:96:A4:A5:6B:27:02:10:0E:45:41:FE:A2:FC:F2:99:61:58:29:26
Certificate issuer:       /CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
Certificate serial:       4764F7BA1CBD15A47F38E5231BDE2242693DE13E
Authority key identifier: EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37342e302f32342d3234203d3e20323636323136.roa
Signing time:             Mon 04 Sep 2023 13:47:42 +0000
ROA not before:           Mon 04 Sep 2023 13:42:42 +0000
ROA not after:            Mon 02 Sep 2024 13:47:42 +0000
asID:                     266216
IP address blocks:        200.71.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:64:f7:ba:1c:bd:15:a4:7f:38:e5:23:1b:de:22:42:69:3d:e1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
        Validity
            Not Before: Sep  4 13:42:42 2023 GMT
            Not After : Sep  2 13:47:42 2024 GMT
        Subject: CN=5896A4A56B2702100E4541FEA2FCF29961582926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:d3:49:9f:ad:e4:0c:8b:88:43:7a:e0:3f:
                    ef:c6:06:5e:34:ef:38:a6:37:a6:89:3a:b2:8a:0a:
                    d6:5c:d0:87:8b:37:a4:70:94:d6:65:68:0d:36:55:
                    ec:13:c5:07:4c:30:9d:a3:0b:2a:cc:dd:f7:a5:30:
                    f5:8b:dc:73:0b:c3:48:1e:05:62:3f:cb:3a:54:81:
                    17:8c:e6:8c:6f:2c:83:bb:cf:80:69:57:cc:53:39:
                    86:3c:26:60:96:89:38:71:c2:28:7c:d7:b4:e3:c9:
                    4a:31:ec:a2:72:8e:1a:21:6b:76:c6:c4:76:f0:2e:
                    a3:c1:eb:33:9d:3b:18:bb:c0:3b:87:b2:e2:51:a6:
                    c3:51:55:d6:2d:10:b3:3e:37:61:46:b3:da:c6:1f:
                    bc:8b:3d:94:01:eb:9a:a3:fd:c5:6d:af:09:c0:48:
                    49:7c:aa:65:26:e0:ed:98:2f:2d:55:60:12:e2:52:
                    14:15:7b:37:d5:2f:64:e3:45:a5:f7:26:80:20:3c:
                    48:fb:85:ea:a2:55:0d:09:36:d9:5e:0a:04:bd:e5:
                    89:d5:13:5e:3e:9f:15:8d:4f:fc:81:be:fd:d2:4a:
                    61:19:f7:e7:ce:c6:d3:de:87:23:61:79:9e:2f:f2:
                    f8:98:7c:84:a8:c6:d8:d9:7f:e0:9a:96:5e:34:bc:
                    4d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:A4:A5:6B:27:02:10:0E:45:41:FE:A2:FC:F2:99:61:58:29:26
            X509v3 Authority Key Identifier:
                keyid:EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37342e302f32342d3234203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:27:d6:2d:9d:91:c6:b0:2e:d4:52:d5:75:68:aa:da:87:e9:
         93:80:e0:3e:b9:d1:27:0c:5f:62:05:4b:d4:01:7d:37:ee:68:
         60:61:3d:af:d4:16:be:2c:2d:97:71:75:3e:c1:77:3e:bb:4a:
         0b:93:d2:9a:e8:25:95:86:f9:6e:df:10:20:0c:32:a8:22:5a:
         ff:77:a5:5e:c8:dc:12:51:a8:16:e6:cf:0d:61:3b:9e:d4:16:
         da:c6:ab:d7:9b:77:18:8c:8f:0e:99:68:c3:5a:7e:d6:91:a7:
         f9:1f:19:cc:97:d0:81:d1:30:2c:5a:f3:2e:e3:43:35:bd:d7:
         35:81:ae:4b:6e:5e:4f:68:fc:e1:42:71:72:b4:56:d0:df:06:
         b8:41:32:9d:0b:32:90:0d:72:38:1d:b4:ed:5c:ea:57:58:32:
         94:35:d6:5a:87:1b:a8:23:0c:34:c0:50:64:c7:fb:1b:97:d4:
         8c:e6:30:b9:9f:d2:27:0e:27:77:6b:de:b1:ed:c6:7c:57:48:
         68:14:1c:00:6b:35:cd:9d:fe:17:81:df:c2:f7:07:9e:18:7d:
         5f:9a:f4:64:34:07:c9:f6:2a:e6:e2:94:a7:1b:e7:31:e2:8f:
         9b:c1:66:8a:4e:97:ac:b1:13:30:11:6e:f4:f3:11:66:56:97:
         7f:7d:70:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:16 2025 by rpki-client