Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa
File:                     3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          P2FK9Gmrcja97IzTQBV6Di0xIK6iR7EQMjCMtMjUNko=
Subject key identifier:   CD:7A:BC:F7:51:9F:5D:A8:52:08:E7:1E:60:DD:F3:FF:13:C6:EE:89
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       4FA2FB019AAACEB8FFE444A60575918AFF3D82EF
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa
Signing time:             Thu 31 Oct 2024 17:05:22 +0000
ROA not before:           Thu 31 Oct 2024 17:00:22 +0000
ROA not after:            Thu 30 Oct 2025 17:05:22 +0000
asID:                     53080
IP address blocks:        201.216.100.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a2:fb:01:9a:aa:ce:b8:ff:e4:44:a6:05:75:91:8a:ff:3d:82:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:00:22 2024 GMT
            Not After : Oct 30 17:05:22 2025 GMT
        Subject: CN=CD7ABCF7519F5DA85208E71E60DDF3FF13C6EE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:e6:89:1b:bf:03:5b:f8:0c:36:7c:c9:31:
                    1e:38:e7:df:56:99:53:a5:c0:59:a5:9b:b0:67:c5:
                    b8:ba:3e:88:cf:51:46:48:f5:6d:01:ef:cd:28:f8:
                    36:ab:8f:ca:c5:f2:4c:ca:6c:2d:22:70:c2:17:f7:
                    4f:fc:63:11:ac:fa:60:24:4d:26:96:56:0e:c4:73:
                    0d:a7:15:26:d7:c9:25:e9:5b:a7:76:6a:83:b8:74:
                    d0:6c:f2:06:cb:83:51:02:fa:cf:6b:c5:f5:01:84:
                    84:07:4b:e5:03:3d:db:63:5c:24:98:9d:a1:40:08:
                    06:f5:2d:bf:f4:5e:fb:7f:b5:77:2b:f6:1f:22:86:
                    4d:1b:48:d9:5c:bb:75:e3:cd:18:d5:a2:3f:c1:c8:
                    d4:85:ab:af:ae:ad:9d:0c:a9:64:da:4a:e0:3e:d4:
                    f9:a1:17:13:58:79:b0:f5:fd:78:66:0c:17:56:d1:
                    0c:37:2e:c6:70:7a:c5:3e:c6:74:95:30:2d:98:51:
                    fc:7b:d9:1d:3e:e7:9a:c4:b4:8a:60:70:27:54:45:
                    b4:d2:52:57:31:6a:b8:06:4d:de:f3:fd:3d:1e:64:
                    eb:82:70:9a:8c:8f:0f:77:4a:59:4b:89:e7:ec:77:
                    51:1e:3a:54:fb:a3:1f:2f:03:df:ab:03:21:d3:08:
                    70:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7A:BC:F7:51:9F:5D:A8:52:08:E7:1E:60:DD:F3:FF:13:C6:EE:89
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:ce:3c:4b:42:75:80:dd:2e:f9:2b:a9:cf:89:1f:d8:7b:b3:
         82:60:29:ea:2b:e0:a7:55:ab:fd:3d:b5:ae:88:42:64:88:95:
         a2:9c:a5:24:ff:7e:61:70:5e:41:9b:81:8e:68:72:fd:71:9c:
         43:1d:74:57:0c:f9:b3:91:88:bc:75:85:1c:e6:3f:4f:fd:43:
         d6:84:b7:f9:33:6c:36:7d:07:7f:ca:fd:13:b5:6e:f0:ce:60:
         6a:46:cd:18:49:59:0f:61:c3:f4:e9:6f:06:55:57:de:28:8b:
         03:5e:47:fe:19:82:aa:4e:69:24:b9:81:aa:51:02:80:99:0b:
         cc:fc:e3:8f:0a:99:82:43:38:80:4e:b0:95:92:8c:de:65:80:
         ae:34:90:09:0d:6c:3a:e4:7a:c1:a1:19:76:85:1d:14:bf:df:
         c5:31:e0:ac:3a:f3:99:af:52:56:67:ba:84:2c:4d:64:61:c4:
         9e:91:ba:6f:4d:54:6a:0d:23:19:74:00:b2:f0:82:e3:de:68:
         4d:9a:b3:c2:57:2d:dc:83:fa:f2:07:76:2a:d0:9b:53:c3:23:
         ac:03:47:6a:46:b2:1a:32:6d:af:1a:3a:d3:59:bf:7e:ef:c3:
         19:e0:19:0d:5e:96:04:76:a1:21:61:4f:ba:8b:32:bc:07:ea:
         d3:31:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:29:32 2025 by rpki-client