Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3137302e38332e3136342e302f32322d3234203d3e20323634333831.roa
File:                     3137302e38332e3136342e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          E8yn3oDEX5MU84IWXHnaeyIKrs7jRoLrkG0nrOn+Yvc=
Subject key identifier:   BB:FF:2D:EC:57:BB:05:40:97:00:4D:B5:7B:94:49:29:05:AE:86:0B
Certificate issuer:       /CN=9B200BCD91DFF47750BD2C67A02D2E1F476C8232
Certificate serial:       0DDAFF01347AA0F757365804D48F5C37EF3A7E25
Authority key identifier: 9B:20:0B:CD:91:DF:F4:77:50:BD:2C:67:A0:2D:2E:1F:47:6C:82:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3137302e38332e3136342e302f32322d3234203d3e20323634333831.roa
Signing time:             Tue 16 May 2023 20:16:43 +0000
ROA not before:           Tue 16 May 2023 20:11:43 +0000
ROA not after:            Tue 14 May 2024 20:16:43 +0000
asID:                     264381
IP address blocks:        170.83.164.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:da:ff:01:34:7a:a0:f7:57:36:58:04:d4:8f:5c:37:ef:3a:7e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B200BCD91DFF47750BD2C67A02D2E1F476C8232
        Validity
            Not Before: May 16 20:11:43 2023 GMT
            Not After : May 14 20:16:43 2024 GMT
        Subject: CN=BBFF2DEC57BB054097004DB57B94492905AE860B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:15:7d:df:1a:36:38:47:61:19:91:41:64:49:
                    57:25:d5:5d:5a:3a:53:88:ce:1c:07:9f:68:59:3c:
                    47:f9:ae:cb:1d:03:66:13:24:55:5c:21:4b:8a:e3:
                    50:af:87:b3:00:73:da:af:b6:77:33:fa:ba:54:b7:
                    b7:ff:a9:46:4f:87:87:e4:e7:a3:20:d4:bb:40:08:
                    19:ce:13:0c:4f:77:23:0a:c9:09:9c:db:cc:25:c7:
                    fc:b2:f3:61:a3:44:34:d5:c5:6c:26:cd:3b:35:a2:
                    7c:e4:1e:fe:5d:aa:b6:75:ca:13:b2:40:97:67:cc:
                    ad:5f:38:a8:10:51:d3:63:40:a6:66:e7:16:3b:99:
                    39:26:94:d4:37:4a:bf:8b:e6:e1:bd:f0:73:e9:4a:
                    d5:0d:3e:1c:69:75:d1:e8:96:77:2b:60:a9:0c:81:
                    cc:ab:8d:e3:56:e7:6a:8f:38:f5:d1:87:0f:53:ae:
                    e2:f6:e6:9b:ce:80:66:3c:7a:2f:e4:ac:66:8e:ef:
                    f5:cb:2e:45:16:19:20:38:a3:84:24:eb:a0:d8:1e:
                    ea:90:7e:6f:ff:d0:d6:43:4f:79:45:3a:6f:44:99:
                    dc:1a:4a:fb:40:2c:b4:5c:14:62:f2:47:e7:29:b1:
                    7e:f1:f0:b0:7b:08:ce:b6:b7:9f:3e:53:a5:b8:65:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FF:2D:EC:57:BB:05:40:97:00:4D:B5:7B:94:49:29:05:AE:86:0B
            X509v3 Authority Key Identifier:
                keyid:9B:20:0B:CD:91:DF:F4:77:50:BD:2C:67:A0:2D:2E:1F:47:6C:82:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3137302e38332e3136342e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:6e:b6:82:0e:6f:ac:41:66:a1:ed:fe:32:0c:80:69:cd:
         ab:4a:0f:0c:08:56:90:bc:74:88:30:92:5f:0f:d4:1d:2c:f4:
         21:b1:a2:fa:73:da:cd:62:27:3c:69:ed:32:79:40:f3:29:d3:
         17:05:ca:52:85:56:99:f4:c2:cc:a4:a3:8c:5a:63:6b:8f:33:
         23:20:12:37:55:76:be:7b:bc:85:cc:77:81:c0:f1:7f:df:b6:
         83:5b:66:3f:c4:d9:fe:1a:82:49:52:a7:d0:1c:51:60:03:1e:
         52:ce:d5:be:ed:6d:af:37:0b:90:39:c8:83:65:76:81:00:b9:
         f4:56:b0:10:57:f8:35:29:9b:ba:ab:54:d0:a6:13:e8:45:15:
         89:32:ac:a0:bd:d7:3c:3e:16:8c:0e:56:7a:17:4d:57:9b:bd:
         0a:64:e7:76:d5:ac:85:47:36:a8:87:66:75:26:d6:d4:d5:fd:
         c9:ad:d9:cd:4d:6f:d5:e0:bb:22:b4:a4:1d:02:85:6b:85:36:
         e1:d2:a1:54:59:ba:4b:51:f6:76:13:4d:63:13:f0:09:3d:5a:
         13:10:e3:5b:4b:57:c4:8b:40:68:13:db:1e:af:69:22:c9:b6:
         40:29:da:e1:f9:ba:a9:c6:31:f4:b1:af:73:80:2b:1b:da:a2:
         fb:e0:41:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:22 2025 by rpki-client