Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35322e302f32322d3332203d3e20323731343139.roa
File:                     3230302e33392e35322e302f32322d3332203d3e20323731343139.roa (raw, json)
Hash identifier:          bapPKQCHjY/xchJsyi15ve/QopYNg5wIpykZ6gC1Xck=
Subject key identifier:   C4:EA:3D:35:E1:1E:6D:5E:76:49:5F:2B:A8:4E:26:FB:2E:E6:AF:31
Certificate issuer:       /CN=6686C98E5028794E9E46723E7D80810F92D9AECF
Certificate serial:       1ABE771A86B5E53C80D4C5C5C237B107AC551D21
Authority key identifier: 66:86:C9:8E:50:28:79:4E:9E:46:72:3E:7D:80:81:0F:92:D9:AE:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6686C98E5028794E9E46723E7D80810F92D9AECF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35322e302f32322d3332203d3e20323731343139.roa
Signing time:             Mon 29 Jul 2024 12:45:48 +0000
ROA not before:           Mon 29 Jul 2024 12:40:48 +0000
ROA not after:            Mon 28 Jul 2025 12:45:48 +0000
asID:                     271419
IP address blocks:        200.39.52.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:be:77:1a:86:b5:e5:3c:80:d4:c5:c5:c2:37:b1:07:ac:55:1d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6686C98E5028794E9E46723E7D80810F92D9AECF
        Validity
            Not Before: Jul 29 12:40:48 2024 GMT
            Not After : Jul 28 12:45:48 2025 GMT
        Subject: CN=C4EA3D35E11E6D5E76495F2BA84E26FB2EE6AF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:f3:38:2c:f8:c2:09:2f:50:f7:59:de:06:
                    f4:3f:c2:21:7f:ff:6b:a7:22:5c:80:8f:ab:92:e0:
                    af:35:e4:1a:36:26:7e:96:06:86:e9:58:6b:9e:d7:
                    c2:7a:56:b2:60:d3:da:a3:82:8d:32:05:bf:af:15:
                    48:b5:bb:29:e4:5c:23:57:cc:2f:51:e5:78:d6:44:
                    1e:c7:7b:0a:cb:06:de:1d:72:99:4e:e4:fe:40:c1:
                    6f:fc:d7:49:f1:98:e3:6b:c3:5c:5e:66:ed:08:79:
                    df:f8:76:ea:c6:0c:4c:aa:99:d8:34:c0:83:46:c5:
                    b3:ff:4d:a6:76:00:bb:75:1c:72:1d:1c:fb:c2:0c:
                    6a:2f:ad:02:68:35:4b:23:07:8e:1a:02:3b:37:31:
                    03:2f:58:be:71:9f:20:09:49:74:0d:64:df:3f:22:
                    74:96:d8:21:97:8e:7e:91:bd:51:0e:53:86:92:bf:
                    81:5d:e2:67:10:03:73:ea:79:27:e0:65:2e:99:f1:
                    53:86:90:e7:4a:99:9f:88:cb:2e:75:31:bb:5e:2a:
                    74:2e:8d:10:5b:3c:ff:66:0e:9f:e4:e2:38:52:e6:
                    3d:3a:73:3c:9b:56:d6:86:9e:0b:64:e0:21:74:88:
                    72:2b:9b:8a:6e:53:68:09:84:36:a4:91:1a:5a:db:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EA:3D:35:E1:1E:6D:5E:76:49:5F:2B:A8:4E:26:FB:2E:E6:AF:31
            X509v3 Authority Key Identifier:
                keyid:66:86:C9:8E:50:28:79:4E:9E:46:72:3E:7D:80:81:0F:92:D9:AE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/6686C98E5028794E9E46723E7D80810F92D9AECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6686C98E5028794E9E46723E7D80810F92D9AECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35322e302f32322d3332203d3e20323731343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:3f:34:11:ca:28:d4:18:0f:2a:1b:dc:f1:a7:eb:ee:79:27:
         b4:95:d5:eb:68:dc:b5:bf:d2:ea:1a:8e:e4:2f:49:d7:53:0b:
         44:40:0a:cb:3f:cf:1d:ca:3a:8f:e8:7a:eb:47:fd:9a:fe:a9:
         53:ff:9a:f4:c7:44:08:16:55:3b:8e:26:5f:83:25:35:d1:b1:
         98:8c:a4:cc:60:b5:8e:40:7f:0b:f5:df:c9:e4:dc:8f:64:b8:
         51:52:82:c6:15:3c:20:79:9c:40:cd:64:ec:8c:02:1f:96:df:
         c2:9f:7d:96:6f:84:76:91:87:af:59:6e:20:e3:a8:b0:76:3b:
         d4:89:6c:87:a6:ee:c0:6d:ac:f7:08:9d:a9:40:57:a0:39:79:
         89:6a:01:f9:f6:cf:b4:8a:da:79:3c:74:b9:1f:d0:f0:1b:f1:
         ce:3e:b0:aa:86:e1:1c:56:40:bd:59:0c:33:b6:c7:54:76:47:
         b9:5d:4c:0f:b2:7c:c1:31:1c:12:95:84:96:5c:c8:05:3e:41:
         e8:17:1e:bb:67:54:c3:87:21:65:b6:61:84:a5:b9:c9:d5:16:
         d4:08:4b:c9:35:91:41:c4:74:55:8b:72:c5:79:07:b7:3e:2e:
         c8:64:e3:9a:d6:c2:e2:fb:bb:79:43:85:2d:35:80:ba:e2:df:
         30:c4:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:52 2025 by rpki-client