Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35332e302f32342d3234203d3e20323731343139.roa
File:                     3230302e33392e35332e302f32342d3234203d3e20323731343139.roa (raw, json)
Hash identifier:          pRwqiPj1tlBUMA1QiWpEUipLeyJ1gSKLJh2u1qq5EtU=
Subject key identifier:   36:50:35:64:D8:13:02:51:32:9C:74:7D:CC:7F:98:D2:1E:61:C4:6E
Certificate issuer:       /CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
Certificate serial:       55AF6AF14CBCF64A4D9FED1C6852609BC0E33F1A
Authority key identifier: 91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35332e302f32342d3234203d3e20323731343139.roa
Signing time:             Wed 11 Oct 2023 20:00:00 +0000
ROA not before:           Wed 11 Oct 2023 19:55:00 +0000
ROA not after:            Wed 09 Oct 2024 20:00:00 +0000
asID:                     271419
IP address blocks:        200.39.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:af:6a:f1:4c:bc:f6:4a:4d:9f:ed:1c:68:52:60:9b:c0:e3:3f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
        Validity
            Not Before: Oct 11 19:55:00 2023 GMT
            Not After : Oct  9 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:ad:d9:7e:4b:37:c9:ff:90:7b:2b:7c:a2:
                    d5:f6:ac:37:83:5d:e9:74:71:44:5e:43:2c:9e:29:
                    4e:a2:fc:4b:f3:b2:76:2e:87:fd:5b:ca:2e:df:e4:
                    66:3e:de:62:a6:fc:4c:a7:ee:fa:30:5d:fc:f5:9b:
                    79:66:07:0c:af:cd:19:f0:56:fa:fa:0a:ee:08:9b:
                    8e:9a:06:83:c2:d0:7a:60:3d:fe:4f:3c:17:d1:57:
                    80:c3:d3:1b:72:2d:ed:19:f0:ca:e7:56:42:7d:1d:
                    ba:bc:6a:1e:00:75:d6:e6:98:39:dc:fe:19:15:7f:
                    71:6b:df:89:07:f4:5e:9f:28:ff:95:a9:43:f5:87:
                    06:47:2d:52:6a:ee:29:0e:2d:d5:b9:81:e5:e6:4d:
                    ee:a5:ab:78:e8:41:9c:fb:28:c1:c3:2f:7e:11:bf:
                    43:25:9d:67:f2:64:c9:e9:52:e4:95:95:7d:9e:77:
                    63:6b:71:ac:92:1e:bb:89:3e:d6:2e:6f:3d:6d:fe:
                    79:de:27:89:e3:91:2a:79:a3:2f:1a:ee:9d:24:77:
                    96:08:67:f0:e4:35:d2:38:9c:40:ea:e8:e3:8e:46:
                    37:c8:3a:0c:9f:1e:6d:52:6f:73:22:33:c0:d5:ea:
                    7b:61:36:23:3b:16:0f:c1:de:8e:62:42:ed:40:76:
                    f1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:50:35:64:D8:13:02:51:32:9C:74:7D:CC:7F:98:D2:1E:61:C4:6E
            X509v3 Authority Key Identifier:
                keyid:91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35332e302f32342d3234203d3e20323731343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:e3:31:2e:36:f3:e3:70:70:46:83:a4:35:70:98:37:9b:0c:
         1a:53:d2:a6:55:1e:37:60:03:bf:08:ad:d0:21:04:1b:6d:5c:
         43:40:81:66:99:f9:f3:34:b8:8c:72:d2:e1:67:ad:9c:89:08:
         ee:03:f4:70:91:2b:9f:a2:ac:17:a7:7b:0a:62:6d:0b:10:bb:
         0d:c1:eb:cd:5d:59:1b:4c:95:3c:b3:8a:33:09:aa:1e:07:58:
         9b:f2:3f:38:1b:e0:30:0b:87:b1:52:f4:24:ce:59:9f:5c:45:
         93:5c:d7:bc:3c:74:7e:0b:b9:f1:fc:a0:78:57:cc:1d:36:e7:
         87:7b:26:35:65:a8:89:f6:f2:d1:a0:c4:22:7f:2d:43:b1:1c:
         10:51:65:52:2b:30:cc:ce:51:38:cc:8a:94:79:01:6c:7e:37:
         94:b6:b8:d2:41:eb:0b:6c:5b:33:56:97:dc:93:a0:bb:27:b7:
         c4:5c:f7:2f:9e:c5:ce:84:5d:49:0b:cc:84:a6:19:08:a3:5f:
         0e:30:a1:e6:15:b7:99:e3:46:3d:64:22:dc:f5:8e:09:51:a0:
         91:1a:5c:8a:ec:c9:52:35:72:6b:ca:c5:00:d9:d3:d8:e1:e5:
         be:d0:18:d4:82:6f:c2:e7:35:cc:55:b5:52:27:f0:62:b4:7d:
         c7:38:ed:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:51 2025 by rpki-client