Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230302e3135302e3136392e302f32342d3234203d3e20323635333033.roa
File:                     3230302e3135302e3136392e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          z1/TAOW5trlyI8C9FJshLiQz6Thfin4VOXICEgEs95g=
Subject key identifier:   D8:E6:FE:08:DC:8B:64:59:A4:FA:4D:4C:02:60:E7:60:FE:F7:7E:DF
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       2A162C4BCF2D3F2B4CC3EB4E3C9B4D5ADE9455AF
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230302e3135302e3136392e302f32342d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:29:32 +0000
ROA not before:           Wed 10 Jan 2024 17:24:32 +0000
ROA not after:            Wed 08 Jan 2025 17:29:32 +0000
asID:                     265303
IP address blocks:        200.150.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:16:2c:4b:cf:2d:3f:2b:4c:c3:eb:4e:3c:9b:4d:5a:de:94:55:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:24:32 2024 GMT
            Not After : Jan  8 17:29:32 2025 GMT
        Subject: CN=D8E6FE08DC8B6459A4FA4D4C0260E760FEF77EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:c7:e1:ce:77:e6:28:ef:42:f4:b0:81:5b:
                    4f:22:f8:ce:28:64:a4:64:2c:8d:c2:03:8f:9f:a8:
                    3c:8d:44:1f:47:16:a9:3e:54:27:fc:64:d8:44:48:
                    57:9f:63:dc:19:4b:e8:d3:d2:a1:bd:74:ac:51:c2:
                    e8:88:a2:d6:3d:ad:c9:37:c8:d5:2f:42:96:38:b0:
                    0c:cb:3b:c3:d7:e4:6b:f4:7f:b0:91:f2:c7:e3:c3:
                    fb:26:72:99:8b:b4:01:45:33:0b:13:a8:d4:36:d4:
                    51:fb:6d:36:f4:54:00:3f:c3:43:82:b3:cb:1c:b7:
                    94:cb:e9:49:f9:4c:6b:e0:3c:af:1b:40:3d:c7:77:
                    ee:69:55:61:16:a4:41:5a:ab:11:d3:54:6b:6b:81:
                    0a:c1:d5:47:bd:61:d1:e7:11:71:84:43:a9:0d:a4:
                    8e:de:df:00:39:26:c7:2e:a3:bd:48:50:93:ff:16:
                    e0:a3:16:76:77:b0:65:a1:fe:b3:03:d1:6b:48:1b:
                    7d:46:52:fe:64:7b:34:d0:17:28:62:43:e3:6d:0f:
                    85:47:06:cf:43:e7:b7:c4:14:77:98:9e:0a:47:9f:
                    e8:a5:48:b0:5c:90:9c:86:16:95:24:64:1d:0c:d0:
                    89:a2:bd:f7:b0:f7:af:75:48:43:c9:95:fa:ca:83:
                    7c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E6:FE:08:DC:8B:64:59:A4:FA:4D:4C:02:60:E7:60:FE:F7:7E:DF
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230302e3135302e3136392e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:71:06:c3:03:90:50:c7:ec:f5:e7:58:19:11:c8:77:b0:7f:
         ba:2d:bd:f9:74:42:9e:d9:a4:ee:2d:a2:c1:a3:fb:83:5d:f2:
         c8:57:ae:44:6b:e3:2d:0d:82:65:30:07:e5:0d:5e:c2:11:53:
         9a:d7:08:7c:0e:48:27:9f:84:bc:e2:f7:43:07:32:dd:f8:4f:
         66:8a:fe:3a:1a:63:e9:c0:7a:50:78:b2:15:66:6d:56:68:65:
         1b:ea:ac:fc:3f:e8:92:b8:a7:82:c2:1e:71:f5:65:35:d7:7f:
         b6:f5:39:ec:b3:96:7d:b3:61:8b:7a:e0:3d:c6:5f:d7:df:91:
         85:09:55:8e:87:ff:df:ef:4b:38:62:6a:a2:37:56:32:d4:42:
         b2:1f:5c:b5:cd:34:66:09:b6:a4:4f:21:13:e7:1a:50:b9:e3:
         33:96:10:98:55:59:47:29:43:d5:25:0a:4a:e1:d9:ae:9d:b1:
         dd:84:02:31:de:7a:d8:e1:ce:9f:67:0f:71:ef:03:2d:ce:ab:
         cb:a6:0b:12:04:3f:b2:26:dc:0f:e9:82:56:e8:5d:38:cb:78:
         72:e8:ed:b0:e2:ec:2a:08:78:99:ab:28:55:04:fb:86:a2:87:
         0f:09:76:9d:84:59:20:d5:d4:fa:8f:1c:51:ef:df:a7:68:1b:
         e4:8a:f2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:19 2025 by rpki-client