Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230302e3135302e3137302e302f32342d3234203d3e20323635333033.roa
File:                     3230302e3135302e3137302e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          Dckmquk4IB4QJe/Rz2uGJr7mjOUNMW7j/6KS1RSa+GA=
Subject key identifier:   93:15:C4:A5:AC:F3:1D:3E:1F:4A:80:8E:B5:06:94:A1:DB:D1:AF:F9
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       7FED17554B72D611972FD66F0293A9E8CE304860
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230302e3135302e3137302e302f32342d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:28:55 +0000
ROA not before:           Wed 10 Jan 2024 17:23:55 +0000
ROA not after:            Wed 08 Jan 2025 17:28:55 +0000
asID:                     265303
IP address blocks:        200.150.170.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ed:17:55:4b:72:d6:11:97:2f:d6:6f:02:93:a9:e8:ce:30:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:23:55 2024 GMT
            Not After : Jan  8 17:28:55 2025 GMT
        Subject: CN=9315C4A5ACF31D3E1F4A808EB50694A1DBD1AFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c8:39:ab:7e:43:2f:fd:99:1e:81:8a:79:e1:
                    20:2e:1b:33:4b:88:e1:82:a1:3e:c6:7e:a9:f6:2c:
                    20:6c:90:12:46:58:51:65:b2:63:64:4f:09:09:99:
                    20:e6:c2:d8:da:41:35:c6:8c:cf:8b:fe:90:cc:10:
                    cb:ad:d8:d5:b4:8d:57:eb:32:34:c3:c0:62:8b:40:
                    b7:6a:62:2b:e2:17:65:58:93:41:3a:29:94:89:35:
                    be:87:42:ac:d2:20:3e:3b:53:31:d1:77:69:6a:62:
                    dd:e2:ea:ff:fb:45:3f:3a:ae:8e:0e:85:94:7a:e8:
                    55:40:29:22:2d:53:1b:dd:9e:02:45:00:0f:07:fa:
                    3d:6b:6f:f2:95:d3:39:e6:0a:66:14:35:f7:e4:2a:
                    9b:92:2e:af:60:71:71:1f:64:2a:00:72:85:f8:f3:
                    fe:45:08:d8:03:29:84:c1:fd:e5:be:08:8e:4f:d3:
                    f4:8a:10:76:61:29:49:fd:82:e8:44:08:76:63:4f:
                    cc:21:a3:bd:9b:4a:9d:2b:73:f6:32:7d:0f:53:d6:
                    c2:80:61:2f:5b:0b:63:6b:e8:d3:83:f2:0d:b4:e3:
                    f7:8f:43:95:4c:0a:0d:ae:86:ca:1c:f1:32:f3:3e:
                    65:a0:8d:6b:ec:3d:c4:32:fe:bc:ab:4e:20:84:b4:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:15:C4:A5:AC:F3:1D:3E:1F:4A:80:8E:B5:06:94:A1:DB:D1:AF:F9
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230302e3135302e3137302e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:50:5c:be:53:15:50:e7:6e:c1:fa:65:ca:a1:a8:0a:40:35:
         63:8c:2f:23:ad:9d:09:17:b2:98:ee:10:b5:7f:a7:e4:74:24:
         03:fc:67:a3:66:10:10:43:b5:3b:51:72:3d:53:b8:fc:21:26:
         7f:67:c4:7c:41:9c:40:73:40:6a:2f:b1:6a:66:f4:2b:68:e8:
         ac:1e:f9:93:d7:ac:71:e1:bc:1f:cb:ad:82:5f:e5:13:25:e8:
         00:2c:12:30:5f:94:43:73:ee:5d:d2:d8:f7:8d:4d:3a:57:e6:
         a6:e6:1c:21:2a:d1:3e:4a:70:5f:a5:40:50:ad:1c:8f:5b:f6:
         5f:41:b2:65:6c:bb:58:42:cf:29:5d:fe:5d:79:4a:b9:f5:33:
         ac:2a:3a:dc:98:d9:d5:51:1e:1b:13:d1:1d:b3:25:54:d1:a3:
         82:ae:28:a4:69:eb:4d:1a:f6:55:a0:dd:31:6c:ee:4b:0b:40:
         84:e2:d9:6a:af:ac:a5:0c:c4:f9:9a:81:37:81:10:a0:94:75:
         6e:60:8a:a7:ac:75:55:1c:76:b0:4e:04:ab:b4:ba:39:f0:d2:
         52:a1:6a:be:00:d2:bf:37:fc:af:8b:3e:f3:71:99:66:82:ad:
         42:36:2e:f7:58:a8:35:3d:74:b2:b7:00:fb:8c:a6:73:f5:21:
         98:03:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:22 2025 by rpki-client