Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa
File:                     3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          SN6YCAj9/hbs8MkKRYH3UdKMm/pKXlg6putkoorQEd0=
Subject key identifier:   0D:A4:03:A1:C3:F3:5E:C6:A7:89:77:B6:72:CB:A8:02:BD:A8:5B:CD
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       7191109AC713C1A253B7DD950C37D8D04D8B96DC
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:30:59 +0000
ROA not before:           Wed 10 Jan 2024 17:25:59 +0000
ROA not after:            Wed 08 Jan 2025 17:30:59 +0000
asID:                     265303
IP address blocks:        201.87.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:91:10:9a:c7:13:c1:a2:53:b7:dd:95:0c:37:d8:d0:4d:8b:96:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:25:59 2024 GMT
            Not After : Jan  8 17:30:59 2025 GMT
        Subject: CN=0DA403A1C3F35EC6A78977B672CBA802BDA85BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:14:fb:19:de:4c:02:84:cf:12:75:67:af:0e:
                    8c:92:28:76:9c:0f:e5:d0:70:63:5d:74:f0:45:d3:
                    1a:cd:d0:cf:5e:21:77:6f:15:4b:09:53:27:5f:7f:
                    0b:1e:93:d6:ac:0b:16:96:d1:62:ea:48:2b:02:8c:
                    f6:75:1a:48:11:92:8b:62:3b:d7:07:82:4f:81:34:
                    fc:44:95:41:dc:cb:0b:de:5d:6f:b1:fd:80:40:ca:
                    1f:06:8e:de:d7:d1:d8:8f:70:2a:b0:d1:d1:3a:fd:
                    68:08:4a:bf:8e:ad:d2:23:fb:3d:14:61:2a:57:62:
                    ac:8e:4a:fe:65:06:29:15:91:74:78:f1:c8:42:eb:
                    c9:1e:b7:1f:9e:a9:85:97:b3:fa:c1:e1:02:e7:67:
                    51:83:dc:e5:6f:86:04:60:3e:ce:2c:88:a7:c4:dd:
                    28:33:80:17:80:a8:16:1d:c0:40:7d:a9:ac:e0:0b:
                    02:e7:07:b1:69:1c:4e:52:8f:d8:bc:9f:2b:ad:0a:
                    fe:1b:67:8e:4a:4c:93:94:25:36:a0:ec:11:8e:5c:
                    48:61:7a:dd:b7:6d:71:4f:54:a0:83:94:3d:f3:97:
                    82:53:29:16:80:34:2a:b1:95:41:de:c7:56:d6:a0:
                    0a:cd:21:37:5a:05:60:ec:49:77:a6:1d:d7:3e:1d:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A4:03:A1:C3:F3:5E:C6:A7:89:77:B6:72:CB:A8:02:BD:A8:5B:CD
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:20:9e:31:eb:fb:ea:c8:22:83:61:c3:6f:c8:1f:ee:a7:20:
         76:bd:ad:88:1b:50:4c:93:b8:a0:54:2f:17:e9:9c:3e:10:5d:
         2c:d7:64:c3:38:0f:dd:bd:9e:1e:90:31:44:fd:da:b1:27:1e:
         b5:af:cd:27:6e:04:a0:81:56:c0:6b:9e:d5:0c:33:b5:70:73:
         56:81:d3:6b:64:05:2a:5a:46:8e:56:49:19:99:06:ab:cb:d0:
         28:0b:13:80:4b:23:c9:91:fb:8d:d5:c1:36:0d:28:03:f5:35:
         f9:0e:84:fe:1a:c1:66:a3:21:f1:2d:ed:82:2a:f8:f3:91:2d:
         93:f9:e6:c4:a9:ac:ab:a0:ad:df:64:8c:e2:de:97:e6:3e:fa:
         3a:e8:6d:57:8a:83:cd:f0:a4:f0:05:40:f7:68:d8:91:c2:13:
         60:47:72:f6:98:23:e5:be:db:7d:b8:09:97:10:d2:f3:93:43:
         e2:39:8a:a2:5d:39:44:0d:be:aa:78:0b:e8:0b:ba:44:12:f5:
         25:3a:eb:e1:a7:68:1c:d3:e1:e7:52:59:cf:03:2d:80:d0:28:
         24:c7:55:5c:71:9f:a5:12:b5:f7:97:36:b8:54:21:6a:69:2b:
         9e:d4:92:c0:f0:c5:5e:67:70:92:e6:f5:9d:1d:3a:07:a2:56:
         75:7f:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:34 2025 by rpki-client