Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3135302e302f32342d3234203d3e20323635333033.roa
File:                     3230312e38372e3135302e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          xcLHoR6yjqhjk85pfm4xRexTzw0o1ZekEw/AuHUwUB8=
Subject key identifier:   CE:5B:63:47:78:31:AE:CC:FF:12:E9:E4:FA:24:1E:A2:3F:15:6E:CC
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       0A1A816E5E7620F70892A5FE639557389DDD39D0
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3135302e302f32342d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:33:26 +0000
ROA not before:           Wed 10 Jan 2024 17:28:26 +0000
ROA not after:            Wed 08 Jan 2025 17:33:26 +0000
asID:                     265303
IP address blocks:        201.87.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1a:81:6e:5e:76:20:f7:08:92:a5:fe:63:95:57:38:9d:dd:39:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:28:26 2024 GMT
            Not After : Jan  8 17:33:26 2025 GMT
        Subject: CN=CE5B63477831AECCFF12E9E4FA241EA23F156ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:23:b6:15:55:ac:20:80:9d:9f:7a:ad:ba:05:
                    39:ff:be:b6:26:eb:b5:72:1a:5d:5f:03:b8:72:6e:
                    fb:33:74:bd:16:8d:c1:e9:9b:46:28:2f:65:3a:b5:
                    6c:41:55:4b:e3:b2:ec:1b:8c:44:31:bc:3d:5c:1d:
                    24:b8:d6:0d:36:b6:46:e1:64:bd:21:d5:ea:bc:c2:
                    5e:81:44:54:29:b3:df:ff:ef:54:0b:43:5c:f9:99:
                    bc:35:ed:99:70:12:a0:d2:12:11:df:98:ca:cc:f0:
                    83:d6:43:57:96:e4:e6:04:1a:d8:77:78:bf:16:e7:
                    e5:e8:ec:bc:13:52:80:df:ad:cf:05:0c:15:95:f2:
                    f4:de:96:27:48:d1:2c:98:10:94:99:c8:b9:4e:08:
                    ca:cb:63:a5:a1:9d:dd:e4:46:04:54:21:9d:0a:ca:
                    e5:f1:16:30:40:b6:68:0f:45:b3:84:53:a4:0e:6f:
                    e0:fd:dc:cc:88:2a:eb:dc:59:27:e2:a7:78:31:fc:
                    20:be:6b:f8:9a:8d:51:8c:a4:90:89:7b:70:c8:82:
                    ad:4d:f1:a4:b2:40:ea:45:6f:73:f4:0e:ef:ef:09:
                    7b:06:6f:47:f4:69:7e:cf:10:e6:b9:aa:95:34:23:
                    27:56:65:87:03:83:3d:ff:18:60:b8:69:be:bb:9b:
                    62:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5B:63:47:78:31:AE:CC:FF:12:E9:E4:FA:24:1E:A2:3F:15:6E:CC
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3135302e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:72:31:34:b9:10:bf:25:21:ae:8a:54:b2:d1:6b:65:77:
         1f:a0:f3:38:af:dd:dd:c5:52:41:f0:42:29:40:d2:b9:78:1b:
         63:34:58:1e:6d:64:95:2e:c6:6b:fa:c3:37:65:2b:4c:ab:36:
         3d:ea:2c:71:a0:3e:68:67:6b:24:cb:b7:49:ce:71:d2:fc:29:
         52:50:35:86:ea:39:ea:0b:32:d3:3a:be:d4:66:60:cb:ca:f7:
         97:8a:c3:a2:dc:58:0b:40:25:0e:d8:f3:05:9a:46:93:12:ba:
         ca:f9:f7:a2:2c:3c:f1:8e:c0:bd:8d:2d:2f:42:80:e1:47:d6:
         43:eb:be:5c:37:36:57:12:fb:d8:c6:e8:77:a0:70:8a:68:0b:
         22:29:46:54:62:38:48:e7:22:3c:b4:95:85:d9:97:dd:06:60:
         4d:4a:04:74:6c:42:58:bc:66:01:6b:92:18:df:cc:dd:ad:7a:
         ae:50:fc:e0:02:60:cc:29:76:32:c7:be:8a:97:d9:f4:bc:ad:
         c3:28:9d:d7:69:69:11:8d:22:5d:1b:b0:ec:2b:84:df:9a:37:
         63:3e:8e:f9:37:ba:0c:0f:43:81:6d:d2:66:43:24:9d:e8:98:
         45:d6:a4:c1:36:6a:2a:d0:f5:cc:f3:22:4f:08:ce:4a:6b:a0:
         c3:57:33:3d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUChqBbl52IPcIkqX+Y5VXOJ3dOdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQzNjQzNDE1RDREQ0Q0Q0QwREQ0RTQxMUQxQTI2MUZG
NDdBNUJERTAeFw0yNDAxMTAxNzI4MjZaFw0yNTAxMDgxNzMzMjZaMDMxMTAvBgNV
BAMTKENFNUI2MzQ3NzgzMUFFQ0NGRjEyRTlFNEZBMjQxRUEyM0YxNTZFQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyI7YVVawggJ2feq26BTn/vrYm
67VyGl1fA7hybvszdL0WjcHpm0YoL2U6tWxBVUvjsuwbjEQxvD1cHSS41g02tkbh
ZL0h1eq8wl6BRFQps9//71QLQ1z5mbw17ZlwEqDSEhHfmMrM8IPWQ1eW5OYEGth3
eL8W5+Xo7LwTUoDfrc8FDBWV8vTelidI0SyYEJSZyLlOCMrLY6Whnd3kRgRUIZ0K
yuXxFjBAtmgPRbOEU6QOb+D93MyIKuvcWSfip3gx/CC+a/iajVGMpJCJe3DIgq1N
8aSyQOpFb3P0Du/vCXsGb0f0aX7PEOa5qpU0IydWZYcDgz3/GGC4ab67m2KNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzltjR3gxrsz/Eunk+iQeoj8VbswwHwYDVR0j
BBgwFoAURDZDQV1NzUzQ3U5BHRomH/R6W94wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW43RnZEM1F4UExFWHM4SHBnV1V1cEhxQmhQVnNKR0tIOEdFa1JwVnB0
N1gvMC80NDM2NDM0MTVENERDRDRDRDBERDRFNDExRDFBMjYxRkY0N0E1QkRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0MzY0MzQxNUQ0RENENENE
MERENEU0MTFEMUEyNjFGRjQ3QTVCREUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzluN0Z2RDNReFBMRVhzOEhwZ1dVdXBIcUJoUFZzSkdLSDhHRWtScFZwdDdYLzAv
MzIzMDMxMmUzODM3MmUzMTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJV5YwDQYJKoZIhvcNAQELBQADggEBAHKNcjE0
uRC/JSGuilSy0Wtldx+g8ziv3d3FUkHwQilA0rl4G2M0WB5tZJUuxmv6wzdlK0yr
Nj3qLHGgPmhnayTLt0nOcdL8KVJQNYbqOeoLMtM6vtRmYMvK95eKw6LcWAtAJQ7Y
8wWaRpMSusr596IsPPGOwL2NLS9CgOFH1kPrvlw3NlcS+9jG6HegcIpoCyIpRlRi
OEjnIjy0lYXZl90GYE1KBHRsQli8ZgFrkhjfzN2teq5Q/OACYMwpdjLHvoqX2fS8
rcMonddpaRGNIl0bsOwrhN+aN2M+jvk3ugwPQ4Ft0mZDJJ3omEXWpME2airQ9czz
Ik8IzkproMNXMz0=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:15 2025 by rpki-client