Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/3139302e3132332e3230302e302f32322d3332203d3e20323636313935.roa
File:                     3139302e3132332e3230302e302f32322d3332203d3e20323636313935.roa (raw, json)
Hash identifier:          5dtcNCOl5aLYnD4u0pWA8jSRoY3YZWONoacMFxEg9yA=
Subject key identifier:   ED:C8:08:85:94:5D:F1:89:89:1F:3B:AE:A5:9F:12:EA:CB:ED:14:2E
Certificate issuer:       /CN=67EA701434960D575DDC6F2D9E89E9155833AF65
Certificate serial:       4BA6B002D834519E8EFA34181DE09542711E67C0
Authority key identifier: 67:EA:70:14:34:96:0D:57:5D:DC:6F:2D:9E:89:E9:15:58:33:AF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EA701434960D575DDC6F2D9E89E9155833AF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/3139302e3132332e3230302e302f32322d3332203d3e20323636313935.roa
Signing time:             Mon 20 Nov 2023 14:47:40 +0000
ROA not before:           Mon 20 Nov 2023 14:42:40 +0000
ROA not after:            Mon 18 Nov 2024 14:47:40 +0000
asID:                     266195
IP address blocks:        190.123.200.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a6:b0:02:d8:34:51:9e:8e:fa:34:18:1d:e0:95:42:71:1e:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EA701434960D575DDC6F2D9E89E9155833AF65
        Validity
            Not Before: Nov 20 14:42:40 2023 GMT
            Not After : Nov 18 14:47:40 2024 GMT
        Subject: CN=EDC80885945DF189891F3BAEA59F12EACBED142E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:53:26:88:d6:06:a7:b0:04:4f:b7:96:9b:
                    a9:b7:b7:40:50:6e:48:d0:10:2a:1a:ed:e1:e1:9c:
                    0a:97:94:e0:36:fa:bd:09:cf:d6:6d:ee:e8:7f:70:
                    f9:76:9e:ce:65:e1:5b:9c:f8:09:2a:db:b2:29:69:
                    38:9e:ba:ec:7c:51:98:78:72:17:21:20:98:e3:a6:
                    9a:33:8e:1b:f8:bc:82:1f:b3:a8:8b:30:03:28:71:
                    0e:67:cb:1b:ce:6e:d9:63:72:b3:95:eb:b6:b2:58:
                    45:0c:0d:23:9e:46:6c:09:c2:da:20:a9:5a:f3:67:
                    4c:11:a5:e3:30:6e:69:f0:6b:8d:10:8d:f4:b4:f6:
                    55:82:b0:3c:ad:0d:52:75:44:ca:6f:6f:5a:5d:ce:
                    19:fa:f7:0b:b4:83:e5:3b:60:b5:61:33:9f:f6:88:
                    1c:bc:15:90:1c:00:2f:87:f3:7f:8e:97:0f:24:50:
                    63:1e:00:b7:b1:92:15:ce:d2:0b:c3:f4:64:a1:c3:
                    38:25:87:df:48:cf:c0:00:88:9d:2f:4c:17:1c:f9:
                    d2:a8:db:bc:38:e7:89:41:1d:66:d8:eb:80:ba:28:
                    51:17:17:84:a8:af:40:35:83:ce:2f:c8:60:4d:2c:
                    8d:13:58:8a:65:72:c5:20:05:59:e6:0f:5f:f9:42:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C8:08:85:94:5D:F1:89:89:1F:3B:AE:A5:9F:12:EA:CB:ED:14:2E
            X509v3 Authority Key Identifier:
                keyid:67:EA:70:14:34:96:0D:57:5D:DC:6F:2D:9E:89:E9:15:58:33:AF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/67EA701434960D575DDC6F2D9E89E9155833AF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EA701434960D575DDC6F2D9E89E9155833AF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/3139302e3132332e3230302e302f32322d3332203d3e20323636313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:df:7c:9a:b6:1c:ac:74:93:1b:2c:1c:4d:00:0e:47:5f:
         46:3d:d9:cb:ed:22:6a:e5:3b:9a:d2:45:b0:eb:42:f6:4d:ae:
         39:77:d4:e8:6e:d6:94:db:b2:92:f9:e8:1b:78:25:83:7a:f9:
         69:22:b4:23:e0:7c:20:29:ce:31:cb:83:a2:7d:86:40:8e:a2:
         38:f9:04:3d:99:7e:53:3a:83:9f:49:81:f1:a5:81:9f:e1:a2:
         9a:c6:9b:1d:9c:2b:30:c4:d8:64:4f:73:f5:c3:1b:54:38:42:
         71:95:e1:1f:2a:82:59:57:3d:ca:a4:4c:9b:37:bd:d0:14:e3:
         52:84:37:de:b5:3c:ae:cd:fe:86:39:3c:28:ad:00:8e:3a:2d:
         4b:94:4d:54:18:0a:a7:ff:48:a3:a6:4b:9d:4e:f4:96:89:b5:
         1d:73:03:f6:4b:50:2c:3b:8d:10:04:85:56:f2:2c:58:5a:be:
         93:88:7e:17:76:bd:25:46:75:5c:bc:9a:bc:37:62:6f:43:88:
         90:8f:52:b9:97:aa:e9:e8:77:9a:47:9e:de:b4:ae:77:29:87:
         54:7c:b2:0a:e1:39:92:bf:fd:f3:2d:f7:0e:e9:cb:3d:a5:13:
         e8:37:6c:2a:f9:9d:58:6e:55:04:4b:b1:fe:21:35:e5:0b:e4:
         5b:0b:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:49:10 2025 by rpki-client