Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/3134332e3230322e3234342e302f32322d3234203d3e20323634303733.roa
File:                     3134332e3230322e3234342e302f32322d3234203d3e20323634303733.roa (raw, json)
Hash identifier:          TVy/C+iPgcKQOfNY+v8MDn/luHF0ldIPrJmrRV1sNCg=
Subject key identifier:   5D:0A:FC:93:12:27:62:9D:89:99:9C:55:C4:F9:B6:2C:AD:8F:49:C6
Certificate issuer:       /CN=2020E4386470854F498B76284D60EBE5CCB3BE98
Certificate serial:       56E50D82D8E4D1489F914679EBD3094275170861
Authority key identifier: 20:20:E4:38:64:70:85:4F:49:8B:76:28:4D:60:EB:E5:CC:B3:BE:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2020E4386470854F498B76284D60EBE5CCB3BE98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/3134332e3230322e3234342e302f32322d3234203d3e20323634303733.roa
Signing time:             Sun 14 Nov 2021 15:00:01 +0000
ROA not before:           Sun 14 Nov 2021 14:55:01 +0000
ROA not after:            Mon 14 Nov 2022 15:00:01 +0000
asID:                     264073
IP address blocks:        143.202.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e5:0d:82:d8:e4:d1:48:9f:91:46:79:eb:d3:09:42:75:17:08:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2020E4386470854F498B76284D60EBE5CCB3BE98
        Validity
            Not Before: Nov 14 14:55:01 2021 GMT
            Not After : Nov 14 15:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:53:ac:1c:e4:69:92:b4:9e:33:5c:53:b0:
                    a5:99:31:c1:f9:33:35:93:6a:51:69:cd:aa:60:ee:
                    96:be:64:ae:5b:87:8d:5e:ee:0f:c0:de:e3:80:d0:
                    b9:2f:d7:de:ac:26:27:2e:de:94:7a:4c:64:11:f6:
                    3f:0f:1f:d3:d7:4c:08:e7:fd:a2:e7:cf:44:9d:52:
                    e4:f5:db:e1:5d:01:ec:65:5a:71:f1:e3:b2:70:20:
                    e4:5b:4e:77:5e:2d:16:3c:1a:de:4f:fc:f4:46:de:
                    5c:19:5c:15:ff:c2:d4:3a:b2:13:1e:7b:a4:61:e1:
                    b5:1d:41:7a:3a:27:62:95:79:f4:77:bc:e1:43:63:
                    a5:0e:1c:d0:3e:a0:8f:05:00:aa:bc:6d:bc:3e:0e:
                    00:4f:5f:e1:3c:73:6d:e1:32:14:77:54:0d:cd:92:
                    82:3a:34:df:1d:cb:18:a1:34:29:09:8a:c5:95:6c:
                    83:b4:cb:23:9e:e2:35:3f:0b:e5:ea:60:90:13:f4:
                    19:e7:9d:1d:8a:6e:64:9d:b2:1c:40:56:b1:cb:17:
                    e8:e3:2e:1e:b7:26:71:38:40:4a:21:56:b3:94:e5:
                    21:70:19:61:96:de:5c:31:a3:22:e9:1b:2f:69:c4:
                    73:b2:98:80:0b:5d:10:34:52:19:da:33:6b:42:29:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0A:FC:93:12:27:62:9D:89:99:9C:55:C4:F9:B6:2C:AD:8F:49:C6
            X509v3 Authority Key Identifier:
                keyid:20:20:E4:38:64:70:85:4F:49:8B:76:28:4D:60:EB:E5:CC:B3:BE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/2020E4386470854F498B76284D60EBE5CCB3BE98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2020E4386470854F498B76284D60EBE5CCB3BE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/3134332e3230322e3234342e302f32322d3234203d3e20323634303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:5b:ef:3e:72:17:ba:7c:53:a6:56:1e:c4:1e:80:df:d9:3e:
         82:ea:37:43:c3:fb:44:1f:1f:01:8d:a0:f7:78:d9:98:ae:bb:
         21:98:9d:7f:a6:3c:a2:c5:e4:f7:74:64:fe:cb:62:11:20:34:
         9f:95:97:3d:ae:d8:fe:72:bc:d3:d3:e2:5b:c9:6d:d8:0b:b2:
         8e:ca:ac:e0:7b:c6:94:4e:20:d2:03:46:06:ec:9d:aa:cb:77:
         80:32:71:93:00:07:61:e6:cd:03:06:56:dd:b9:5d:fe:cc:86:
         8c:ba:1e:b6:fc:87:a3:ba:55:d0:ab:7d:06:a4:21:0d:04:bc:
         64:89:70:94:a4:af:e3:f1:0c:35:1b:da:43:fc:0c:30:4d:68:
         7f:f5:95:d3:5c:65:9a:4c:1d:b1:02:23:6b:86:d1:93:92:b5:
         69:84:56:3e:6a:95:6d:f1:99:91:26:46:d2:b9:46:80:4e:27:
         e5:53:a9:d3:ec:f1:97:fa:12:f0:37:37:fe:85:8f:0b:f7:fa:
         18:49:78:45:73:13:75:ba:70:18:c4:4e:23:2d:8d:94:0b:e2:
         25:cc:27:0a:b3:53:e1:4d:ec:c8:2f:3f:0f:69:cc:f7:78:b5:
         8e:49:3d:a8:ed:fe:d2:d7:9a:91:85:f3:11:02:50:db:c9:d4:
         b8:79:99:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:16 2025 by rpki-client