Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/3230302e35332e38302e302f32332d3233203d3e20323731333635.roa
File:                     3230302e35332e38302e302f32332d3233203d3e20323731333635.roa (raw, json)
Hash identifier:          Suz9SAA02Gk7JvnlyuU3mb962qM2lE4VaoiRhREZkqA=
Subject key identifier:   74:8B:84:AE:45:F4:4E:86:B1:AE:38:DE:F5:A0:08:F2:C6:EA:79:9E
Certificate issuer:       /CN=EB893FC2324141C841B4E9613837252F8D6564D8
Certificate serial:       52939F9F5EE1F1CE48D26F8295C21D29320BC6D0
Authority key identifier: EB:89:3F:C2:32:41:41:C8:41:B4:E9:61:38:37:25:2F:8D:65:64:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB893FC2324141C841B4E9613837252F8D6564D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/3230302e35332e38302e302f32332d3233203d3e20323731333635.roa
Signing time:             Tue 14 Dec 2021 22:42:49 +0000
ROA not before:           Tue 14 Dec 2021 22:37:49 +0000
ROA not after:            Tue 13 Dec 2022 22:42:49 +0000
asID:                     271365
IP address blocks:        200.53.80.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:93:9f:9f:5e:e1:f1:ce:48:d2:6f:82:95:c2:1d:29:32:0b:c6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB893FC2324141C841B4E9613837252F8D6564D8
        Validity
            Not Before: Dec 14 22:37:49 2021 GMT
            Not After : Dec 13 22:42:49 2022 GMT
        Subject: CN=748B84AE45F44E86B1AE38DEF5A008F2C6EA799E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:f9:d5:1d:2e:a9:f9:bc:91:04:4a:de:3b:
                    84:97:6b:63:c9:35:de:9c:b8:28:8d:98:36:bc:67:
                    8f:c8:ac:66:21:8d:4b:88:b3:11:d8:20:8b:86:a5:
                    dc:7b:c1:50:fe:8c:a3:55:6e:1f:30:c6:ae:14:c8:
                    86:3a:c0:c4:dd:9b:84:d9:a1:36:99:90:14:1d:7a:
                    7e:0f:4e:12:ee:0e:52:74:4c:d3:f3:26:1c:ac:84:
                    b7:d5:35:86:d5:cc:a7:ff:cf:72:3f:c1:9f:be:19:
                    e6:6d:0c:35:83:b3:d4:07:e3:95:06:cf:35:1f:a1:
                    0c:bc:b7:a3:ac:f8:e5:12:ff:7f:b3:d6:c6:71:59:
                    e2:96:3d:7d:7a:89:2c:4b:bf:b8:a4:3c:2d:9c:74:
                    29:2a:27:a4:fa:e1:3e:10:76:12:cd:83:b0:ee:b6:
                    85:88:ba:16:cc:73:0c:20:0c:af:5c:b1:30:79:b6:
                    29:c4:99:9e:a6:ed:f1:96:ae:57:a5:56:11:69:e1:
                    50:dd:bd:9a:e8:55:de:83:cf:55:fc:f1:22:3d:fb:
                    3a:0d:9c:84:39:48:c9:c2:7d:ee:c8:a9:2b:de:5c:
                    a8:33:a9:24:c7:8f:95:4a:0a:cf:d0:f5:1f:3a:fe:
                    95:ec:00:ae:a5:f1:5d:47:dc:49:ec:b1:cf:9a:ea:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8B:84:AE:45:F4:4E:86:B1:AE:38:DE:F5:A0:08:F2:C6:EA:79:9E
            X509v3 Authority Key Identifier:
                keyid:EB:89:3F:C2:32:41:41:C8:41:B4:E9:61:38:37:25:2F:8D:65:64:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/EB893FC2324141C841B4E9613837252F8D6564D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB893FC2324141C841B4E9613837252F8D6564D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/3230302e35332e38302e302f32332d3233203d3e20323731333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:01:5c:45:d8:11:ca:d9:38:77:a3:53:95:5e:b6:60:09:1a:
         36:68:23:0e:2b:df:64:cb:cf:ad:20:22:1a:b1:53:82:e0:60:
         59:d4:c1:38:93:dc:b3:7f:f6:c3:ba:83:ec:80:04:8b:2d:6d:
         93:05:64:c0:65:d3:a8:df:ba:2f:53:23:e9:87:b3:e6:9b:e2:
         73:ea:f3:bd:01:3e:f9:d2:de:a2:14:04:25:2a:ad:43:0b:42:
         4b:cb:81:39:b6:32:df:6a:e3:c9:40:bf:bc:01:a7:dc:bb:ef:
         d4:51:c3:26:56:86:01:2e:c9:d3:8f:dd:aa:c7:83:51:fa:01:
         b7:8a:f9:13:8b:8c:b5:f7:0b:73:94:b5:5c:98:54:b3:53:69:
         09:c0:d0:6d:88:45:03:a5:36:1f:41:f9:ce:fc:82:e4:dd:64:
         5a:35:48:78:11:58:d7:a6:54:73:92:2b:a1:93:d8:0b:e3:ac:
         ff:b4:92:61:b6:9d:1a:05:c7:59:d5:5f:cd:99:58:7d:7e:e4:
         d7:84:3d:1e:c7:03:42:06:a3:66:4e:9a:1a:b3:8d:91:d3:24:
         cc:20:e7:cc:5e:c5:0c:72:97:88:02:b9:e2:15:31:82:5c:55:
         e4:6e:cc:b8:de:de:c4:37:4d:53:ed:ec:fa:1d:8a:f2:ce:12:
         d8:43:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:12 2025 by rpki-client