Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134302e302f32322d3332203d3e203631373937.roa
File:                     3230302e3232352e3134302e302f32322d3332203d3e203631373937.roa (raw, json)
Hash identifier:          E9dEyTaJicxVjoOM6BA76xGgZzH05P2pjwfy0nNDbWI=
Subject key identifier:   9F:26:F7:9E:5E:AE:8D:95:4C:45:8F:5B:C9:FA:2B:10:2E:5C:DD:9A
Certificate issuer:       /CN=BDC7634940E067A4864ED1C399A802F0320CD4A4
Certificate serial:       174DAC5156196FFB17B990351F08D961144D2672
Authority key identifier: BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134302e302f32322d3332203d3e203631373937.roa
Signing time:             Thu 31 Aug 2023 14:08:51 +0000
ROA not before:           Thu 31 Aug 2023 14:03:51 +0000
ROA not after:            Thu 29 Aug 2024 14:08:51 +0000
asID:                     61797
IP address blocks:        200.225.140.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4d:ac:51:56:19:6f:fb:17:b9:90:35:1f:08:d9:61:14:4d:26:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC7634940E067A4864ED1C399A802F0320CD4A4
        Validity
            Not Before: Aug 31 14:03:51 2023 GMT
            Not After : Aug 29 14:08:51 2024 GMT
        Subject: CN=9F26F79E5EAE8D954C458F5BC9FA2B102E5CDD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ff:e3:08:82:ac:10:0f:19:3e:35:11:ec:88:
                    4d:17:35:b5:2a:ab:d9:c7:b2:43:ef:66:45:25:7a:
                    4b:3f:6c:d4:c4:7d:1f:aa:56:42:b1:d2:c6:f5:3e:
                    c8:8a:26:30:22:e6:6e:fa:89:c1:47:4f:29:0b:b4:
                    1a:18:f5:1c:cd:e5:43:9c:94:af:f9:e2:b0:84:4c:
                    d4:97:05:f5:40:87:92:78:a2:86:11:13:3b:ca:4f:
                    75:fe:82:44:b8:1a:f8:84:32:3c:c6:8b:04:c8:ba:
                    a3:26:05:6f:b6:20:80:1d:df:44:24:13:03:ce:69:
                    d5:e6:9a:f6:4c:42:df:69:e0:fb:f5:1f:65:1b:8a:
                    60:3f:5a:28:88:0d:12:c1:d3:a3:b8:aa:4d:92:2d:
                    00:b9:7e:e4:10:11:80:44:73:67:6d:65:62:05:21:
                    02:a0:54:f8:f7:ae:fa:0c:d3:46:82:9b:24:1c:da:
                    bf:b1:54:f3:ce:2a:58:e5:2c:fa:0d:44:e2:67:1a:
                    c9:ea:6b:94:ff:f4:a9:54:c4:e5:f8:6f:7f:cd:83:
                    dd:b2:b8:a6:ae:7f:a7:19:7e:73:62:2a:ec:cb:d0:
                    22:ea:35:f5:2f:51:42:92:32:90:52:9c:a9:f7:99:
                    f7:b8:c8:77:73:a3:71:56:48:06:b0:60:bd:35:43:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:26:F7:9E:5E:AE:8D:95:4C:45:8F:5B:C9:FA:2B:10:2E:5C:DD:9A
            X509v3 Authority Key Identifier:
                keyid:BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134302e302f32322d3332203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:8a:44:83:68:df:21:9c:94:a3:e8:82:03:cc:6a:5b:b4:dc:
         64:b7:b9:ed:10:0f:66:42:ce:f4:d9:31:49:b8:16:31:72:81:
         30:eb:92:92:c6:70:cb:60:d6:df:28:d6:33:28:ba:9d:75:33:
         fb:80:a5:12:03:21:b3:40:a4:82:01:69:34:d9:cb:72:bb:b6:
         a7:ff:d1:76:2f:87:5d:79:a2:7d:30:da:7c:4c:f5:04:0d:22:
         4f:f4:a8:02:1e:9c:02:e0:f8:2c:b4:ed:c1:5a:51:62:60:9d:
         dd:e8:90:86:89:69:98:a7:05:65:2a:25:b5:35:b7:07:67:b0:
         73:1a:0a:c0:32:ae:2f:61:2a:73:5c:51:3d:87:ed:f8:4d:bd:
         a4:52:2d:2f:bf:8b:3b:03:ff:6e:2c:b6:6c:4a:97:f2:53:d7:
         6f:db:3e:55:27:fc:4a:07:ee:76:a3:36:c0:6c:65:45:e3:cc:
         75:c0:81:ee:9f:a4:ca:16:8f:28:2c:51:62:19:8c:2c:66:36:
         2f:a0:b3:30:22:60:f9:0a:8b:54:9e:07:8e:5c:51:86:4f:44:
         49:76:67:45:42:ef:4a:ad:42:af:99:be:d3:fd:a3:7a:e6:65:
         ac:73:13:2b:31:25:20:20:c0:56:53:a1:a5:ca:64:2b:9c:a3:
         e5:05:25:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:17 2025 by rpki-client