Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32322d3232203d3e20323730323439.roa
File:                     3230302e3130372e3131322e302f32322d3232203d3e20323730323439.roa (raw, json)
Hash identifier:          5FJ/L+H9SroVliq0j8o2aAjfvvN8praj4hEKEnoDTZQ=
Subject key identifier:   D0:5C:AE:F8:22:47:85:4D:B4:F6:BB:72:E3:13:E6:AF:6F:6B:5E:12
Certificate issuer:       /CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
Certificate serial:       42CACAE75F4A72F2099DF5B40497D131BCDB6C49
Authority key identifier: F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32322d3232203d3e20323730323439.roa
Signing time:             Wed 29 Nov 2023 23:52:57 +0000
ROA not before:           Wed 29 Nov 2023 23:47:57 +0000
ROA not after:            Wed 27 Nov 2024 23:52:57 +0000
asID:                     270249
IP address blocks:        200.107.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ca:ca:e7:5f:4a:72:f2:09:9d:f5:b4:04:97:d1:31:bc:db:6c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
        Validity
            Not Before: Nov 29 23:47:57 2023 GMT
            Not After : Nov 27 23:52:57 2024 GMT
        Subject: CN=D05CAEF82247854DB4F6BB72E313E6AF6F6B5E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:a6:d2:ff:b9:e2:47:5a:53:7f:f6:f2:db:
                    ab:0a:24:cc:69:5e:a1:08:b7:9f:73:08:f5:b1:75:
                    76:ed:7b:82:38:74:03:5d:88:d2:81:fa:50:34:26:
                    aa:55:f4:bb:c0:dd:1b:62:30:0b:45:bf:0b:28:57:
                    38:54:16:2b:75:1f:57:7d:ba:6e:8c:bf:2a:c4:75:
                    3a:76:d7:2b:9b:de:c6:59:4f:93:23:a0:bd:ef:31:
                    43:05:9b:19:0e:dc:02:f0:7d:fe:0a:99:cb:17:56:
                    05:58:2a:69:c2:52:21:22:28:7c:fa:d3:ed:20:09:
                    29:ab:62:d8:73:43:05:84:b6:43:a0:8b:b0:65:d6:
                    89:32:9a:24:eb:46:5a:30:49:c9:41:a1:09:1a:4c:
                    42:66:bb:46:0e:9f:3a:81:55:3f:8f:c9:d7:91:4a:
                    73:c5:d9:87:fe:b2:c2:a2:37:81:1b:b4:22:23:9f:
                    9d:61:7c:83:22:9c:6a:a4:8f:9c:2a:f6:9a:b5:5f:
                    c9:75:ab:c8:a1:48:b7:98:6d:a5:a5:f1:01:5d:cd:
                    ce:ce:b1:29:5f:6b:64:5b:3b:c1:f9:56:0f:23:47:
                    c9:48:77:f7:d0:0c:e7:a7:b7:30:54:0a:6d:16:55:
                    ca:f0:86:a4:21:b5:16:dc:8f:4d:73:39:0c:34:7d:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5C:AE:F8:22:47:85:4D:B4:F6:BB:72:E3:13:E6:AF:6F:6B:5E:12
            X509v3 Authority Key Identifier:
                keyid:F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32322d3232203d3e20323730323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:fd:58:76:22:1b:37:ac:77:81:a8:cf:34:fe:bb:13:37:b4:
         e2:20:81:8e:74:46:71:13:71:4f:24:14:fa:bf:27:31:c0:6c:
         b2:76:fc:fe:93:71:6f:4a:26:4d:23:dd:74:a6:03:9c:4f:8a:
         d2:99:c2:72:34:82:82:07:c0:e3:78:59:29:30:3f:08:9f:77:
         69:4d:29:b3:e7:b5:de:85:53:43:0c:aa:15:e0:5d:2d:5e:8c:
         67:88:e8:dc:a3:2c:23:09:6d:d0:60:ea:bf:b1:18:cc:43:6d:
         4c:96:13:89:93:08:7f:15:a5:95:f6:6d:2b:9e:f4:2e:95:72:
         6f:8b:97:36:d1:6c:86:94:4e:2d:8e:81:8d:ea:31:e5:b4:75:
         f1:7b:4a:fa:b8:79:6c:31:1b:2a:3e:fa:b8:bf:ec:2a:e0:d5:
         30:8f:eb:03:a2:e3:90:64:93:5f:1f:b0:cb:9a:c9:7e:02:62:
         c4:03:f9:e2:89:e2:a3:d8:e9:9e:41:4e:6f:ad:bd:a8:36:9b:
         e0:57:7d:4f:d9:e0:a3:30:65:b3:7a:6b:dc:34:e8:fb:4b:44:
         26:43:31:9b:93:39:0c:0d:2b:82:82:d1:6f:27:92:d3:28:76:
         4f:b7:34:32:d6:70:ea:de:e3:ed:58:f2:9b:d8:ee:14:10:49:
         a7:ab:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:14 2025 by rpki-client