Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32322d3234203d3e20323730323439.roa
File:                     3230302e3130372e3131322e302f32322d3234203d3e20323730323439.roa (raw, json)
Hash identifier:          TlmMPGXdGcx1WgVGE1fJ1q84yyspLZNyJYrPLoIF1gI=
Subject key identifier:   DD:AD:10:E0:0D:D3:1B:62:66:EA:8C:22:5D:24:FF:C5:7F:62:20:88
Certificate issuer:       /CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
Certificate serial:       5B6174D76F169690D95690814300CAF808879DB4
Authority key identifier: F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32322d3234203d3e20323730323439.roa
Signing time:             Wed 29 Nov 2023 23:53:30 +0000
ROA not before:           Wed 29 Nov 2023 23:48:30 +0000
ROA not after:            Wed 27 Nov 2024 23:53:30 +0000
asID:                     270249
IP address blocks:        200.107.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:61:74:d7:6f:16:96:90:d9:56:90:81:43:00:ca:f8:08:87:9d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
        Validity
            Not Before: Nov 29 23:48:30 2023 GMT
            Not After : Nov 27 23:53:30 2024 GMT
        Subject: CN=DDAD10E00DD31B6266EA8C225D24FFC57F622088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:63:c2:5f:f2:e7:0a:18:40:aa:f0:02:82:
                    a9:9d:c8:ff:54:33:18:59:d5:f7:4b:3a:ac:cc:d9:
                    a1:8a:fe:1b:5a:77:ec:5c:f8:46:ad:4b:53:72:d9:
                    f2:48:73:64:92:3c:e2:ee:f8:3d:e5:69:c3:a8:81:
                    27:65:aa:8e:ad:5d:f6:4b:89:50:1f:5d:e3:66:7b:
                    7e:c5:8c:ea:c3:a0:f5:d4:9b:fb:a1:c7:fb:46:b0:
                    b1:a9:2f:0f:ae:d3:b2:ff:c4:5e:4c:5c:86:dc:3b:
                    72:72:a4:63:62:7b:46:d6:02:31:87:61:ab:3a:4a:
                    8c:9f:49:f8:47:18:af:81:89:83:b6:d3:bc:ab:9e:
                    66:c2:41:93:a9:37:6d:f7:ce:37:ef:4c:b7:ed:f6:
                    e8:01:92:1b:e8:3a:f3:7c:3a:9c:47:72:ad:42:ac:
                    41:d2:26:ea:a2:ad:0e:85:81:51:e4:f8:0f:fb:fb:
                    a0:da:4d:8d:5c:fb:7e:49:1f:08:48:0f:e5:a4:05:
                    8b:f4:4e:6d:43:38:7d:9f:aa:f4:66:c4:c1:b5:12:
                    7a:6d:02:f8:46:63:02:8e:fc:38:8e:70:0b:d0:e3:
                    da:ac:fa:31:22:8a:76:52:d5:29:67:b8:b5:83:f3:
                    67:1b:fd:99:2e:1d:41:7d:02:9d:b5:8c:f4:53:e9:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AD:10:E0:0D:D3:1B:62:66:EA:8C:22:5D:24:FF:C5:7F:62:20:88
            X509v3 Authority Key Identifier:
                keyid:F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32322d3234203d3e20323730323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:ca:fb:89:57:cd:c0:3b:07:ee:55:7e:0f:f8:57:b3:ca:74:
         d7:03:c0:41:2d:e7:63:a6:fe:d8:85:37:02:2e:ba:d6:74:07:
         a3:b7:fe:1d:21:48:f1:48:a7:9a:65:65:38:f4:55:e7:ee:57:
         1c:04:ec:6f:63:7e:a6:90:ae:7f:70:39:f4:d0:51:38:d5:c1:
         d1:ee:d4:3d:b4:fe:18:9b:1c:bf:e2:a6:97:c0:c8:70:72:18:
         aa:23:49:8c:6d:6d:3f:ae:e1:c2:b8:62:9a:f6:10:92:67:a5:
         8a:b5:20:8e:5b:a0:52:fc:a4:28:79:a1:e9:5c:2d:3a:e8:34:
         a0:6f:ae:36:2f:cf:ac:d4:83:bf:4b:af:90:12:75:2c:e4:58:
         43:cd:b3:ae:18:0c:11:0b:dc:7a:9f:79:9f:1b:85:25:78:a8:
         23:13:4a:34:5c:d9:29:45:3a:d7:e6:63:f8:71:65:09:09:95:
         f3:1f:9e:29:2e:87:24:78:da:78:44:dc:2f:15:c1:63:06:c5:
         5c:24:14:7b:19:15:2e:8e:7b:2b:1c:33:ea:45:9e:eb:b5:59:
         c7:1a:7b:05:a0:e9:62:a8:21:be:99:04:54:9f:cf:55:a5:8a:
         b5:6d:99:ad:2b:a4:bc:97:ff:9f:93:3e:76:58:d9:a6:80:c5:
         87:1b:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:45 2025 by rpki-client