Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32332d3233203d3e20323730323439.roa
File:                     3230302e3130372e3131322e302f32332d3233203d3e20323730323439.roa (raw, json)
Hash identifier:          HoQNeY9RiqScCKEf5Qw2Era0FjVn3Rhm2GgfCpSWWsg=
Subject key identifier:   91:5C:EA:0F:A5:01:A7:3A:A0:19:79:5A:67:46:BD:92:8B:94:03:DC
Certificate issuer:       /CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
Certificate serial:       7BE6CD48C0EEAB212F4FBF85ADCCB91B5AA8FC43
Authority key identifier: F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32332d3233203d3e20323730323439.roa
Signing time:             Wed 29 Nov 2023 23:52:57 +0000
ROA not before:           Wed 29 Nov 2023 23:47:57 +0000
ROA not after:            Wed 27 Nov 2024 23:52:57 +0000
asID:                     270249
IP address blocks:        200.107.112.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e6:cd:48:c0:ee:ab:21:2f:4f:bf:85:ad:cc:b9:1b:5a:a8:fc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
        Validity
            Not Before: Nov 29 23:47:57 2023 GMT
            Not After : Nov 27 23:52:57 2024 GMT
        Subject: CN=915CEA0FA501A73AA019795A6746BD928B9403DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c1:f9:01:31:cc:29:57:50:89:a0:9f:1f:17:
                    45:26:76:47:d7:34:1f:5c:2e:83:04:e3:23:c8:89:
                    e5:7b:ee:a6:45:e0:e5:ba:af:e3:81:a5:9a:fa:7b:
                    a2:74:b9:62:e4:1e:c0:d2:ba:cf:c8:ef:7f:c4:8d:
                    8e:c0:20:28:8a:a1:67:f9:46:79:80:16:84:6b:87:
                    48:ae:a9:c4:e8:6d:9c:78:4f:de:5d:38:b4:14:72:
                    0d:3f:60:61:aa:14:f0:83:4f:b9:05:31:9e:08:b1:
                    bd:80:81:67:85:ed:bf:91:bd:9b:87:c1:b7:18:b9:
                    61:44:2c:e9:62:76:29:9a:12:df:72:5f:f4:22:88:
                    c2:82:66:4f:18:93:da:1d:55:dc:dc:96:15:79:d3:
                    5e:b3:db:7c:9c:50:9b:eb:14:30:81:74:04:7f:d6:
                    21:73:a4:44:53:35:33:70:79:e3:28:62:b2:ea:19:
                    71:89:09:e0:de:d8:5b:44:72:6e:45:e4:8e:3a:cd:
                    ce:61:54:dc:28:73:38:8b:48:30:c6:9a:55:3b:87:
                    ba:6d:80:c7:1f:89:8a:e1:f8:2e:70:56:30:c9:ad:
                    65:e6:34:93:dd:7e:fe:8a:31:2f:44:43:f8:e3:52:
                    6f:19:95:28:84:d1:e3:74:94:6b:bb:26:42:c0:c6:
                    18:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5C:EA:0F:A5:01:A7:3A:A0:19:79:5A:67:46:BD:92:8B:94:03:DC
            X509v3 Authority Key Identifier:
                keyid:F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32332d3233203d3e20323730323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:98:36:9d:d2:1c:74:00:25:84:a9:75:42:aa:bf:45:03:f6:
         2b:05:96:e2:4d:5e:90:63:88:fd:b6:e7:8a:33:95:aa:2a:9f:
         64:61:46:3e:a8:5e:5b:0e:0d:41:3e:92:78:3a:c5:97:c7:38:
         c5:3a:4e:36:03:bc:90:74:c7:70:ff:bf:92:37:ff:0c:57:47:
         61:5c:55:70:a1:4c:33:ee:a7:65:4c:e8:e0:57:57:83:69:7b:
         2f:21:a9:8d:12:dd:b2:ec:5b:dd:57:51:38:f0:9c:cf:b9:58:
         15:9d:e5:4f:aa:9e:e5:6c:67:8d:c2:97:75:07:8f:4a:af:66:
         90:43:ef:9f:e6:1d:21:a5:7e:57:dc:97:8e:ae:03:53:60:6d:
         cf:4b:f7:14:d6:b5:4b:80:39:5c:71:00:16:ea:5d:31:e1:1c:
         7c:be:eb:61:de:e9:fc:c9:10:7c:73:ea:56:b2:63:17:71:f7:
         4d:96:29:96:8f:75:32:e5:2f:a0:23:f7:ec:56:8e:5a:01:ea:
         c8:9e:fa:7a:d1:b9:5b:5f:b6:7e:19:20:6a:e4:6c:ac:13:b9:
         a9:01:09:45:5a:6b:62:32:1e:de:88:8e:3d:a5:86:85:88:60:
         15:97:72:7b:2b:ab:4f:6e:a1:10:c0:03:35:bb:b8:e8:39:a4:
         b7:8d:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:59 2025 by rpki-client