Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32332d3233203d3e20323730323739.roa
File:                     3230302e3132342e3137322e302f32332d3233203d3e20323730323739.roa (raw, json)
Hash identifier:          2EaMipuvrn9Ccr+wRHa01zFUtAv3NI79E+dI4ynSOnA=
Subject key identifier:   B6:B3:CA:F1:4C:C7:BC:C1:6F:A9:17:73:9C:38:D5:9F:CA:48:3C:7B
Certificate issuer:       /CN=E9A6A6503F4282A7AF294B34F602D222F92F0C7C
Certificate serial:       20D3E6110C3E602AA0006F920B52403FE0EADFE4
Authority key identifier: E9:A6:A6:50:3F:42:82:A7:AF:29:4B:34:F6:02:D2:22:F9:2F:0C:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32332d3233203d3e20323730323739.roa
Signing time:             Mon 29 May 2023 11:23:22 +0000
ROA not before:           Mon 29 May 2023 11:18:22 +0000
ROA not after:            Mon 27 May 2024 11:23:22 +0000
asID:                     270279
IP address blocks:        200.124.172.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d3:e6:11:0c:3e:60:2a:a0:00:6f:92:0b:52:40:3f:e0:ea:df:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9A6A6503F4282A7AF294B34F602D222F92F0C7C
        Validity
            Not Before: May 29 11:18:22 2023 GMT
            Not After : May 27 11:23:22 2024 GMT
        Subject: CN=B6B3CAF14CC7BCC16FA917739C38D59FCA483C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:b4:57:ef:b9:68:21:ad:9d:f9:04:8f:38:
                    8c:2b:fb:fc:1c:a3:5d:75:2c:0f:cc:8b:55:23:04:
                    d0:91:36:9f:f6:9f:dd:a0:d3:1e:d5:b2:84:4f:1e:
                    0b:56:7e:6e:d8:75:07:12:93:79:75:69:eb:09:b4:
                    19:e7:a6:43:d0:62:47:35:4c:52:57:11:d5:2b:6b:
                    42:b4:7f:c9:ad:78:d9:c9:53:ac:61:ab:9f:da:7a:
                    0c:43:70:81:78:c2:e7:ff:ed:86:8f:db:48:b7:e2:
                    d6:3a:23:2b:92:42:f3:18:04:46:75:ea:79:a0:27:
                    e2:c9:e0:f1:cd:9e:29:1f:49:5e:d4:ef:55:a5:1b:
                    9f:68:55:1b:db:e3:66:0c:3a:39:11:57:5a:a1:a1:
                    d8:25:e9:7a:d1:20:ea:a7:34:f2:8a:36:ec:17:c9:
                    d8:dc:3b:c1:94:0f:60:cd:44:5c:c0:bc:37:eb:0e:
                    0f:c4:e7:3a:a5:b5:c4:23:d6:3c:67:c6:79:9e:2e:
                    25:71:f2:82:1a:30:87:91:42:40:43:bc:29:83:e1:
                    d5:5d:a0:67:4c:f6:01:6a:ba:e7:ef:99:29:96:34:
                    83:10:6c:ac:2b:d7:76:6f:3b:cb:84:b5:d4:f1:34:
                    e0:81:7b:9c:a2:42:c2:49:46:28:2b:83:f6:dd:18:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B3:CA:F1:4C:C7:BC:C1:6F:A9:17:73:9C:38:D5:9F:CA:48:3C:7B
            X509v3 Authority Key Identifier:
                keyid:E9:A6:A6:50:3F:42:82:A7:AF:29:4B:34:F6:02:D2:22:F9:2F:0C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32332d3233203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:ea:c3:85:53:a7:20:1a:5a:86:2d:6b:0b:c8:e3:16:84:4b:
         e8:8f:15:1d:8d:95:b9:41:1f:3e:1d:ed:dd:2c:5a:f6:08:eb:
         a0:b1:2f:3b:ae:63:70:1a:f1:06:07:62:a3:94:16:7c:6a:8c:
         67:4a:8d:6a:7c:e7:d6:98:8c:07:f2:3e:70:c9:31:76:78:d4:
         e7:7c:c9:0d:37:12:f1:db:6e:8f:d2:25:b7:ec:d1:4a:43:24:
         d0:d0:2b:76:30:8a:79:98:05:21:42:a0:22:a9:1a:53:e3:1c:
         80:80:81:25:af:d9:e3:a2:e0:ad:6f:04:d0:ca:9e:77:c1:d2:
         23:1e:fa:52:e9:f2:18:5d:95:5d:dd:a5:96:a9:c2:b6:52:55:
         75:c7:f4:16:b0:bb:9d:1d:ea:cd:9b:ca:d2:6f:2d:98:3a:10:
         5a:ca:2e:3a:e1:fc:5e:8d:55:a2:1b:39:d3:26:90:fe:15:a2:
         43:65:ac:08:b7:f5:cc:30:a8:ee:1d:f9:6c:16:ca:6b:fa:ae:
         18:65:39:ff:a3:77:76:25:c7:1d:12:4c:1d:4f:ac:45:f9:20:
         f7:86:d9:68:0c:9a:b6:86:89:98:7e:43:a8:57:50:76:aa:c4:
         35:ea:25:6a:1c:fb:69:77:93:7a:9e:4f:2d:5d:a7:a7:bd:ef:
         a4:4c:80:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:50:24 2025 by rpki-client