Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134362e302f32332d3234203d3e20323639303733.roa
File:                     3230312e3135302e3134362e302f32332d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          lSGVGSWjGkWxqaS6lucsJ8l6cy+m2qIMpL5tcoFsN5o=
Subject key identifier:   AD:A9:5A:39:D1:F9:F7:31:DE:62:AC:F0:64:56:80:30:77:EC:B2:EA
Certificate issuer:       /CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
Certificate serial:       0FA60D0A4C04FB8C15C4353308D14D8FA22BD191
Authority key identifier: 53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134362e302f32332d3234203d3e20323639303733.roa
Signing time:             Thu 10 Nov 2022 15:00:00 +0000
ROA not before:           Thu 10 Nov 2022 14:55:00 +0000
ROA not after:            Thu 09 Nov 2023 15:00:00 +0000
asID:                     269073
IP address blocks:        201.150.146.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a6:0d:0a:4c:04:fb:8c:15:c4:35:33:08:d1:4d:8f:a2:2b:d1:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
        Validity
            Not Before: Nov 10 14:55:00 2022 GMT
            Not After : Nov  9 15:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:bb:10:57:70:38:c1:df:55:40:2b:d8:f8:
                    3f:76:7f:83:2f:6d:9c:38:78:67:5d:78:b6:fe:cc:
                    ce:2b:ce:58:af:28:6b:24:be:bb:0d:5e:69:41:2d:
                    6c:fb:3b:ff:1b:7e:bd:0d:f8:e1:72:64:64:84:2b:
                    b0:eb:ca:2c:39:33:58:54:52:81:06:4f:ac:c3:b3:
                    47:c6:f4:d1:66:37:62:79:e9:04:87:a9:1f:7f:8e:
                    59:0e:6a:b3:a5:93:44:86:40:80:7b:a0:31:ed:2b:
                    97:aa:ad:05:22:aa:d8:72:f0:03:95:0e:51:0d:38:
                    4b:e4:b0:23:52:c2:96:36:5e:ae:86:c1:01:56:7e:
                    df:d7:2b:62:4a:ee:68:a0:a3:a8:f4:83:48:9d:60:
                    ec:ba:f8:d3:e5:d7:42:89:26:6d:b4:cf:a7:c5:0d:
                    12:6f:b9:ec:27:a5:05:c1:8b:1a:d5:6d:38:8f:f9:
                    fd:40:d4:63:c4:03:eb:7d:d0:3b:a2:b1:83:52:f9:
                    10:1b:af:33:cc:29:e5:34:57:cc:b7:2c:f5:60:c0:
                    9c:eb:2a:7e:a9:a0:a0:73:fe:a8:13:49:bf:a0:d6:
                    de:bb:af:43:09:b3:74:f7:17:36:13:59:8f:ef:a5:
                    e2:3c:15:e0:98:a5:c0:85:6c:ce:3a:7e:84:10:04:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A9:5A:39:D1:F9:F7:31:DE:62:AC:F0:64:56:80:30:77:EC:B2:EA
            X509v3 Authority Key Identifier:
                keyid:53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134362e302f32332d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:34:37:87:cb:0d:21:1b:3a:b9:36:86:90:40:77:dc:30:84:
         bc:bc:1d:3f:c6:ce:34:38:bd:19:be:30:f9:81:c1:37:a4:fc:
         56:96:33:dd:79:01:c4:31:b2:e9:cc:1f:8c:8c:c4:40:c3:a5:
         98:e5:8a:8b:7f:59:7a:10:54:87:38:c9:1c:a5:ba:8b:76:55:
         43:1c:46:c9:74:5f:4f:96:9c:05:f8:dc:7b:53:e5:ae:42:52:
         66:0a:21:70:4d:b1:3d:ec:2d:4e:e2:43:51:e5:34:d9:94:14:
         c5:80:7c:a6:8c:2b:6f:ab:04:ad:cc:49:d4:59:0c:f4:98:0e:
         81:9d:f3:2c:cc:8a:5c:2f:c9:ae:0b:b9:c9:e5:19:8c:35:ce:
         20:63:40:65:cb:ba:01:77:65:dd:78:ce:ac:1f:8f:18:a2:c7:
         d3:7c:3b:12:63:6f:ce:74:fd:37:2a:65:0f:5a:d7:53:0c:fd:
         d4:82:5e:6a:ba:c7:1b:f9:55:60:db:6a:66:b6:af:cb:77:2c:
         42:c6:41:6d:0b:fb:24:e2:5c:fc:9c:03:a1:e8:9d:5b:f1:44:
         66:97:ad:c5:c8:e5:d9:28:dd:67:e6:a1:04:a5:24:59:d2:55:
         d4:fb:ab:88:c6:a8:b0:a1:23:85:c0:4b:e3:a0:a4:ca:23:7d:
         89:07:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:42:35 2025 by rpki-client