Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa
File:                     3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa (raw, json)
Hash identifier:          b9YPrv/wFRKYWeX3tEeXc1yz8En8NMkjFwUy2vH5dCE=
Subject key identifier:   EB:E6:D7:82:8C:EC:3B:8E:10:7F:45:B3:D8:51:D3:4E:38:60:3A:98
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       607038EDC24331A7DCC87AED27CCA9EA829CD932
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:09 +0000
ROA not before:           Wed 18 Dec 2024 04:06:09 +0000
ROA not after:            Wed 17 Dec 2025 04:11:09 +0000
asID:                     265300
IP address blocks:        200.106.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:70:38:ed:c2:43:31:a7:dc:c8:7a:ed:27:cc:a9:ea:82:9c:d9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:09 2024 GMT
            Not After : Dec 17 04:11:09 2025 GMT
        Subject: CN=EBE6D7828CEC3B8E107F45B3D851D34E38603A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:5f:d0:9f:f6:77:8a:be:30:b9:d5:7d:18:
                    f1:4f:79:12:02:e4:f9:31:d1:e4:03:a0:f8:e4:c6:
                    ba:44:f2:79:4d:97:64:89:dd:1c:b5:e6:02:00:fd:
                    e8:af:35:59:a5:53:d2:0d:b8:f1:e3:03:9f:5d:21:
                    c7:4c:3d:b0:62:1b:94:e7:bd:20:39:e1:3d:78:ac:
                    66:33:ed:31:d6:bb:8e:18:6b:f8:c5:3b:c9:72:5d:
                    9d:82:87:d6:a5:69:20:b1:8a:8e:35:1c:d5:ab:25:
                    d9:6a:e4:c2:86:a4:2b:76:14:55:0f:43:0e:d5:43:
                    23:02:22:f0:fb:13:42:b2:89:bb:29:e4:ff:05:20:
                    3e:f5:d8:b1:56:23:b0:cb:ea:fc:a2:e3:de:72:59:
                    a7:63:bc:a5:59:6a:f4:fe:25:4d:00:1d:7b:5c:dc:
                    09:18:4f:18:f9:33:70:8b:25:5d:e1:ba:e5:59:ac:
                    37:a2:86:73:19:fb:dc:62:48:f6:67:e0:a4:a1:f2:
                    4a:7a:75:a3:34:11:fd:2c:53:c7:90:54:0e:39:96:
                    9e:cb:61:8f:2f:76:7e:df:5e:e1:53:24:fd:08:20:
                    b9:e7:28:bb:dd:d6:17:2a:66:a4:e9:75:05:b3:92:
                    15:96:f8:be:80:bc:9a:35:66:e8:26:20:2c:f8:da:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E6:D7:82:8C:EC:3B:8E:10:7F:45:B3:D8:51:D3:4E:38:60:3A:98
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:79:8a:c8:b8:09:d4:a3:bd:2c:c7:36:04:41:4e:75:79:
         1c:ff:6c:72:69:ca:e5:f4:69:a2:f3:ff:62:13:e7:36:f8:8b:
         2c:21:e6:b6:35:89:dd:6d:bb:75:b4:5b:3f:e7:31:36:ea:5d:
         53:58:d5:70:52:2a:d9:0c:76:95:1a:14:31:48:15:cb:54:30:
         1c:6b:b7:17:29:8f:8c:a9:fb:d2:63:63:f9:43:d4:87:0e:11:
         c6:02:2f:b1:59:9b:42:7e:a4:15:41:5c:25:a9:46:4e:c5:7d:
         81:0d:7b:e2:5b:67:d4:d4:4c:c0:2c:c2:f5:36:4b:00:98:27:
         a3:e2:62:0d:3c:83:01:99:a4:c7:56:33:1d:ec:6c:b1:35:ef:
         2d:c9:d5:59:47:83:21:b6:12:33:e4:4b:5c:50:f5:8a:f5:6c:
         32:94:7e:80:c1:09:02:d0:30:30:c0:65:af:27:94:41:0d:5d:
         80:b2:1f:64:1c:c1:47:73:34:0f:db:a6:9d:c0:ec:87:c4:6e:
         14:62:81:f2:9b:cc:81:17:b0:12:05:ef:13:d7:76:65:41:07:
         f9:ea:64:de:f8:7c:b7:3c:15:36:10:44:f1:fe:2b:5f:24:d2:
         d3:23:0e:8b:3c:e9:94:67:19:5f:08:f0:0f:76:51:40:aa:39:
         cf:62:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:50:55 2025 by rpki-client