Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133322e302f32332d3233203d3e20323635333030.roa
File:                     3230302e3130362e3133322e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          pbWyWvSKiPObXloTAw7INVM9cbmgihD/KgLxWgT9Lac=
Subject key identifier:   84:1C:39:D2:D6:DE:52:CA:A6:29:A3:EA:D2:42:82:8F:24:0D:E5:A3
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       58F721B1BFE517B8A01D09230FBF00C27396A7BF
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133322e302f32332d3233203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:09 +0000
ROA not before:           Wed 18 Dec 2024 04:06:09 +0000
ROA not after:            Wed 17 Dec 2025 04:11:09 +0000
asID:                     265300
IP address blocks:        200.106.132.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f7:21:b1:bf:e5:17:b8:a0:1d:09:23:0f:bf:00:c2:73:96:a7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:09 2024 GMT
            Not After : Dec 17 04:11:09 2025 GMT
        Subject: CN=841C39D2D6DE52CAA629A3EAD242828F240DE5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:34:fd:3d:8f:ae:8d:a3:41:35:e6:54:40:
                    85:58:e2:a6:6a:0c:6b:bd:43:f9:34:90:a8:f0:85:
                    84:da:6b:85:fe:46:90:a7:39:01:2c:ea:e7:de:69:
                    6c:ed:a4:32:7e:8e:15:67:62:95:d7:42:25:cb:3e:
                    b4:5e:59:a8:58:24:9f:6d:4c:2e:9d:e1:a7:e0:78:
                    dc:1c:01:a1:ee:fe:37:00:9f:fa:58:7d:f0:9e:d1:
                    0c:26:be:15:b1:9b:21:a4:79:91:b2:43:9b:8c:a4:
                    f4:60:c2:6f:b4:c0:59:a1:d3:5c:db:d7:7f:8e:46:
                    b9:fe:d0:10:b3:c9:54:04:5f:7e:5b:7e:b9:75:8e:
                    49:23:4d:60:39:01:e9:7f:93:a0:8c:a7:5d:48:7d:
                    51:ef:c6:2e:e5:19:7f:2b:fc:d1:18:36:eb:6d:8e:
                    ad:42:4a:f9:50:4c:ff:a6:c3:c7:8e:2a:69:9e:78:
                    7f:cc:f8:ae:89:bf:6e:0b:4b:ef:32:fd:80:49:7b:
                    b5:57:78:88:81:40:f5:4d:29:17:5f:02:2f:78:ef:
                    29:e0:2f:83:b9:d6:ae:ed:2f:ce:fc:62:92:01:7f:
                    e1:56:f8:ca:6d:3a:c9:ff:8e:8c:5f:f6:f0:26:2f:
                    93:e2:ce:46:0b:a2:dc:e4:c8:fd:df:24:d3:71:7f:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1C:39:D2:D6:DE:52:CA:A6:29:A3:EA:D2:42:82:8F:24:0D:E5:A3
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133322e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:9f:ea:a4:f1:0f:d8:ca:f1:f7:93:04:82:58:c8:53:9e:4e:
         71:3d:c9:c4:5e:05:e4:51:4d:88:de:9d:c6:79:66:71:be:cf:
         03:bc:73:6e:92:3f:cb:d2:2e:8a:42:5e:53:b1:53:81:8e:3a:
         01:e2:6b:54:dc:1a:ba:96:e3:45:85:2b:b6:50:1e:75:69:f3:
         98:d7:cc:3e:31:19:30:62:f0:f3:47:c4:b1:02:ab:48:b2:22:
         c4:23:eb:4f:76:48:36:f9:ec:49:2d:18:53:85:e5:fe:22:94:
         fc:18:81:c9:1e:8e:bf:c9:fd:25:e8:95:ef:3b:d2:44:1c:df:
         f3:2d:0a:c6:fc:0d:0f:6d:4a:2f:92:c7:ad:ff:76:78:4c:1a:
         eb:80:3a:cc:45:a6:b6:d4:d2:01:89:1e:12:b0:cd:42:71:28:
         04:2a:f6:e5:ce:0d:71:a3:cd:dc:38:f0:f0:b6:01:f7:9e:06:
         6e:9b:01:a4:76:e1:a1:8e:54:14:b0:7b:27:82:39:54:fc:c0:
         d1:05:15:14:7f:9b:c4:8c:82:e5:23:54:24:3f:df:14:3b:f6:
         77:0f:20:5d:9f:8f:c4:60:47:0a:e2:d9:0f:f3:dd:76:eb:94:
         43:e2:32:f2:d7:4e:67:79:15:da:f2:3e:9b:f8:1e:59:67:a1:
         91:5a:89:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:34 2025 by rpki-client