Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133332e302f32342d3234203d3e20323635333030.roa
File:                     3230302e3130362e3133332e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          NjCnsdw1HEn4d4QjopuWcgPPFHeSU4KOHmCqt/+b6ek=
Subject key identifier:   50:E5:EB:EA:45:6F:EB:90:BC:1C:7A:A9:9B:0D:C8:C8:7F:12:C2:84
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       43B9081E04C1C2414DC534E7F62300A945C5372C
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133332e302f32342d3234203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:08 +0000
ROA not before:           Wed 18 Dec 2024 04:06:08 +0000
ROA not after:            Wed 17 Dec 2025 04:11:08 +0000
asID:                     265300
IP address blocks:        200.106.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b9:08:1e:04:c1:c2:41:4d:c5:34:e7:f6:23:00:a9:45:c5:37:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:08 2024 GMT
            Not After : Dec 17 04:11:08 2025 GMT
        Subject: CN=50E5EBEA456FEB90BC1C7AA99B0DC8C87F12C284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:9d:a5:c6:9c:05:9b:f7:6c:e1:03:2b:4b:
                    91:66:c9:29:0a:31:56:a8:5a:83:d6:99:23:2a:df:
                    94:2c:2f:c4:c6:c7:4c:61:57:01:51:3b:61:e0:0d:
                    fc:3e:a9:d4:44:b8:a5:28:26:6f:c5:ff:a9:4d:bd:
                    50:12:5e:0a:82:a1:fc:98:b2:06:ee:8e:36:fc:d4:
                    7d:fa:86:4c:b4:35:fc:fe:b5:b9:ae:d1:82:a5:1f:
                    2f:c0:1e:9d:a2:07:7a:6c:5c:9e:cb:49:c9:83:3c:
                    14:84:d3:c4:85:af:78:7e:b7:dc:97:f1:2e:3a:c5:
                    8d:9e:62:06:0a:65:a9:b7:ff:b2:39:c7:da:4e:4e:
                    78:6e:fa:fa:26:62:33:e9:21:3b:b5:0b:73:9f:05:
                    5f:96:b3:89:a2:c6:1b:15:40:73:f2:d9:57:b2:58:
                    29:03:a3:87:56:24:f1:3b:d9:0c:35:86:87:5b:65:
                    dd:30:fc:2b:2c:49:cb:72:71:87:6f:cf:d6:25:15:
                    77:3f:81:c3:da:ba:bd:35:d0:4d:f2:b1:30:99:14:
                    b3:67:77:a0:c4:ce:90:cd:6f:9d:79:c9:c9:58:9d:
                    f1:53:95:ad:ff:dc:79:15:aa:be:a1:1b:50:48:8c:
                    9a:aa:f1:e7:a3:68:7a:0b:3a:f1:b5:93:dc:5b:77:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E5:EB:EA:45:6F:EB:90:BC:1C:7A:A9:9B:0D:C8:C8:7F:12:C2:84
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133332e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:cd:d6:96:b0:1c:3d:ea:fa:eb:8d:ab:4b:f5:01:3e:4c:ff:
         fa:d3:fd:53:6e:4d:50:e0:4e:b9:00:cc:4a:4a:c2:b1:00:b8:
         f0:16:c6:89:32:26:f3:b5:44:cb:17:1b:c9:72:72:b9:f2:71:
         21:2d:97:00:ba:af:1f:35:b2:cc:62:f6:a0:46:15:93:dc:9e:
         e6:66:b4:b7:2f:80:58:ac:5a:b8:09:6f:c5:d9:db:f3:bc:7e:
         80:56:71:f8:c6:e4:db:42:a7:16:1d:bc:43:5f:93:be:1f:a5:
         1c:22:7f:48:c1:82:5c:f7:d4:e2:6d:92:77:ec:76:de:26:2b:
         f8:27:9c:ef:b9:fd:23:26:ad:eb:63:0c:08:39:cb:7a:13:88:
         30:84:df:49:cf:1b:d8:70:e1:ba:cf:2e:a5:c8:11:45:21:27:
         7b:ca:6d:ef:cb:43:df:a2:9a:b5:85:85:c5:67:20:79:6a:3f:
         6f:59:2b:ae:60:af:db:04:4d:01:c6:aa:23:3f:e0:4e:c1:7a:
         3a:c5:4a:f7:7a:e4:20:0a:8a:f6:3f:ed:a3:79:6a:6a:76:1a:
         17:ce:7a:ad:28:16:5f:82:90:57:2d:fd:de:0a:98:b5:1e:d0:
         2a:1b:ec:23:71:cb:87:8d:37:f1:0b:16:0b:4d:d4:4a:15:b8:
         93:75:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:23 2025 by rpki-client