Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133342e302f32332d3233203d3e20323635333030.roa
File:                     3230302e3130362e3133342e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          HBBr+bxWyYll3HM3vzHUxR1sHQe/DnYcGiSqrAMIKlc=
Subject key identifier:   15:B4:F4:BC:C9:AC:81:55:0A:A5:F6:65:86:C7:71:A3:1C:47:DA:E1
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       3CD5F772BAD9F158F65EC0FE075CD4B4EC9D8841
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133342e302f32332d3233203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:07 +0000
ROA not before:           Wed 18 Dec 2024 04:06:07 +0000
ROA not after:            Wed 17 Dec 2025 04:11:07 +0000
asID:                     265300
IP address blocks:        200.106.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d5:f7:72:ba:d9:f1:58:f6:5e:c0:fe:07:5c:d4:b4:ec:9d:88:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:07 2024 GMT
            Not After : Dec 17 04:11:07 2025 GMT
        Subject: CN=15B4F4BCC9AC81550AA5F66586C771A31C47DAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:a6:58:58:91:c9:c1:0e:78:2e:d9:01:fb:
                    eb:8d:de:b1:74:f3:ef:10:f0:20:78:28:44:6d:0b:
                    5a:26:22:94:81:95:47:5c:15:9f:96:3c:d0:69:6d:
                    28:69:23:74:c6:54:8d:7f:14:10:fd:e1:5f:16:75:
                    71:1e:66:97:5d:2d:f7:96:2d:0d:19:b8:f5:46:45:
                    db:15:9d:12:7b:4d:48:aa:55:cc:ff:78:30:24:19:
                    f6:9c:18:66:ee:70:69:d7:97:ea:1e:ee:0e:09:2c:
                    13:7c:c9:25:90:5e:74:75:ea:86:57:63:2e:3f:ec:
                    0c:73:c5:e2:9c:fa:00:b8:98:ff:a2:98:b8:07:1a:
                    f6:a0:00:43:09:47:78:08:75:d6:87:19:36:0f:b9:
                    bb:fc:73:84:19:03:26:45:f8:d7:23:e4:ac:45:da:
                    c9:56:6d:ce:0e:20:c6:69:aa:00:2f:98:70:e8:58:
                    5d:e1:95:eb:af:5f:f2:b2:77:cf:9e:ad:2c:93:ca:
                    65:78:10:0c:41:3a:7b:62:e0:31:f0:17:4f:e5:e7:
                    00:42:02:c1:76:e4:45:53:9b:5b:59:08:e9:aa:15:
                    d8:c3:30:78:1c:1f:ee:85:24:94:3d:4c:b3:d8:39:
                    c6:dc:12:56:e2:75:cb:b5:7e:69:42:f5:9e:78:41:
                    dd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B4:F4:BC:C9:AC:81:55:0A:A5:F6:65:86:C7:71:A3:1C:47:DA:E1
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133342e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:2a:2a:ce:66:5b:b0:a2:5c:b4:3f:aa:06:23:48:b5:99:a2:
         92:59:8a:fe:ca:47:80:8e:59:6f:16:b0:46:58:e8:69:37:b8:
         30:91:d7:01:e5:3b:77:a8:44:fd:fc:bb:68:f0:99:23:83:c4:
         6f:ad:b2:54:d3:17:7a:3a:a2:6c:34:fb:21:a3:13:76:0e:b0:
         41:e9:93:20:1f:0d:01:94:25:8a:07:f2:5c:2a:13:48:dd:ec:
         c7:44:69:5b:8a:41:dc:bc:ef:0c:ac:2b:4e:7b:e6:47:f8:12:
         fb:b8:50:e7:5e:8a:dc:bd:80:f9:aa:54:fe:cb:1e:b8:8e:9f:
         1b:d8:31:d6:f1:81:68:e2:e6:94:25:ee:b1:26:d9:b0:a0:00:
         ab:95:c1:79:33:d0:4d:15:21:41:a2:48:d1:3a:86:a8:df:76:
         cc:59:ee:3a:b1:18:20:04:5c:a2:e0:73:c3:d2:f1:3e:04:8b:
         48:21:99:a2:53:20:83:71:50:02:85:b3:9e:f1:e8:01:7c:0b:
         cd:c2:25:61:46:10:e1:c3:0a:25:d2:54:8d:f5:f6:8d:ce:a0:
         28:0b:93:1f:67:d3:cf:f2:22:25:3e:20:6b:ef:b4:df:e5:d4:
         f4:8a:4e:ca:92:41:98:65:21:d6:66:74:a1:e5:fe:df:52:43:
         66:f5:cc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:56 2025 by rpki-client