Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/3230312e3231382e3138382e302f32342d3234203d3e20323731363331.roa
File:                     3230312e3231382e3138382e302f32342d3234203d3e20323731363331.roa (raw, json)
Hash identifier:          CUZh4IUT8CjrXh+rm8c5MNqoH7zPqkpe/I36wBOjQxA=
Subject key identifier:   D7:D6:CB:05:F1:1D:E4:8F:44:93:E2:96:4F:F5:29:03:4E:8D:A4:37
Certificate issuer:       /CN=F9812497387122D013BAE2F313DEE77F1E107839
Certificate serial:       6E2804A2F5717477A824868774165B400A15D84D
Authority key identifier: F9:81:24:97:38:71:22:D0:13:BA:E2:F3:13:DE:E7:7F:1E:10:78:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9812497387122D013BAE2F313DEE77F1E107839.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/3230312e3231382e3138382e302f32342d3234203d3e20323731363331.roa
Signing time:             Wed 11 May 2022 20:57:55 +0000
ROA not before:           Wed 11 May 2022 20:52:55 +0000
ROA not after:            Wed 10 May 2023 20:57:55 +0000
asID:                     271631
IP address blocks:        201.218.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:28:04:a2:f5:71:74:77:a8:24:86:87:74:16:5b:40:0a:15:d8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9812497387122D013BAE2F313DEE77F1E107839
        Validity
            Not Before: May 11 20:52:55 2022 GMT
            Not After : May 10 20:57:55 2023 GMT
        Subject: CN=D7D6CB05F11DE48F4493E2964FF529034E8DA437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:c2:61:0b:45:b9:9f:62:71:77:64:ae:1d:
                    c0:d0:8f:d7:fe:0d:a6:ec:42:36:83:b2:2b:19:d3:
                    95:23:e2:97:8d:c9:c9:de:d5:01:ae:ae:e1:e2:78:
                    2f:68:5d:83:2d:f2:bf:79:a7:a3:f9:98:df:80:ae:
                    67:d4:4d:65:35:4a:41:af:3a:d9:8b:93:59:7e:9a:
                    c0:ef:3d:19:c7:74:e2:b8:9d:ca:54:1a:f0:3d:bb:
                    da:b1:df:ee:ee:99:24:3f:7f:74:78:7e:1a:e4:e9:
                    3f:fe:2a:f9:3e:4c:6b:9a:b7:b9:cc:53:09:14:10:
                    01:43:ae:bd:b8:f6:e1:2f:7f:97:fe:39:1d:0e:51:
                    91:f0:fa:06:76:6b:ae:a8:fc:1d:00:0d:0f:dc:92:
                    34:66:2e:76:c5:9e:76:0f:c0:79:d4:b7:0b:64:b5:
                    f3:7a:b7:8c:14:ee:2d:be:2b:9d:d8:b1:94:26:df:
                    2e:d9:a7:53:9b:2c:d6:09:9c:e6:63:a9:02:15:d6:
                    9a:c9:a3:e4:0a:c5:4e:14:04:63:29:23:7c:24:37:
                    64:4a:66:8f:37:d8:ef:73:44:b6:5e:1d:c7:cf:9a:
                    07:77:8f:85:fb:2a:7a:1e:e1:7a:81:a9:6b:d1:f4:
                    e4:35:3b:1d:36:3d:a7:c2:ed:e4:c6:dc:bd:b6:2e:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D6:CB:05:F1:1D:E4:8F:44:93:E2:96:4F:F5:29:03:4E:8D:A4:37
            X509v3 Authority Key Identifier:
                keyid:F9:81:24:97:38:71:22:D0:13:BA:E2:F3:13:DE:E7:7F:1E:10:78:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/F9812497387122D013BAE2F313DEE77F1E107839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9812497387122D013BAE2F313DEE77F1E107839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/3230312e3231382e3138382e302f32342d3234203d3e20323731363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:82:83:b1:fc:67:1b:69:4c:06:0f:56:32:92:4e:0e:2f:80:
         38:24:df:04:45:f7:61:57:03:5e:9d:c9:8b:1d:e1:24:d2:c7:
         f1:7f:c6:b7:6f:37:17:65:d6:b4:6b:d3:b6:a3:b0:88:d5:44:
         48:a6:c3:59:0a:4d:e7:1f:77:a5:c3:c5:28:5d:ec:01:fd:23:
         1f:5c:e9:b8:38:f2:3a:bc:21:1e:cd:85:0f:ba:6a:68:b0:94:
         a6:c2:e6:8a:f6:95:0d:29:00:99:9f:7c:b9:c3:e8:4b:ef:d5:
         1a:3b:02:a4:62:f6:5a:be:c5:f7:6a:d0:c0:57:f9:34:72:e3:
         4d:72:c3:91:c3:2c:47:5a:15:8b:f4:6e:b3:3a:a4:92:2a:fd:
         bb:eb:4a:98:81:bf:2c:35:29:33:b3:ae:70:b7:35:36:c5:7f:
         24:44:e4:22:64:23:51:af:09:74:5b:3e:32:2d:18:c6:1d:2d:
         e1:46:8e:2b:f1:14:ab:0d:2a:59:07:75:88:bf:8d:9a:1a:70:
         2d:f3:7b:4b:49:51:c8:f2:40:a1:10:f0:97:9b:19:a8:1b:ce:
         86:c9:52:d3:ef:e4:e5:f8:e4:75:a0:62:d8:47:dc:4e:58:fd:
         a8:56:77:32:27:ed:b4:a0:64:ce:d7:df:cb:83:8f:11:22:77:
         04:b1:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:13 2025 by rpki-client