Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/3230302e3230312e3139322e302f31382d3234203d3e203130373333.roa
File:                     3230302e3230312e3139322e302f31382d3234203d3e203130373333.roa (raw, json)
Hash identifier:          /ffJQqcwkyJWdafqN9S66Ais9vIQvyHDvA4KVKJw2sc=
Subject key identifier:   04:68:16:11:FF:A4:39:DA:8D:96:CD:5D:32:E5:83:8B:42:4A:16:58
Certificate issuer:       /CN=A955974547A0FE776FE59842FE4095486B6693E2
Certificate serial:       3F636192EDD49BE5D6D2FDB49BBAD13B540029A8
Authority key identifier: A9:55:97:45:47:A0:FE:77:6F:E5:98:42:FE:40:95:48:6B:66:93:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A955974547A0FE776FE59842FE4095486B6693E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/3230302e3230312e3139322e302f31382d3234203d3e203130373333.roa
Signing time:             Mon 04 Sep 2023 23:00:31 +0000
ROA not before:           Mon 04 Sep 2023 22:55:31 +0000
ROA not after:            Mon 02 Sep 2024 23:00:31 +0000
asID:                     10733
IP address blocks:        200.201.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:63:61:92:ed:d4:9b:e5:d6:d2:fd:b4:9b:ba:d1:3b:54:00:29:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A955974547A0FE776FE59842FE4095486B6693E2
        Validity
            Not Before: Sep  4 22:55:31 2023 GMT
            Not After : Sep  2 23:00:31 2024 GMT
        Subject: CN=04681611FFA439DA8D96CD5D32E5838B424A1658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:dc:ea:b8:b1:3c:fb:cc:20:9b:c5:71:5b:
                    44:55:dc:5d:cf:e3:79:8a:a9:98:fb:e4:c9:44:bb:
                    72:54:9a:41:0a:80:9c:b9:dd:bd:82:4a:9f:ef:d5:
                    7f:08:40:9c:78:d8:ce:11:2d:89:dd:ef:7c:8e:9d:
                    1d:bc:3d:1e:5f:ad:ca:49:9b:d1:a4:25:82:20:48:
                    7b:c1:8b:e4:0d:85:58:38:91:7e:49:b4:39:f9:23:
                    7a:3d:bb:5d:0e:01:16:b3:18:44:36:87:5b:e0:e3:
                    4e:02:74:69:fd:9e:d8:d8:f5:51:30:38:00:5e:13:
                    d1:63:6d:6f:22:2c:c8:d8:3b:99:7c:38:a1:fc:d6:
                    e6:19:69:92:2c:ed:96:14:a9:f7:63:1f:14:8f:a0:
                    03:12:93:7c:c4:ff:72:44:7a:c3:6d:9c:a4:27:43:
                    26:cf:89:eb:ee:fb:10:cb:08:9d:a6:07:e6:25:9e:
                    4a:a1:a0:16:de:a5:31:76:6b:c9:fb:64:22:9a:5a:
                    57:f8:85:ed:8e:cb:30:70:6d:0a:89:27:3f:bc:1e:
                    77:8f:9d:76:84:12:e1:53:fe:f5:a0:51:5d:c3:af:
                    9a:4a:00:9b:c0:ed:1a:87:ca:b7:a4:c3:92:9e:5e:
                    9c:66:5f:85:2d:61:02:6f:69:36:74:4d:ce:19:9e:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:68:16:11:FF:A4:39:DA:8D:96:CD:5D:32:E5:83:8B:42:4A:16:58
            X509v3 Authority Key Identifier:
                keyid:A9:55:97:45:47:A0:FE:77:6F:E5:98:42:FE:40:95:48:6B:66:93:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/A955974547A0FE776FE59842FE4095486B6693E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A955974547A0FE776FE59842FE4095486B6693E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/3230302e3230312e3139322e302f31382d3234203d3e203130373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.201.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:18:c6:cf:53:f9:18:cc:c7:39:29:02:6e:95:eb:f3:73:
         a8:e9:dd:d6:ad:39:02:63:81:92:cd:c8:c2:7b:5b:e8:e5:21:
         9b:68:bb:cf:ed:2f:66:33:a6:67:25:92:cb:43:85:39:db:87:
         20:3b:bb:45:25:da:e7:3e:e1:80:cb:14:bf:fa:4e:bc:4a:48:
         b0:c5:c2:37:1e:71:60:67:59:f2:a5:40:71:b5:d1:c7:86:77:
         7a:30:de:f5:1b:15:2d:7c:7e:32:0c:d1:69:45:ce:24:e8:da:
         5a:76:dd:9c:de:58:d5:29:a3:5b:af:7b:60:ab:d0:45:c9:88:
         3f:9a:e3:1e:50:8d:25:b7:1f:2f:27:31:1c:88:6b:b0:bd:63:
         62:47:21:8d:1c:f5:8f:c7:22:0d:e0:25:8c:ce:3a:c4:61:09:
         1d:9d:e4:b8:db:19:d1:49:8d:3a:3a:42:6a:3b:ed:e1:01:67:
         30:a3:2e:cd:e6:60:de:4b:64:6b:de:8b:35:88:1b:42:fc:0f:
         ba:fe:30:d2:46:5f:58:c6:27:b9:fa:0d:45:bd:79:b9:16:2c:
         47:3a:c1:1b:ff:6c:49:e5:ea:0e:44:8e:3f:d7:58:25:4d:10:
         1e:0a:1f:9b:db:82:bd:50:d8:55:d3:b0:7c:ca:43:1f:50:19:
         d1:ad:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:08:07 2025 by rpki-client