Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/3230312e3231392e3235302e302f32342d3234203d3e203631393531.roa
File:                     3230312e3231392e3235302e302f32342d3234203d3e203631393531.roa (raw, json)
Hash identifier:          HiOlygG59ATSVBmRd9ZfvODt13coL0hQGXSQO2xyC7o=
Subject key identifier:   C0:9E:9D:BA:E2:38:FE:06:46:7C:59:DB:50:51:AA:09:41:80:F0:25
Certificate issuer:       /CN=FD4D89D5A7810B37AF10382AA7E13032E2ABD8CB
Certificate serial:       1E146B4CBD6FACDC0DDD36D8EAF5558534D88177
Authority key identifier: FD:4D:89:D5:A7:81:0B:37:AF:10:38:2A:A7:E1:30:32:E2:AB:D8:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD4D89D5A7810B37AF10382AA7E13032E2ABD8CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/3230312e3231392e3235302e302f32342d3234203d3e203631393531.roa
Signing time:             Tue 16 May 2023 14:07:15 +0000
ROA not before:           Tue 16 May 2023 14:02:15 +0000
ROA not after:            Tue 14 May 2024 14:07:15 +0000
asID:                     61951
IP address blocks:        201.219.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:14:6b:4c:bd:6f:ac:dc:0d:dd:36:d8:ea:f5:55:85:34:d8:81:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD4D89D5A7810B37AF10382AA7E13032E2ABD8CB
        Validity
            Not Before: May 16 14:02:15 2023 GMT
            Not After : May 14 14:07:15 2024 GMT
        Subject: CN=C09E9DBAE238FE06467C59DB5051AA094180F025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:81:9a:01:5f:ec:69:ef:94:0f:e5:56:ba:a6:
                    40:06:4f:58:d7:22:07:f4:07:8e:aa:7b:6b:05:35:
                    b0:c3:1b:72:04:b8:4a:4b:38:f2:01:a1:25:bb:38:
                    2a:ff:92:09:dd:9e:aa:61:0e:67:02:ee:b5:9e:60:
                    5a:eb:fe:e7:e0:1e:9f:f1:f0:1b:55:20:17:53:12:
                    d5:63:2d:9a:ea:06:26:84:a4:9e:38:30:28:b1:1e:
                    38:3a:d0:e2:ab:34:77:33:4f:97:56:9b:44:b3:a9:
                    c8:52:d0:c1:7d:2e:44:0f:a6:87:f3:88:b7:8c:34:
                    4c:61:ac:57:fc:10:5c:bc:90:ef:72:58:eb:06:5a:
                    de:7d:e0:f8:af:77:cf:c1:ab:1b:eb:17:36:ce:65:
                    ee:bd:83:05:34:19:2b:76:80:43:44:57:78:9f:b9:
                    8d:c1:2e:eb:6b:c0:5d:ec:38:08:e9:87:bf:7e:69:
                    ea:b9:a6:40:10:f4:6e:d0:1e:7f:7d:20:e7:d4:ae:
                    ce:70:54:95:28:88:37:f1:4f:32:02:d8:a1:3e:52:
                    24:f0:9b:3a:cf:1c:fa:aa:85:82:da:17:7b:eb:29:
                    f3:1b:38:3b:e2:24:88:c1:84:23:a2:a7:de:c8:46:
                    ee:c0:cf:63:98:a8:4f:83:40:b8:97:ed:0c:e0:66:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9E:9D:BA:E2:38:FE:06:46:7C:59:DB:50:51:AA:09:41:80:F0:25
            X509v3 Authority Key Identifier:
                keyid:FD:4D:89:D5:A7:81:0B:37:AF:10:38:2A:A7:E1:30:32:E2:AB:D8:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/FD4D89D5A7810B37AF10382AA7E13032E2ABD8CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD4D89D5A7810B37AF10382AA7E13032E2ABD8CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/3230312e3231392e3235302e302f32342d3234203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:20:2e:b1:69:20:ba:2c:4e:4e:8f:32:c5:a9:36:f1:23:70:
         38:4a:83:10:c2:34:02:ef:38:46:20:80:9b:50:01:42:ad:ed:
         66:32:c5:f7:e9:72:d5:a0:fb:88:ca:40:52:c4:8d:4d:a3:1f:
         00:f0:ed:2c:5a:f9:f8:c0:b6:56:84:aa:fa:b1:59:9b:60:16:
         7b:cd:be:a9:10:09:7c:1a:7c:e3:1b:26:ce:e1:e9:51:58:de:
         dd:ed:d1:c3:53:f1:45:4d:47:4e:06:23:a0:b0:7e:19:b6:35:
         22:b1:e7:06:b7:b6:e1:0f:ca:88:43:87:f8:ba:a0:78:e1:1c:
         6d:87:64:02:51:ca:70:ca:a3:3c:54:9f:d2:ff:ad:46:b0:d7:
         43:5d:a3:70:1c:ef:1f:49:85:07:12:ee:f9:21:89:cb:83:91:
         fd:71:92:d7:50:da:99:85:d1:59:28:ac:22:c3:ab:b0:95:84:
         65:cd:bb:a5:47:da:fe:ed:e0:f5:30:4e:5a:e5:59:99:01:87:
         18:8b:42:61:ed:41:8f:d6:3b:bb:c0:bb:44:8f:a5:c9:46:e0:
         91:45:c6:5a:78:70:94:c8:6f:e0:de:85:a5:30:1e:59:04:05:
         47:f4:7a:08:9b:c7:38:58:d6:99:38:2d:a8:b4:9f:05:c7:0c:
         6c:97:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:51:19 2025 by rpki-client