Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230332e302f32342d3234203d3e20323634303031.roa
File:                     3134332e302e3230332e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          R4AyUaQRjnzX7ac6qeJQoQiWYdwEVlLjQE5pQSjEEY4=
Subject key identifier:   27:0F:45:50:81:06:87:CB:21:9B:B8:C5:61:7C:A1:7E:C8:18:68:14
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       5D62D17AD81E62C1931745159091D4947311E93D
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230332e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 18 May 2023 17:11:16 +0000
ROA not before:           Thu 18 May 2023 17:06:16 +0000
ROA not after:            Thu 16 May 2024 17:11:16 +0000
asID:                     264001
IP address blocks:        143.0.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:62:d1:7a:d8:1e:62:c1:93:17:45:15:90:91:d4:94:73:11:e9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: May 18 17:06:16 2023 GMT
            Not After : May 16 17:11:16 2024 GMT
        Subject: CN=270F4550810687CB219BB8C5617CA17EC8186814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:ad:17:78:98:1f:cf:53:1e:f1:d4:9e:90:
                    3f:e8:36:0d:ee:c4:b5:11:de:80:ac:a4:8f:09:82:
                    cf:d9:c0:1d:00:6e:aa:cd:ba:4f:88:78:c2:a7:2d:
                    47:6b:dc:9b:95:fb:ae:88:fe:b7:1c:d1:ec:24:c8:
                    51:32:3a:88:07:fd:8b:aa:b9:c8:ab:6a:b7:67:5a:
                    48:c8:36:be:8a:00:29:d4:17:b4:0d:01:9b:b8:74:
                    9c:e3:b1:0c:95:97:76:9a:19:47:26:73:45:9f:30:
                    00:7e:4f:98:32:64:73:ce:d5:38:99:70:1d:a7:ff:
                    2d:e6:51:90:fa:26:15:53:95:c9:7e:fc:35:5f:bb:
                    49:32:5f:52:2f:e7:61:f3:f4:00:19:bc:81:cc:60:
                    d5:aa:3d:69:17:a1:e6:d8:13:06:4b:32:3e:37:de:
                    b0:17:6c:b2:0f:a1:68:fb:87:07:3e:d5:e3:19:36:
                    05:56:1b:bd:7a:98:91:5d:5a:48:52:73:51:3e:e9:
                    12:4f:3e:b7:7a:35:ed:1a:e7:0f:14:6b:01:6e:a9:
                    7c:40:04:06:79:60:fb:4a:ff:2f:71:d8:23:98:f1:
                    d0:ab:c1:17:70:bc:37:b8:56:4e:49:b3:ed:cd:f3:
                    3b:6c:37:fe:c4:42:d2:87:90:6a:fb:4d:b0:fa:6f:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0F:45:50:81:06:87:CB:21:9B:B8:C5:61:7C:A1:7E:C8:18:68:14
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230332e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:63:a7:a2:5b:ec:ab:02:38:1d:e3:03:05:ac:f7:90:d7:51:
         31:8b:ba:a7:f5:48:80:1d:a0:4a:70:8e:ca:22:b2:b3:2a:e5:
         86:1e:10:42:1c:4e:d6:b4:c9:14:f5:7e:e6:78:75:fc:b3:6c:
         ac:56:0b:e6:44:43:84:06:1b:51:31:00:cc:00:56:3b:55:c3:
         6f:a1:58:7f:98:cd:08:62:04:53:ea:f0:75:aa:b2:bb:53:d2:
         26:dc:04:a6:4e:c7:15:a7:f7:82:80:b9:cd:9f:b9:23:42:5c:
         b4:f8:e8:8e:56:71:87:14:3d:10:46:c2:dd:73:43:5a:fd:c2:
         ba:bf:07:86:64:74:c7:1e:d9:77:2c:05:0e:8e:84:e6:c6:d1:
         36:c5:b5:58:47:cb:26:cb:af:62:21:a5:bb:d1:65:bb:54:64:
         a6:e5:5f:da:3f:b0:c5:9f:14:f4:98:8f:a5:40:9e:b6:8c:1e:
         bd:be:9c:05:93:c7:70:de:17:ad:43:a7:aa:54:42:5f:c5:3d:
         26:44:0d:1b:f8:d7:78:f7:8b:6c:2e:76:21:08:99:60:84:72:
         92:21:82:30:ff:93:cd:d4:9d:7c:bb:e9:87:e3:8c:c5:b8:9b:
         bf:72:e1:59:70:bc:24:38:90:ed:37:eb:1c:a0:ee:49:e9:ed:
         04:90:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:14 2025 by rpki-client