Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/3230302e372e302e302f32322d3234203d3e20323632363537.roa
File:                     3230302e372e302e302f32322d3234203d3e20323632363537.roa (raw, json)
Hash identifier:          HGiSiOTQ1tw9FOXgdb7Bmch64WsuDOAWYJ9jCv0lKrY=
Subject key identifier:   97:CA:5E:AE:E1:2E:DD:5E:3F:9E:D8:45:4F:16:FA:0E:E3:70:E3:60
Certificate issuer:       /CN=1CA20D5CBA9102939860AEADFEF368323D206454
Certificate serial:       51B9A2890454096169E88FC28146DE5EA64E43AF
Authority key identifier: 1C:A2:0D:5C:BA:91:02:93:98:60:AE:AD:FE:F3:68:32:3D:20:64:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CA20D5CBA9102939860AEADFEF368323D206454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/3230302e372e302e302f32322d3234203d3e20323632363537.roa
Signing time:             Fri 26 Jul 2024 17:32:07 +0000
ROA not before:           Fri 26 Jul 2024 17:27:07 +0000
ROA not after:            Fri 25 Jul 2025 17:32:07 +0000
asID:                     262657
IP address blocks:        200.7.0.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b9:a2:89:04:54:09:61:69:e8:8f:c2:81:46:de:5e:a6:4e:43:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CA20D5CBA9102939860AEADFEF368323D206454
        Validity
            Not Before: Jul 26 17:27:07 2024 GMT
            Not After : Jul 25 17:32:07 2025 GMT
        Subject: CN=97CA5EAEE12EDD5E3F9ED8454F16FA0EE370E360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f4:a4:bc:40:65:dc:c1:91:9b:f5:ba:8b:d0:
                    d4:47:c3:a6:e4:18:eb:66:d8:36:a4:31:3f:9a:84:
                    4e:72:f5:73:cb:12:9a:bc:12:86:64:96:e9:ea:59:
                    af:67:51:49:ae:21:38:5b:ec:10:2f:10:67:33:e2:
                    1c:88:99:61:2d:79:93:98:ad:95:3f:b2:23:22:f7:
                    40:6c:d4:af:9a:da:af:9f:b5:3f:2f:6b:17:6f:4b:
                    00:42:50:32:ab:16:4d:cc:00:39:34:98:25:68:9f:
                    59:42:e4:51:2d:ad:a3:72:de:6d:da:6e:df:32:b0:
                    6e:a3:88:a9:2e:aa:9a:0b:e1:bb:9a:bd:ff:c1:f7:
                    72:94:a1:77:3b:07:46:dc:9c:b9:0b:3e:08:a8:31:
                    34:f6:c1:96:cb:9c:4e:c2:3c:14:f1:59:e2:51:46:
                    a1:0a:b1:43:f6:ef:1e:02:68:59:ce:71:28:bd:55:
                    b6:44:11:9f:b2:1f:9f:7a:5c:8a:31:4f:aa:01:cd:
                    1b:63:e7:59:6e:8a:a1:18:c4:1e:b9:c2:85:d1:9a:
                    1b:91:35:2a:4f:3c:42:58:2d:14:d8:d6:99:5d:89:
                    cb:26:a3:39:28:b8:9a:59:aa:c1:1c:62:5f:0d:53:
                    8d:6b:89:51:05:04:2d:b6:6e:2a:27:10:24:be:76:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CA:5E:AE:E1:2E:DD:5E:3F:9E:D8:45:4F:16:FA:0E:E3:70:E3:60
            X509v3 Authority Key Identifier:
                keyid:1C:A2:0D:5C:BA:91:02:93:98:60:AE:AD:FE:F3:68:32:3D:20:64:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/1CA20D5CBA9102939860AEADFEF368323D206454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CA20D5CBA9102939860AEADFEF368323D206454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/3230302e372e302e302f32322d3234203d3e20323632363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:af:92:69:35:59:3d:02:f9:1f:36:9a:c5:11:17:ff:83:e0:
         54:83:d1:97:ac:5c:1f:c6:41:52:cd:e5:65:ab:ee:fa:4a:e0:
         ba:7c:89:c2:18:40:cb:99:dd:09:46:63:0e:c2:1c:ba:37:4b:
         ba:0a:a0:d0:1c:2d:82:cd:a2:b8:70:cf:03:6a:c4:15:63:fd:
         8e:58:bc:f3:84:03:a4:c7:ae:db:c2:0d:b2:4d:85:f5:2c:cb:
         f7:fc:e1:1e:4d:e0:93:fa:bf:27:34:ec:4e:77:c8:9c:46:e2:
         f7:25:1e:18:ea:be:4c:7e:46:62:fb:d8:98:be:80:84:5a:10:
         d5:a8:1b:1a:c3:10:d3:42:a3:6c:9f:0a:1d:65:7d:59:9a:f3:
         7b:7a:81:dc:0c:2c:fd:ec:cf:ad:68:12:8b:0e:21:e9:b7:66:
         9a:26:0d:9e:28:12:b4:a1:24:14:a5:70:cb:8f:43:5c:22:ab:
         7a:29:62:42:21:b8:ea:8b:c3:3e:a6:d3:3a:b9:82:1a:9a:d3:
         c4:56:26:55:31:d0:44:69:70:33:54:b4:a0:5a:59:39:6a:f4:
         99:5e:ee:ca:62:a1:41:fd:bd:70:a5:7f:79:3c:45:0f:3a:97:
         f0:b2:9a:09:87:f3:d6:a3:f9:f2:a2:c8:05:2e:35:15:f3:44:
         69:e8:42:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:33 2025 by rpki-client