Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/3230302e392e3130342e302f32322d3232203d3e20323731303531.roa
File:                     3230302e392e3130342e302f32322d3232203d3e20323731303531.roa (raw, json)
Hash identifier:          8fyk7JpSHR4eNWYf7andvzd5WFNnVkoRMkEpkKxTmTg=
Subject key identifier:   09:7E:CE:74:51:83:8B:F6:D9:33:A8:88:28:24:CE:F6:E5:61:63:08
Certificate issuer:       /CN=042A3E7DEAD7C0AFE927D6C84ADB69D575419B27
Certificate serial:       5AB60F168D1ECF427259DE4CAE414AD441851B8A
Authority key identifier: 04:2A:3E:7D:EA:D7:C0:AF:E9:27:D6:C8:4A:DB:69:D5:75:41:9B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/3230302e392e3130342e302f32322d3232203d3e20323731303531.roa
Signing time:             Wed 20 Dec 2023 12:47:27 +0000
ROA not before:           Wed 20 Dec 2023 12:42:27 +0000
ROA not after:            Wed 18 Dec 2024 12:47:27 +0000
asID:                     271051
IP address blocks:        200.9.104.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b6:0f:16:8d:1e:cf:42:72:59:de:4c:ae:41:4a:d4:41:85:1b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042A3E7DEAD7C0AFE927D6C84ADB69D575419B27
        Validity
            Not Before: Dec 20 12:42:27 2023 GMT
            Not After : Dec 18 12:47:27 2024 GMT
        Subject: CN=097ECE7451838BF6D933A8882824CEF6E5616308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:bd:b7:d1:e2:73:60:ac:77:5e:09:7a:9a:
                    ed:71:ad:a6:f1:f1:92:0d:a2:af:65:1a:80:75:7f:
                    67:fa:cc:d0:39:e4:e7:bb:4a:d6:0d:36:88:91:b2:
                    2b:8f:e5:1e:3f:ad:2f:83:8f:72:9d:4b:a4:92:70:
                    e7:03:e8:a9:93:81:dc:1f:ac:93:e3:d0:0e:e1:91:
                    db:da:37:b8:3f:ca:3b:2c:fd:cf:32:e8:73:db:73:
                    ea:b3:9d:bf:c0:f9:10:b3:84:e7:f6:a0:01:13:f6:
                    e4:56:c6:3e:e3:95:48:89:bb:a7:cd:2b:ef:4f:df:
                    69:d4:9c:a3:cc:50:46:82:f6:82:ad:f5:46:e6:76:
                    02:10:74:e6:63:34:95:d0:a5:c0:0e:5d:02:97:73:
                    de:49:25:5b:53:5f:8e:02:03:a7:4a:e5:99:5e:03:
                    46:45:2f:22:5a:b4:fb:bb:b1:80:45:06:77:00:07:
                    cc:ce:bd:77:25:06:13:d0:00:22:9a:29:63:86:30:
                    3f:6b:64:28:1f:71:7f:50:86:97:48:74:89:dd:cf:
                    1c:9a:49:04:17:0b:52:3b:70:60:43:b7:4a:76:e5:
                    77:da:c9:af:ef:17:bf:2d:2f:89:af:09:cc:1d:f9:
                    8a:55:6c:a7:f3:ba:45:4b:62:c9:85:84:74:89:24:
                    c3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7E:CE:74:51:83:8B:F6:D9:33:A8:88:28:24:CE:F6:E5:61:63:08
            X509v3 Authority Key Identifier:
                keyid:04:2A:3E:7D:EA:D7:C0:AF:E9:27:D6:C8:4A:DB:69:D5:75:41:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/3230302e392e3130342e302f32322d3232203d3e20323731303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:77:29:b1:3e:37:17:0b:c5:c7:eb:9c:07:54:d9:5b:ed:c0:
         0e:c3:d2:87:a7:54:29:25:6a:b1:4d:d1:43:1f:2d:bf:6d:34:
         de:6f:65:88:23:ed:e2:87:de:b5:7b:67:22:64:da:58:14:bf:
         af:df:92:67:3d:78:61:15:ef:e7:97:15:f1:02:79:45:ee:f7:
         e8:af:56:7f:25:47:80:24:ea:50:2e:27:78:e7:08:b2:21:84:
         d6:bf:78:9c:73:cb:5f:51:5a:12:60:aa:31:53:25:c9:54:de:
         7a:dd:33:7e:41:c3:58:fa:35:d0:cd:30:dd:a6:0c:66:fd:e7:
         bc:05:6e:8f:a9:f8:3d:9f:c2:fb:47:ab:d4:94:f3:c9:81:b7:
         05:3d:c1:25:74:77:58:a5:8a:17:e6:75:a8:d5:32:70:7e:fc:
         4e:d5:8e:97:00:5f:1d:05:39:91:1d:a3:3f:c6:b8:12:8c:cf:
         64:af:3f:6c:ad:89:40:0c:ee:bc:d0:af:e1:1c:b0:ea:2f:e7:
         70:6c:ab:b9:80:30:33:9e:86:dd:f4:bc:a3:3c:17:4b:00:fd:
         62:b7:93:71:83:60:84:b6:57:e2:24:ee:5e:40:1a:73:e7:6d:
         23:f1:15:48:3e:00:76:1d:1a:60:4b:5a:e1:08:72:c2:3f:74:
         a1:73:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:28:44 2025 by rpki-client