Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/3230302e392e3130362e302f32332d3233203d3e20323731303531.roa
File:                     3230302e392e3130362e302f32332d3233203d3e20323731303531.roa (raw, json)
Hash identifier:          LRciER/xHz84h7eQtXfXNdNw6JOlK0mdRHmCdOSzhO4=
Subject key identifier:   52:0F:FA:91:A2:E2:27:06:F1:89:BF:11:61:75:E2:1E:A8:AB:B1:3E
Certificate issuer:       /CN=042A3E7DEAD7C0AFE927D6C84ADB69D575419B27
Certificate serial:       62768628562519278F6EFD456C5502F6D4972FA1
Authority key identifier: 04:2A:3E:7D:EA:D7:C0:AF:E9:27:D6:C8:4A:DB:69:D5:75:41:9B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/3230302e392e3130362e302f32332d3233203d3e20323731303531.roa
Signing time:             Wed 20 Dec 2023 12:47:27 +0000
ROA not before:           Wed 20 Dec 2023 12:42:27 +0000
ROA not after:            Wed 18 Dec 2024 12:47:27 +0000
asID:                     271051
IP address blocks:        200.9.106.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:76:86:28:56:25:19:27:8f:6e:fd:45:6c:55:02:f6:d4:97:2f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042A3E7DEAD7C0AFE927D6C84ADB69D575419B27
        Validity
            Not Before: Dec 20 12:42:27 2023 GMT
            Not After : Dec 18 12:47:27 2024 GMT
        Subject: CN=520FFA91A2E22706F189BF116175E21EA8ABB13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:f0:4c:ce:00:ae:cd:0f:13:1e:82:23:c1:
                    be:da:53:28:38:35:97:10:e1:8c:3e:f9:11:29:96:
                    aa:9f:a1:43:21:6b:c9:4f:d5:46:d0:c3:96:7f:33:
                    99:dc:a7:2b:b3:e6:8d:68:de:1f:f0:82:56:3a:60:
                    59:9f:39:1b:2e:dd:b3:c1:34:64:9d:bb:3c:3e:1a:
                    ed:37:d2:44:91:f9:a3:c9:89:96:1b:b0:bb:26:c4:
                    e3:f4:8e:09:15:f0:73:d4:13:1a:26:cc:07:48:18:
                    66:54:08:0d:b5:51:83:6d:31:d5:30:5d:93:3e:bb:
                    79:be:21:3f:ac:90:9a:54:63:31:00:4e:af:eb:9a:
                    61:46:3e:66:db:f6:57:72:a2:a2:c6:6a:8f:f1:6b:
                    39:00:f5:0c:df:f5:24:14:f0:99:93:94:c3:92:45:
                    52:37:00:e3:49:60:1d:08:48:db:98:a8:e7:97:a8:
                    fc:8d:ac:21:31:3c:90:65:c4:4f:66:2a:a3:fb:86:
                    48:16:61:dc:fb:01:a3:75:80:eb:6e:8b:0b:cc:16:
                    7b:79:ef:53:4a:25:73:7d:7e:42:83:f5:7c:bb:26:
                    ed:c7:d5:12:23:69:d6:09:bb:a5:f0:98:1e:0e:49:
                    81:81:6c:ff:cf:24:b3:16:2b:f7:6f:62:ff:ef:c8:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0F:FA:91:A2:E2:27:06:F1:89:BF:11:61:75:E2:1E:A8:AB:B1:3E
            X509v3 Authority Key Identifier:
                keyid:04:2A:3E:7D:EA:D7:C0:AF:E9:27:D6:C8:4A:DB:69:D5:75:41:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/042A3E7DEAD7C0AFE927D6C84ADB69D575419B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmmAdWJ8rt1AjGE2ApujeZXDSLtgZ4bKAJemnmd22Miu/0/3230302e392e3130362e302f32332d3233203d3e20323731303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:5a:21:a8:07:e9:e0:d8:9a:a0:93:04:71:c8:9d:4c:a4:09:
         e6:3e:39:97:b3:6d:12:f5:1b:6d:8b:8a:be:c7:14:ed:7f:fe:
         ed:5a:ef:73:9b:56:32:90:87:1e:4a:20:a7:19:b5:c6:5c:dc:
         f9:39:6c:98:06:f0:58:25:b6:fe:f6:c8:39:82:7a:a1:42:8e:
         52:01:c3:8b:d1:b1:54:de:d3:4f:00:1c:fd:fd:51:fc:09:f2:
         c0:9d:e8:b7:ce:e3:48:fd:b9:25:89:a4:24:80:cf:b9:13:ab:
         a7:47:ef:22:b8:10:0b:b8:ef:b7:79:d4:14:87:2e:83:d1:42:
         68:b6:07:41:21:1b:0e:50:ac:2a:2d:94:8a:e6:f7:8c:c3:11:
         13:79:39:85:15:35:41:3b:44:ce:c6:ca:11:e3:03:69:80:83:
         57:ed:79:41:1b:f2:51:d8:31:20:e0:47:66:70:c6:ac:ab:46:
         d7:94:88:38:d1:62:9b:9f:62:b6:b7:2c:55:0c:57:ba:97:47:
         e1:ec:33:8b:89:95:5a:25:40:1a:ab:06:82:9d:66:f4:05:22:
         f9:11:27:b4:17:e2:87:d6:63:bb:73:15:7c:e2:75:6b:be:30:
         91:ae:be:ee:db:61:09:f0:a6:ec:20:c0:d6:96:5a:43:e2:7b:
         ec:88:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:19:02 2025 by rpki-client