Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230302e3134322e3131322e302f32302d3234203d3e203137323232.roa
File:                     3230302e3134322e3131322e302f32302d3234203d3e203137323232.roa (raw, json)
Hash identifier:          kq+mitf9rmXTP2J02/5gCGwDLCIzcwsEuIlrY7/TmiM=
Subject key identifier:   C9:93:EB:C2:C6:FB:26:A8:4E:8F:96:9B:7E:CA:79:22:EF:DF:3A:01
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       5BEFD42CD7AE35F5E82CE2F67B793FD3E71B54BF
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230302e3134322e3131322e302f32302d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        200.142.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ef:d4:2c:d7:ae:35:f5:e8:2c:e2:f6:7b:79:3f:d3:e7:1b:54:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=C993EBC2C6FB26A84E8F969B7ECA7922EFDF3A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:8b:97:10:d8:ba:85:97:8c:a3:39:92:c1:
                    cb:23:36:a2:00:e3:44:65:2b:f3:79:ec:3d:e8:9e:
                    8b:09:2d:fc:da:c6:5d:72:42:e9:37:5e:08:2a:85:
                    7f:e9:2c:30:22:2d:30:c6:61:5e:f9:61:17:09:a7:
                    36:ad:ab:16:32:ba:df:82:7b:cf:70:a8:7c:c6:d3:
                    27:e2:5f:f0:47:c1:9e:06:80:b1:4b:9b:88:41:4e:
                    60:a7:ba:78:73:17:5e:fb:df:14:e5:c0:7f:3a:82:
                    c8:99:74:29:a5:9e:5d:4f:6a:80:01:b3:f8:47:27:
                    8c:c9:92:1e:dd:76:8e:14:02:87:dd:c7:68:98:bc:
                    15:15:94:4a:c1:97:b3:e5:fb:a0:1b:90:4a:b6:be:
                    a8:39:51:dd:6c:98:bc:ac:85:00:c5:0f:c7:a8:a6:
                    56:3b:62:ee:b7:14:43:59:e8:4f:04:ec:97:79:e8:
                    8f:74:20:83:0d:38:e3:df:71:41:f4:74:8a:2d:58:
                    2c:0a:18:00:4b:7a:fd:65:19:b5:8e:e5:5e:a3:2e:
                    10:f9:8b:bc:ea:e8:b0:8f:23:e4:cb:a3:eb:56:fa:
                    0f:ac:a4:5e:4d:98:f2:79:81:48:40:57:d4:a1:c1:
                    e9:bc:d9:7b:ae:c9:e3:69:14:50:58:96:b3:c0:94:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:93:EB:C2:C6:FB:26:A8:4E:8F:96:9B:7E:CA:79:22:EF:DF:3A:01
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230302e3134322e3131322e302f32302d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:d6:1f:3b:60:04:e8:72:79:da:25:25:4e:82:7e:5b:f3:6f:
         64:91:3b:13:ff:0a:f4:b5:55:01:50:66:a5:72:92:bd:df:b4:
         40:b6:3c:87:2f:c2:f5:18:23:f2:ea:c8:aa:69:a0:05:6f:a6:
         2c:f0:aa:73:41:86:22:a0:3a:99:23:7d:81:26:da:2e:5d:13:
         d7:f2:dc:ad:8a:37:b4:97:f6:a7:a1:aa:b5:62:67:37:7d:cb:
         d2:75:f3:89:33:94:6b:46:0f:dc:9a:f7:a9:a8:26:07:53:90:
         db:c4:85:1d:5e:62:79:9a:79:45:cb:e0:eb:df:22:02:fd:c0:
         b5:1b:d9:51:26:84:06:46:ae:05:77:75:12:c6:de:d5:9f:db:
         36:8c:20:92:2b:58:e6:c0:62:46:c3:99:fd:2b:a5:11:00:17:
         50:9d:cb:37:a8:91:9d:ff:59:22:46:67:74:a5:07:e0:e1:e0:
         3a:5c:3d:06:d2:44:96:39:a9:85:7a:b6:08:3b:f0:ed:5d:4e:
         11:df:0f:82:1a:ba:9f:d8:a2:9d:d8:e4:91:7b:28:bb:e8:32:
         d5:3c:4e:80:1a:64:6b:62:ca:61:d7:93:4a:ae:f2:72:6a:71:
         f1:04:68:10:37:f3:f7:17:ae:21:06:3f:c4:f2:5b:98:7f:17:
         dc:3a:67:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:54 2025 by rpki-client