Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3233203d3e20323731333335.roa
File:                     3230372e3234382e32302e302f32322d3233203d3e20323731333335.roa (raw, json)
Hash identifier:          nKeGwDVUbQ/04ZPiNuMKRc9Q9lJ+5OxMyDmmGd5kqrI=
Subject key identifier:   ED:4C:EF:80:59:A0:62:B8:09:10:30:F1:78:12:86:4A:82:F5:3C:5B
Certificate issuer:       /CN=183AD09B8E58EC140D5736D6990E8E4E9855AB8A
Certificate serial:       4C53B2609711B33E4AECB8D972260CECA277DE35
Authority key identifier: 18:3A:D0:9B:8E:58:EC:14:0D:57:36:D6:99:0E:8E:4E:98:55:AB:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/183AD09B8E58EC140D5736D6990E8E4E9855AB8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3233203d3e20323731333335.roa
Signing time:             Fri 20 Oct 2023 11:19:48 +0000
ROA not before:           Fri 20 Oct 2023 11:14:48 +0000
ROA not after:            Fri 18 Oct 2024 11:19:48 +0000
asID:                     271335
IP address blocks:        207.248.20.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:53:b2:60:97:11:b3:3e:4a:ec:b8:d9:72:26:0c:ec:a2:77:de:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183AD09B8E58EC140D5736D6990E8E4E9855AB8A
        Validity
            Not Before: Oct 20 11:14:48 2023 GMT
            Not After : Oct 18 11:19:48 2024 GMT
        Subject: CN=ED4CEF8059A062B8091030F17812864A82F53C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:ea:eb:2b:d5:03:05:9a:51:1f:a3:69:6d:
                    27:58:3b:06:74:2e:e6:45:ea:3e:89:cc:9d:e8:1d:
                    57:03:29:e2:11:60:00:ff:cf:41:df:b5:bd:37:97:
                    11:55:08:44:f1:13:98:7d:b7:5d:c2:a9:b3:c0:78:
                    fb:b8:a5:ea:d6:39:a0:bc:3a:4e:e2:40:65:43:fb:
                    df:bc:07:4e:f9:d3:a6:48:75:90:c7:45:bd:c7:c0:
                    63:5e:ef:dd:1d:e4:b2:c3:40:ac:a5:31:7e:1f:19:
                    74:77:e0:89:14:32:71:0c:d7:a7:e9:7d:4f:f6:46:
                    0a:12:db:25:0a:8a:e9:74:9e:a8:dd:e4:1a:a9:4f:
                    4d:ee:1d:45:2d:fe:75:ef:0b:55:fb:02:65:60:dc:
                    35:48:2a:28:ab:13:57:50:8e:2e:3d:5a:84:06:dd:
                    11:fe:0b:ee:c0:99:c3:94:7d:07:a3:dd:da:19:01:
                    c5:09:00:dc:1f:16:2e:ac:07:a9:6b:ed:7b:11:e8:
                    84:ba:2e:0e:5f:ef:9e:e8:13:de:9b:0e:1b:09:47:
                    d4:4d:5b:e2:9a:b5:c8:48:a3:fa:b0:12:78:17:6d:
                    15:d4:a5:6b:47:dd:28:6a:59:27:74:d1:2d:7d:a6:
                    30:9c:5f:e5:0d:de:08:9e:1e:ba:38:fa:73:f9:a1:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4C:EF:80:59:A0:62:B8:09:10:30:F1:78:12:86:4A:82:F5:3C:5B
            X509v3 Authority Key Identifier:
                keyid:18:3A:D0:9B:8E:58:EC:14:0D:57:36:D6:99:0E:8E:4E:98:55:AB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/183AD09B8E58EC140D5736D6990E8E4E9855AB8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/183AD09B8E58EC140D5736D6990E8E4E9855AB8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3233203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:ea:97:cf:b6:b4:ab:ba:bd:0c:73:6a:0f:83:0a:38:6d:23:
         bf:ca:4e:25:84:86:71:ba:f6:c6:27:4d:f0:ee:4d:1d:52:4d:
         69:e8:0f:79:b6:20:64:47:32:98:94:e8:55:1e:ea:28:62:30:
         cd:0d:1a:7a:1e:61:40:4a:05:ba:b6:14:a1:45:3e:80:6b:ca:
         be:0c:fc:6a:ce:6f:bd:22:9a:c0:98:6a:c2:35:08:21:ae:0c:
         af:0f:52:ff:e3:8f:3b:2e:ce:e3:a2:79:ff:d4:a9:01:0f:b9:
         55:2d:b9:fb:fd:70:b0:7b:98:0d:f4:d8:cf:b7:63:e4:85:8a:
         87:34:a2:64:0c:a0:b2:0e:74:74:0c:fd:69:d9:fc:58:95:c9:
         c3:29:a9:34:05:ce:ba:e1:97:f0:b4:73:3a:52:8e:55:72:83:
         f3:09:64:22:0c:73:bd:0a:f0:a9:8b:9b:77:0e:ab:48:8e:3b:
         16:15:3d:ad:3c:fc:b8:04:e7:55:71:71:08:d8:bd:95:2e:e3:
         22:00:b2:21:b7:9d:a9:2d:11:29:d9:a7:a0:fd:ae:2f:56:9b:
         bc:60:5a:66:69:70:48:4f:58:2d:78:5a:a3:39:e5:15:10:14:
         5c:f1:c2:36:2f:3f:e8:a9:e7:30:fc:bf:62:36:98:bd:47:a1:
         8f:24:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:43 2025 by rpki-client