Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3137302e3132382e302f31382d3234203d3e203533303036.roa
File:                     3230302e3137302e3132382e302f31382d3234203d3e203533303036.roa (raw, json)
Hash identifier:          u+5/v8l3D2PgRztye6rUrb7Hk/Fba/KC71f+DTrhsJM=
Subject key identifier:   A6:CC:65:B7:76:4E:42:91:1F:13:2B:93:AB:C5:6F:8B:06:E0:F2:DC
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       48F98033AAFBDE1E25CCD4A5194A2D7477963EC8
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3137302e3132382e302f31382d3234203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:11:52 +0000
ROA not before:           Sat 11 Dec 2021 18:06:52 +0000
ROA not after:            Sat 10 Dec 2022 18:11:52 +0000
asID:                     53006
IP address blocks:        200.170.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f9:80:33:aa:fb:de:1e:25:cc:d4:a5:19:4a:2d:74:77:96:3e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:06:52 2021 GMT
            Not After : Dec 10 18:11:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:03:e1:27:b2:fb:69:ab:86:bf:c4:cd:4d:
                    d3:84:b9:56:fa:49:5b:f4:f5:9f:c1:e4:20:b8:16:
                    6a:2b:57:b8:3a:98:34:89:a9:67:12:0d:72:46:01:
                    58:7f:63:b7:c5:44:21:e3:44:2e:12:56:41:2c:ae:
                    5c:33:d4:23:b2:f6:46:90:e1:50:91:93:fa:71:ab:
                    1a:f3:c0:ce:eb:3f:bc:06:7c:dd:b4:2d:32:13:c5:
                    b1:38:72:03:ca:24:ce:1b:2b:f7:e3:84:35:82:86:
                    a1:10:1d:b0:84:72:42:e4:53:43:cd:b2:5b:4a:f6:
                    bc:5b:7c:34:a8:ff:a6:2e:9e:86:d6:0e:99:da:02:
                    65:53:e9:ae:f5:32:e3:49:60:43:d1:33:6c:bd:59:
                    b5:c9:7f:12:78:73:2a:58:1e:8b:3f:b3:6b:ec:b3:
                    c1:17:86:c5:fe:69:e3:af:7a:f9:4b:97:9d:4c:d5:
                    9d:c2:45:a1:64:3b:c4:e0:8f:e9:cf:f8:f7:52:00:
                    71:0f:01:16:17:fc:5c:2f:f6:e5:45:e7:29:54:e3:
                    1e:d7:10:2b:cb:e2:63:83:66:3f:94:37:6f:49:97:
                    b8:05:77:06:56:07:17:c0:26:8d:7e:67:e3:cb:aa:
                    24:d4:31:75:03:bb:59:53:bd:aa:c8:a1:85:d7:04:
                    4f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CC:65:B7:76:4E:42:91:1F:13:2B:93:AB:C5:6F:8B:06:E0:F2:DC
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230302e3137302e3132382e302f31382d3234203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         30:3b:2c:d7:1c:9b:88:80:eb:2b:70:60:57:84:d6:d2:0a:02:
         10:2d:ac:cb:1a:e2:bd:ac:db:d2:79:24:86:f3:57:da:84:f6:
         c3:c9:6a:57:8e:3c:ca:1e:3f:4c:57:89:5c:68:01:d5:8c:a3:
         1e:73:b3:e0:07:c6:a2:56:29:a7:63:b3:c4:5a:35:e1:6e:39:
         38:c9:8a:7b:6d:d2:a6:9d:e0:89:e8:b9:0d:4c:4f:8c:3c:be:
         67:39:5d:19:ea:be:f1:89:31:45:36:1a:4f:2c:86:72:74:17:
         d7:b2:9e:5c:6e:97:73:c5:83:35:86:f2:85:4b:16:80:39:c1:
         50:60:4d:02:44:02:09:58:f0:69:ad:10:86:e4:e1:e2:e8:d4:
         28:7e:b3:09:d1:d2:12:32:48:2a:f3:14:82:60:73:0a:12:6a:
         10:06:ca:1c:72:0b:ad:15:28:4d:bb:81:e5:e8:45:38:ae:8d:
         0e:77:1d:72:17:3c:fb:41:87:1f:09:70:30:61:8a:5d:96:21:
         9b:7c:34:8d:9a:92:de:09:f7:4b:a5:0d:96:43:5c:a7:5e:16:
         75:06:9d:4f:22:2f:c7:11:3a:76:11:25:48:9e:10:d2:23:7a:
         af:a5:33:6a:d2:f9:28:38:01:b6:d8:cc:f9:8c:22:53:ef:1e:
         b4:5f:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:51 2025 by rpki-client