Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32332d3233203d3e20323730323838.roa
File:                     3230302e3132332e3233322e302f32332d3233203d3e20323730323838.roa (raw, json)
Hash identifier:          m0/yf8nuepXfR7qp0K2xBSHrPjwBW8QQguVDTTJeddU=
Subject key identifier:   60:D6:1E:6D:10:A8:9D:17:3C:16:46:62:17:93:E5:F4:27:6D:F1:8F
Certificate issuer:       /CN=2FEB984B03AE182A25501462242A224C191703BF
Certificate serial:       35D4E0977DA1CF81113222519DEE7418F76E9DD1
Authority key identifier: 2F:EB:98:4B:03:AE:18:2A:25:50:14:62:24:2A:22:4C:19:17:03:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FEB984B03AE182A25501462242A224C191703BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32332d3233203d3e20323730323838.roa
Signing time:             Wed 27 Nov 2024 21:10:53 +0000
ROA not before:           Wed 27 Nov 2024 21:05:53 +0000
ROA not after:            Wed 26 Nov 2025 21:10:53 +0000
asID:                     270288
IP address blocks:        200.123.232.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d4:e0:97:7d:a1:cf:81:11:32:22:51:9d:ee:74:18:f7:6e:9d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FEB984B03AE182A25501462242A224C191703BF
        Validity
            Not Before: Nov 27 21:05:53 2024 GMT
            Not After : Nov 26 21:10:53 2025 GMT
        Subject: CN=60D61E6D10A89D173C1646621793E5F4276DF18F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:9a:8a:96:ff:b6:2e:06:96:3e:4b:7e:bb:
                    d5:69:83:6e:36:fc:bc:12:08:43:dd:68:a3:c7:33:
                    fa:4e:89:e2:ed:16:a3:2b:59:58:54:ec:ff:78:f1:
                    d8:6d:18:94:f3:7c:9b:ad:14:8f:80:c9:c5:b3:d8:
                    fe:e9:b5:cf:af:d7:dd:b8:39:de:f0:37:0d:94:06:
                    51:dc:8b:23:2b:df:cc:04:23:91:a0:9e:a0:68:a5:
                    44:8c:41:a4:bd:5d:c9:f4:49:14:e5:ee:bb:d3:c5:
                    62:df:73:19:59:33:32:61:82:6e:e8:14:49:33:7a:
                    b2:4b:19:d9:c1:78:4a:82:5c:ec:f4:f8:b5:02:fc:
                    2f:0a:61:a3:50:d8:e3:91:7b:8f:07:72:48:a9:23:
                    96:d3:89:f1:f1:36:4e:fb:11:61:80:36:68:2d:00:
                    3b:be:d2:39:39:ae:09:63:37:e7:da:33:95:26:20:
                    47:da:13:e1:e1:81:c2:e4:b2:fc:4c:34:9b:54:15:
                    2b:ef:86:fb:ca:62:8e:8e:5c:79:83:6a:57:4f:cd:
                    61:a3:d1:57:9e:54:99:b4:8b:72:85:0f:6f:7a:f0:
                    7d:0a:43:ea:85:7c:dc:57:6f:d0:0c:79:8a:22:ee:
                    e5:e4:9a:98:97:5f:fd:11:c2:9e:e1:aa:09:ac:37:
                    3d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D6:1E:6D:10:A8:9D:17:3C:16:46:62:17:93:E5:F4:27:6D:F1:8F
            X509v3 Authority Key Identifier:
                keyid:2F:EB:98:4B:03:AE:18:2A:25:50:14:62:24:2A:22:4C:19:17:03:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/2FEB984B03AE182A25501462242A224C191703BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FEB984B03AE182A25501462242A224C191703BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32332d3233203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:33:bd:2e:58:4b:4c:22:cf:68:50:f7:8a:09:50:6a:13:8c:
         7d:48:7c:07:70:14:fc:38:70:c0:45:d5:f1:e5:11:b1:5f:85:
         f1:39:b3:b1:a2:a8:f6:2e:13:2a:91:a3:06:46:7c:3f:ab:43:
         40:2c:18:39:29:71:24:f1:e6:fe:d7:97:2f:92:dc:de:e0:5d:
         8f:54:de:53:1c:f9:ff:53:51:66:23:09:c4:36:00:c0:3d:03:
         40:36:44:3d:88:68:48:ed:52:7c:45:41:e5:64:15:30:27:be:
         80:eb:95:ae:eb:a3:8f:a6:70:9e:b9:86:50:ea:80:37:30:1b:
         76:59:ca:bb:30:b6:d5:89:15:1d:5a:39:fa:b5:dc:68:22:45:
         26:5e:52:31:19:44:a5:83:3d:3c:8f:a2:73:52:22:c6:1f:8e:
         d5:88:b0:e8:7d:bc:0c:cd:73:28:34:5c:e3:06:f6:58:35:0e:
         8b:72:11:df:8c:d2:69:7b:e8:57:31:17:e5:da:1a:97:3c:b2:
         f8:92:64:1c:b8:78:8b:51:f5:9d:2e:f6:66:69:80:97:8d:fc:
         ad:56:e2:5e:97:b8:2a:d1:2a:75:ab:30:42:b7:68:38:69:1f:
         9b:42:fb:62:1d:12:fe:68:96:d4:9a:dd:d4:5b:8f:f8:54:5c:
         ad:01:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:57 2025 by rpki-client