Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/3230312e3133392e3139302e302f32332d3233203d3e203631393436.roa
File:                     3230312e3133392e3139302e302f32332d3233203d3e203631393436.roa (raw, json)
Hash identifier:          wg5NKC793jLHm+PzYmh6E4r3kUKESJqZYZqF8sxsDpw=
Subject key identifier:   30:A0:6E:0F:B7:35:38:63:D5:D3:12:D3:83:F1:81:06:DE:59:6B:06
Certificate issuer:       /CN=D71A811340ADA62CB6E690F23A52B03E9A48D407
Certificate serial:       2B76A7BE8CD2D4E2D0BC01F9B5D88A5201AB8249
Authority key identifier: D7:1A:81:13:40:AD:A6:2C:B6:E6:90:F2:3A:52:B0:3E:9A:48:D4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/3230312e3133392e3139302e302f32332d3233203d3e203631393436.roa
Signing time:             Wed 18 Oct 2023 13:57:57 +0000
ROA not before:           Wed 18 Oct 2023 13:52:57 +0000
ROA not after:            Wed 16 Oct 2024 13:57:57 +0000
asID:                     61946
IP address blocks:        201.139.190.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:76:a7:be:8c:d2:d4:e2:d0:bc:01:f9:b5:d8:8a:52:01:ab:82:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71A811340ADA62CB6E690F23A52B03E9A48D407
        Validity
            Not Before: Oct 18 13:52:57 2023 GMT
            Not After : Oct 16 13:57:57 2024 GMT
        Subject: CN=30A06E0FB7353863D5D312D383F18106DE596B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:94:44:71:e1:61:61:f8:90:7a:59:7f:48:
                    37:ef:7a:a9:9a:ef:be:bd:2a:69:13:87:8b:22:d2:
                    1b:f9:1b:31:74:d4:3f:8c:0c:84:f0:3c:2c:34:07:
                    6d:3b:48:21:9f:4e:0f:9b:0e:c7:eb:1f:49:56:34:
                    87:78:0e:81:71:d7:3d:76:ce:c8:00:74:cc:8a:e3:
                    ae:42:36:85:ca:a8:50:d9:50:0d:74:b4:12:c1:14:
                    c6:cd:19:08:cd:e5:66:c8:3b:3b:64:7a:3e:e3:27:
                    95:d5:d5:e0:8a:5d:0f:c7:94:26:d2:e9:7b:f4:aa:
                    08:88:6d:f0:8d:f6:16:11:73:19:ce:1d:95:96:5e:
                    cb:dc:bb:58:4f:d1:58:d0:9c:b3:f5:5c:c5:30:71:
                    35:4f:fc:bb:16:5a:9b:bc:e8:32:ba:53:a9:b3:ae:
                    9d:4d:4d:1a:16:56:e2:70:d7:62:7d:d4:20:8b:90:
                    4a:30:40:2f:72:f4:8b:26:5c:69:06:7a:24:22:15:
                    b6:d7:d7:1c:e7:44:81:5d:a1:88:8f:b3:1c:1f:ad:
                    c4:ce:bc:d0:72:1d:b5:49:b0:ce:3b:99:c2:06:de:
                    ea:50:10:0b:71:33:33:20:f8:16:87:be:f8:e9:51:
                    f9:d9:8b:d3:4f:b8:8c:d0:a4:c2:63:6b:6e:4b:a0:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A0:6E:0F:B7:35:38:63:D5:D3:12:D3:83:F1:81:06:DE:59:6B:06
            X509v3 Authority Key Identifier:
                keyid:D7:1A:81:13:40:AD:A6:2C:B6:E6:90:F2:3A:52:B0:3E:9A:48:D4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/3230312e3133392e3139302e302f32332d3233203d3e203631393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:a3:d2:ed:18:bb:eb:f6:89:18:2a:26:11:22:79:1c:25:24:
         d9:47:18:20:61:da:a1:d6:ca:00:bc:bc:35:09:dc:af:5a:89:
         8b:26:1d:ea:a2:fd:e1:dd:33:07:f9:bc:90:ed:3e:6c:e2:18:
         94:12:c2:92:0e:46:95:9b:ec:8e:f1:ce:db:0b:1b:83:da:16:
         40:68:78:22:5f:9d:47:24:fd:de:26:b8:73:49:76:54:92:06:
         fb:9e:c3:2c:c1:41:d6:34:b1:c9:8b:73:ba:f1:d3:c8:cb:93:
         15:c6:d7:6b:da:2a:9b:cd:61:40:f7:fe:94:f0:fe:db:cd:e8:
         5f:d4:e4:be:f9:f1:d2:b6:6c:fd:c2:00:35:6a:d0:d7:2a:da:
         c5:6c:f6:aa:33:69:70:0b:e9:74:7d:6e:0c:20:32:98:44:46:
         34:62:10:9b:6f:be:27:48:05:e6:bd:b9:d3:02:08:63:12:c9:
         c7:54:5b:f4:f9:ad:5e:46:b7:66:36:1f:f6:fd:71:e3:80:4d:
         10:06:a0:b2:af:f5:ad:d7:0f:79:27:fc:cf:cc:fd:85:66:21:
         9c:1e:c9:67:65:9a:73:7a:3c:fb:3f:70:a5:1c:6e:02:42:60:
         d3:75:3e:de:fa:8e:19:3b:60:6b:3d:ea:6a:03:75:47:45:f3:
         73:83:5d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:02 2025 by rpki-client