Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/3230302e3138352e33322e302f31392d3234203d3e203136363835.roa
File:                     3230302e3138352e33322e302f31392d3234203d3e203136363835.roa (raw, json)
Hash identifier:          j22qeGc70FknAZlFek8YGLRQNzuFqjqzBktPff7VzCU=
Subject key identifier:   BF:8C:EA:42:E2:CB:BC:29:23:06:F8:A5:38:F9:77:4A:F9:C4:D5:CA
Certificate issuer:       /CN=021E94357765B573082345F9DF7AA5ACB27A8AA4
Certificate serial:       576008D9C4705BB7062BA951AF450D19B9AB8B4A
Authority key identifier: 02:1E:94:35:77:65:B5:73:08:23:45:F9:DF:7A:A5:AC:B2:7A:8A:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/3230302e3138352e33322e302f31392d3234203d3e203136363835.roa
Signing time:             Wed 26 Jul 2023 13:24:19 +0000
ROA not before:           Wed 26 Jul 2023 13:19:19 +0000
ROA not after:            Wed 24 Jul 2024 13:24:19 +0000
asID:                     16685
IP address blocks:        200.185.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:60:08:d9:c4:70:5b:b7:06:2b:a9:51:af:45:0d:19:b9:ab:8b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021E94357765B573082345F9DF7AA5ACB27A8AA4
        Validity
            Not Before: Jul 26 13:19:19 2023 GMT
            Not After : Jul 24 13:24:19 2024 GMT
        Subject: CN=BF8CEA42E2CBBC292306F8A538F9774AF9C4D5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:d3:5c:c3:d7:af:4b:99:15:93:1b:d7:f2:
                    5c:a2:da:e0:ba:3f:16:c0:c7:89:d2:1e:f7:ed:1a:
                    f4:09:9d:ff:7e:93:aa:f2:25:23:10:87:3e:09:dc:
                    92:54:ff:e7:3b:75:47:87:dc:31:92:a7:a6:b1:f9:
                    a4:b3:c2:11:cd:bc:4c:ad:e9:f6:13:fd:86:e8:89:
                    d8:7e:12:80:92:d9:d3:16:10:d1:62:cd:01:66:9e:
                    ff:a4:a0:c5:97:4d:17:78:9b:34:55:99:21:c3:d9:
                    cb:ed:d1:27:5a:bb:4d:24:a5:ea:29:7a:20:07:de:
                    28:2e:8b:52:e7:b7:63:b0:92:a3:1f:93:34:d7:be:
                    a6:35:ae:49:0e:64:5f:cd:5d:e3:46:e4:19:dd:08:
                    81:6c:78:06:7c:8f:91:b1:51:2f:34:72:de:ac:6d:
                    45:c4:b9:22:a2:be:91:85:3f:4d:98:f0:d6:4f:45:
                    f4:f0:77:d7:93:df:5d:07:1d:c9:db:d0:ed:8d:fb:
                    dd:16:87:c0:25:b1:11:7a:84:fc:47:b1:39:f5:d4:
                    b0:65:3e:ac:89:c7:3b:5a:aa:d7:01:3a:ad:93:9c:
                    df:83:0d:cc:5e:52:77:d6:84:2e:cf:89:27:30:83:
                    5e:aa:f0:60:78:65:4a:16:de:68:11:30:d7:d9:13:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8C:EA:42:E2:CB:BC:29:23:06:F8:A5:38:F9:77:4A:F9:C4:D5:CA
            X509v3 Authority Key Identifier:
                keyid:02:1E:94:35:77:65:B5:73:08:23:45:F9:DF:7A:A5:AC:B2:7A:8A:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/3230302e3138352e33322e302f31392d3234203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.185.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:0a:99:50:ff:ec:67:78:e5:50:25:6f:87:7f:2e:8b:c1:
         bd:2b:23:76:de:47:e2:5f:d3:5d:8c:23:a7:c6:a8:c4:fc:7b:
         b2:26:ec:e7:dc:4f:3d:22:18:59:e5:e8:64:4e:a6:44:1c:8a:
         85:6e:6f:69:5a:2e:89:8a:b1:c0:23:d0:d6:af:e5:9e:94:65:
         e3:da:8c:3f:4b:eb:d0:4b:40:5c:24:e0:17:b9:f9:03:08:6b:
         61:d6:2a:68:ad:d4:2e:f3:49:0d:0b:38:13:14:aa:c9:4b:e4:
         b0:1d:df:4e:56:41:e3:40:dd:1b:9e:20:22:1f:95:52:0e:93:
         8c:f8:78:26:b6:1a:32:9e:92:73:da:b4:55:60:13:f2:16:b7:
         0d:24:3c:8e:75:a1:19:3e:c5:5f:1f:33:b4:7c:03:02:99:c9:
         bb:83:28:5b:03:48:6e:18:cc:da:6a:75:67:3d:c2:e5:f8:a0:
         2c:76:09:92:90:e8:bd:57:2e:b3:ac:5a:d1:c7:77:a2:0e:99:
         6d:b0:73:73:dc:ca:8a:aa:4b:a9:c6:5a:45:20:81:d4:ab:45:
         43:89:37:11:c5:84:6e:ce:92:a7:45:33:50:f8:a1:cc:e8:d0:
         37:a5:62:10:ee:f1:ce:53:ef:a7:8a:87:57:6c:34:de:79:04:
         e5:a4:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:27 2025 by rpki-client