Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3230302e3139362e3133362e302f32332d3234203d3e203631373736.roa
File:                     3230302e3139362e3133362e302f32332d3234203d3e203631373736.roa (raw, json)
Hash identifier:          b1QH4AT6Sk1K5fyVVfgZsALUGimFH1ehbqV7vqWGCh4=
Subject key identifier:   1E:EA:F3:8F:BB:F1:EF:5C:14:43:84:DB:F3:DF:12:31:65:52:4D:BD
Certificate issuer:       /CN=B5D59FAAE8519CF77C8C40B65815F04384ACE81B
Certificate serial:       7F4ACEFDA5D9E62055F0E2B99E43CEC19127C38A
Authority key identifier: B5:D5:9F:AA:E8:51:9C:F7:7C:8C:40:B6:58:15:F0:43:84:AC:E8:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3230302e3139362e3133362e302f32332d3234203d3e203631373736.roa
Signing time:             Sat 04 Sep 2021 17:40:00 +0000
ROA not before:           Sat 04 Sep 2021 17:35:00 +0000
ROA not after:            Sat 03 Sep 2022 17:40:00 +0000
asID:                     61776
IP address blocks:        200.196.136.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4a:ce:fd:a5:d9:e6:20:55:f0:e2:b9:9e:43:ce:c1:91:27:c3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D59FAAE8519CF77C8C40B65815F04384ACE81B
        Validity
            Not Before: Sep  4 17:35:00 2021 GMT
            Not After : Sep  3 17:40:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:57:5d:84:61:b1:a9:ef:3c:7d:29:f8:6e:61:
                    ea:85:02:6f:04:e9:cb:40:4f:79:ad:0e:94:45:d6:
                    c2:8e:56:83:a9:d9:fb:89:7c:43:33:f7:1a:a2:d0:
                    ea:de:9c:72:65:96:23:48:b0:e2:cb:18:c4:4d:84:
                    d0:fc:10:de:85:1e:43:4e:ca:7c:83:71:c0:61:e4:
                    fa:a1:e9:f1:b1:81:22:fc:01:ad:a3:fa:c0:f2:4d:
                    17:38:7d:ff:5d:20:24:fc:7f:19:d3:12:1b:b1:e5:
                    ac:ac:4f:6e:14:89:ce:2e:4c:a9:5c:4e:21:aa:ce:
                    23:09:f9:76:15:a3:53:7b:9f:26:ea:79:4c:e1:37:
                    2d:b0:ac:85:88:fe:66:ad:71:3c:a4:84:3e:56:ce:
                    45:56:5d:0a:3f:ef:35:37:57:03:eb:ed:e1:a6:15:
                    8b:40:00:1d:33:3a:9f:cd:41:5c:7a:6c:64:c7:95:
                    f2:01:74:41:cf:9a:42:d2:5e:ab:da:c2:85:e4:ff:
                    ed:e6:a8:01:4e:63:33:ae:de:33:33:6c:42:fc:e8:
                    81:51:a3:69:8d:f5:fb:d3:22:76:a2:e2:37:a5:49:
                    99:3a:85:6f:63:db:2c:9b:b2:5b:31:1f:01:18:77:
                    b0:31:d3:09:bd:d3:a4:f4:62:96:b5:bc:f5:cf:0c:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EA:F3:8F:BB:F1:EF:5C:14:43:84:DB:F3:DF:12:31:65:52:4D:BD
            X509v3 Authority Key Identifier:
                keyid:B5:D5:9F:AA:E8:51:9C:F7:7C:8C:40:B6:58:15:F0:43:84:AC:E8:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3230302e3139362e3133362e302f32332d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:48:30:c7:ad:b1:31:bb:d0:58:61:ea:e1:70:eb:23:06:91:
         35:4d:2b:d9:f7:e4:01:aa:0e:ce:1f:7b:e7:5b:c2:66:19:13:
         2a:91:69:aa:55:72:a6:b4:5e:82:f1:2e:64:c1:06:2e:0a:5d:
         34:93:bd:a7:27:1f:49:14:d5:db:4f:c6:2c:fa:8a:ef:ba:e9:
         e4:6c:e7:ea:9a:99:96:2d:d8:d3:24:51:02:1d:0d:19:68:60:
         71:0e:08:42:6a:08:3f:5d:0a:aa:3c:d7:7e:82:9a:e8:cb:85:
         14:e0:92:88:cd:57:33:06:6f:1a:f9:ae:f2:ca:e4:60:c2:89:
         a5:08:a5:0a:ba:a8:19:92:16:4e:d9:33:72:e0:30:a6:25:f6:
         be:1c:31:c1:76:ef:1c:12:df:2d:8b:43:87:84:4e:4d:aa:0c:
         68:66:e2:63:f1:6c:ed:00:51:9b:78:1a:b4:7e:8b:c4:1d:53:
         7e:29:85:60:22:9e:66:7f:87:94:0d:81:2a:78:c4:c6:c3:68:
         ba:7c:03:f9:5b:f7:b3:93:a5:75:68:13:f8:b0:b1:ae:7c:dd:
         f8:56:f8:2e:ed:9b:b2:bc:69:e3:4f:c4:a6:df:5d:24:a0:f2:
         3f:e3:90:e4:a4:a2:0a:7f:fe:4c:f7:79:f9:49:c2:d4:22:41:
         64:4a:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:05:49 2025 by rpki-client