Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          hoh5tJDAZ3EPIgJxkbPYWRv0Ebn4qxQDDpyT/4+bLe0=
Subject key identifier:   49:2D:9E:CE:35:DD:B4:F0:E6:83:C7:1B:DB:74:45:6A:56:49:2B:A9
Certificate issuer:       /CN=B5D59FAAE8519CF77C8C40B65815F04384ACE81B
Certificate serial:       3055B3291B83BF3F5777AB9346755DE6CAC5171A
Authority key identifier: B5:D5:9F:AA:E8:51:9C:F7:7C:8C:40:B6:58:15:F0:43:84:AC:E8:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa
Signing time:             Sat 04 Sep 2021 18:04:00 +0000
ROA not before:           Sat 04 Sep 2021 17:59:00 +0000
ROA not after:            Sat 03 Sep 2022 18:04:00 +0000
asID:                     61776
IP address blocks:        200.196.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:55:b3:29:1b:83:bf:3f:57:77:ab:93:46:75:5d:e6:ca:c5:17:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D59FAAE8519CF77C8C40B65815F04384ACE81B
        Validity
            Not Before: Sep  4 17:59:00 2021 GMT
            Not After : Sep  3 18:04:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8a:50:0b:86:c2:3c:5e:ef:75:2d:41:35:17:
                    eb:0f:49:38:c5:39:a3:3f:3c:76:23:99:4c:a8:3c:
                    d7:88:b6:df:50:16:50:49:b4:15:b7:71:66:ce:06:
                    16:f0:41:3a:cd:dc:ad:d8:3c:b3:b2:61:62:8a:a7:
                    1e:0c:a0:d9:40:31:63:bb:0d:1f:15:af:6c:d8:61:
                    ba:33:4e:87:ab:8d:14:d0:d3:42:8a:b2:c6:ef:20:
                    bc:9d:28:52:2a:91:18:57:e2:b4:75:7b:4b:b5:da:
                    5a:d4:4b:37:1c:75:f9:91:3d:15:ff:56:c8:89:f0:
                    67:ac:9d:22:c6:82:ce:ce:21:e5:48:c6:d3:f0:ef:
                    28:7d:df:eb:f1:75:e2:ef:c1:85:58:fd:89:4f:6f:
                    29:b5:34:7d:cd:ef:d6:dd:2b:a7:88:2e:ae:a1:b6:
                    46:77:38:2c:c1:7a:1d:67:26:dc:ff:72:5b:f1:e0:
                    5e:b9:c6:c8:43:16:1d:54:3b:89:9a:ee:5c:fe:a2:
                    3c:47:ce:6e:6e:84:d4:2b:61:af:d7:7f:86:bc:bb:
                    99:08:0c:b9:b1:c5:cd:98:94:09:7a:3d:e8:80:5d:
                    a6:7f:24:bd:59:88:3e:b4:81:6a:09:e2:41:45:49:
                    8c:3a:f3:6c:c3:32:01:42:78:2d:74:23:40:19:8a:
                    f1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2D:9E:CE:35:DD:B4:F0:E6:83:C7:1B:DB:74:45:6A:56:49:2B:A9
            X509v3 Authority Key Identifier:
                keyid:B5:D5:9F:AA:E8:51:9C:F7:7C:8C:40:B6:58:15:F0:43:84:AC:E8:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:7f:14:cc:33:bc:1d:5f:a0:53:a1:04:2a:58:00:d7:31:6d:
         eb:0f:4f:37:52:1b:07:ae:da:f9:b1:30:e7:67:6a:9c:f9:79:
         d1:71:6e:f1:62:6c:4d:80:d5:d4:53:d8:60:cd:9e:d9:d0:05:
         3f:78:8a:a8:e5:48:6d:cc:be:49:52:9a:1c:8d:6f:cd:c1:0a:
         66:6e:96:1c:c3:c2:6e:2d:87:27:1a:d0:a5:84:d4:7e:05:cd:
         ed:b7:6e:d9:a0:f5:d9:27:5e:22:62:66:b9:19:c0:f6:28:c6:
         15:68:11:41:9c:f2:7c:54:f6:c4:19:29:03:6f:1f:ec:79:a2:
         71:9e:a1:aa:12:48:08:2e:fa:25:c1:e6:a9:82:30:65:59:ad:
         a4:31:35:d7:80:15:5e:0a:ea:a2:d7:3d:9b:af:1d:50:89:d1:
         a1:70:2f:fd:c1:35:e9:53:ba:84:25:90:a3:f4:a1:2b:af:10:
         1b:7d:30:85:c1:c6:04:a3:75:44:39:33:98:36:62:84:01:ac:
         b3:a4:bd:92:3d:77:fa:55:bc:33:8e:75:49:0b:18:3e:b0:e2:
         c9:f2:6b:d4:73:24:92:41:22:d0:a4:6c:ba:b2:ab:59:8e:e6:
         57:b4:0e:5f:75:a4:47:07:12:42:e0:1d:91:5d:f0:64:58:b1:
         7b:5e:7c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:13 2025 by rpki-client