Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          0HRNCM3/dohHyKXp8u6yKlM4nQ+wWCK7il9CCsg6dMI=
Subject key identifier:   AE:26:67:AC:4A:B6:82:73:52:A0:B1:04:2D:BD:77:D9:BD:E4:A9:88
Certificate issuer:       /CN=B5D59FAAE8519CF77C8C40B65815F04384ACE81B
Certificate serial:       54552A3A8975924C37A71B3877B799788FB9367F
Authority key identifier: B5:D5:9F:AA:E8:51:9C:F7:7C:8C:40:B6:58:15:F0:43:84:AC:E8:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
Signing time:             Sat 04 Sep 2021 18:04:00 +0000
ROA not before:           Sat 04 Sep 2021 17:59:00 +0000
ROA not after:            Sat 03 Sep 2022 18:04:00 +0000
asID:                     61776
IP address blocks:        200.196.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:55:2a:3a:89:75:92:4c:37:a7:1b:38:77:b7:99:78:8f:b9:36:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D59FAAE8519CF77C8C40B65815F04384ACE81B
        Validity
            Not Before: Sep  4 17:59:00 2021 GMT
            Not After : Sep  3 18:04:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:7f:0b:5e:ea:db:ed:a4:d2:43:db:03:89:
                    5b:a7:51:c1:f4:ea:a7:58:ed:44:b7:0d:1a:6b:15:
                    5e:4c:74:38:56:4b:78:fc:82:bc:cc:03:b5:40:88:
                    27:db:4e:15:70:2f:f2:9a:fd:0d:dc:a8:98:24:a9:
                    42:32:79:49:b1:85:53:e4:0c:1f:8e:ad:e6:d1:d1:
                    51:d1:3b:ce:01:de:91:0d:37:47:73:42:6c:d9:e7:
                    84:74:4d:b3:df:de:84:af:03:a7:64:c7:e8:46:72:
                    99:03:cb:43:16:61:47:0f:da:00:4b:d2:74:69:9b:
                    ad:c0:5d:82:a0:28:4c:7b:0a:19:89:00:36:c1:5f:
                    89:bd:63:0b:80:cf:3d:f2:af:1e:b5:c5:ac:e0:6d:
                    a9:26:1c:81:62:82:95:62:7b:af:c8:04:4e:ec:d1:
                    a7:11:eb:89:5a:84:cc:20:84:54:88:e3:80:7d:d1:
                    bf:95:2f:2e:26:f4:67:2c:e4:89:b7:81:e1:61:5c:
                    e3:6c:ea:a1:de:47:fd:af:0d:42:44:24:d5:db:04:
                    ad:01:6c:c5:46:30:0d:73:f3:ed:24:dc:02:94:3b:
                    cb:54:c2:c6:1e:cd:ab:4a:37:ba:e3:15:ee:7c:c5:
                    65:51:de:c2:36:01:e8:30:ad:d4:6d:34:65:b2:77:
                    a0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:26:67:AC:4A:B6:82:73:52:A0:B1:04:2D:BD:77:D9:BD:E4:A9:88
            X509v3 Authority Key Identifier:
                keyid:B5:D5:9F:AA:E8:51:9C:F7:7C:8C:40:B6:58:15:F0:43:84:AC:E8:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:ad:44:0b:8c:0b:8d:ff:43:ab:e1:be:ff:5d:fc:29:84:
         38:80:4a:29:ad:5c:bc:0d:b7:e5:8e:17:99:d2:e9:05:10:5d:
         08:d5:bb:30:26:24:33:30:ff:d0:3f:d6:04:0b:c9:70:d0:b5:
         2d:9f:a8:cd:74:3a:c5:ca:f8:37:7f:59:4a:bb:4c:37:8d:7d:
         33:63:67:0f:85:ba:e4:b5:06:18:1a:8c:ca:1f:73:23:e2:66:
         8c:7a:a7:48:d7:a5:95:a5:27:ba:f2:5b:36:58:28:1d:45:ca:
         c1:9c:25:97:f0:6c:d0:c6:d6:40:f3:f4:92:9a:51:5d:a1:e1:
         ac:c5:57:3d:e1:76:7b:71:92:f4:6f:c7:a6:c5:32:74:f0:d3:
         d5:83:b3:42:da:ab:2f:44:60:17:6c:8f:33:6a:fb:ef:53:76:
         c4:d8:97:49:4e:04:89:98:51:e1:0c:ed:fd:ec:d4:db:d3:73:
         5b:de:1c:d5:20:16:9f:82:6c:15:40:31:16:b4:88:58:be:aa:
         c6:53:41:cd:b5:54:68:17:8d:81:2c:6b:f6:20:f7:9c:a0:50:
         16:f5:17:38:58:c6:19:41:0d:48:f3:be:6d:f4:e6:9f:33:16:
         aa:42:89:d8:59:52:b7:5e:55:32:e9:84:ec:77:b9:54:42:cc:
         2e:81:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:10 2025 by rpki-client