Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3238203d3e20323730333035.roa
File:                     3230312e3231362e3132302e302f32342d3238203d3e20323730333035.roa (raw, json)
Hash identifier:          iXS/M14CRyoz+UWKLN9DNsWtvohSy8bBpWm+mLierT4=
Subject key identifier:   A7:8B:5C:EC:91:54:F8:BB:FC:F0:F4:B4:C3:E4:43:B0:0F:7A:B0:A9
Certificate issuer:       /CN=A72E802031F795155D91B28F1CAD336A9A80E192
Certificate serial:       22D77380429EC299B94DA075BE5F0889D7074F15
Authority key identifier: A7:2E:80:20:31:F7:95:15:5D:91:B2:8F:1C:AD:33:6A:9A:80:E1:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A72E802031F795155D91B28F1CAD336A9A80E192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3238203d3e20323730333035.roa
Signing time:             Tue 01 Aug 2023 17:26:27 +0000
ROA not before:           Tue 01 Aug 2023 17:21:27 +0000
ROA not after:            Tue 30 Jul 2024 17:26:27 +0000
asID:                     270305
IP address blocks:        201.216.120.0/24 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d7:73:80:42:9e:c2:99:b9:4d:a0:75:be:5f:08:89:d7:07:4f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A72E802031F795155D91B28F1CAD336A9A80E192
        Validity
            Not Before: Aug  1 17:21:27 2023 GMT
            Not After : Jul 30 17:26:27 2024 GMT
        Subject: CN=A78B5CEC9154F8BBFCF0F4B4C3E443B00F7AB0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:28:26:a6:3d:e3:7d:4b:ba:18:40:9d:b7:
                    97:00:a9:0d:d5:17:ce:a1:fe:22:12:1f:57:9c:53:
                    23:c1:ae:59:67:d8:8f:f5:30:e6:ef:48:eb:66:e6:
                    9d:12:45:fe:2a:c7:ed:a3:77:30:f3:1f:83:a1:f4:
                    0b:47:b8:c4:b4:2a:f9:c6:e6:e7:2c:05:91:c1:37:
                    f7:bb:75:11:ce:2b:28:67:9a:17:68:38:61:9f:00:
                    5c:3c:d3:1e:f1:3d:70:38:d0:37:6b:ba:ba:b5:a0:
                    33:42:40:57:d9:0e:35:5a:16:ca:db:1f:d9:d3:41:
                    eb:a6:f0:76:14:51:e8:15:16:19:27:0b:16:6d:50:
                    a5:1a:e8:a8:3a:b3:b9:29:3e:44:60:42:5d:d1:23:
                    1f:db:21:08:ea:9c:51:90:7f:e3:fb:93:cc:92:6e:
                    57:bf:0a:b5:1c:1c:12:af:15:b2:bf:fe:f9:c7:83:
                    ef:2a:40:08:3b:b0:82:0a:ce:88:de:b8:43:90:0a:
                    73:f9:0b:9c:63:a2:ec:9a:10:33:c7:18:cc:d4:97:
                    a4:05:ac:6b:f1:64:91:8f:5e:50:3d:3d:80:56:85:
                    90:88:17:40:6e:51:40:07:26:4f:50:e0:be:4d:4d:
                    22:19:8b:07:a0:71:f7:0d:7a:01:c0:cb:54:bf:9d:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8B:5C:EC:91:54:F8:BB:FC:F0:F4:B4:C3:E4:43:B0:0F:7A:B0:A9
            X509v3 Authority Key Identifier:
                keyid:A7:2E:80:20:31:F7:95:15:5D:91:B2:8F:1C:AD:33:6A:9A:80:E1:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/A72E802031F795155D91B28F1CAD336A9A80E192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A72E802031F795155D91B28F1CAD336A9A80E192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3238203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:a3:4e:b0:93:04:10:80:93:2b:91:96:60:21:9e:92:be:8e:
         1f:37:0c:6f:90:d4:09:33:09:7f:b3:79:ca:9a:d8:81:af:7a:
         46:20:0d:9d:da:21:95:6c:aa:5a:72:31:02:9d:ba:95:db:5c:
         e7:7e:be:d9:53:9f:9b:f1:fe:1e:e5:8c:f0:a2:b1:9c:7a:a3:
         57:bd:b3:51:53:d6:66:d6:a2:f9:8d:98:5d:ab:db:ce:48:f7:
         6b:e4:4d:57:85:ec:93:49:c7:85:13:6f:98:c1:aa:cc:06:17:
         c8:a6:99:9a:0d:ba:11:f4:00:a4:04:20:22:64:97:d7:00:69:
         5a:15:2e:ac:35:79:32:59:51:67:5a:de:6f:a9:b9:99:01:0e:
         df:85:1e:e6:ad:0c:23:04:01:72:a9:ae:30:fc:39:7c:68:1a:
         65:f4:b1:df:c6:e6:ed:40:3d:cc:c1:0c:9f:b2:eb:c9:32:c6:
         d5:b9:c9:6f:83:1d:82:22:c0:7b:28:20:f6:4c:5e:65:44:bc:
         76:72:f0:49:05:c1:9f:a5:1c:bf:06:73:56:6d:18:fd:8b:55:
         91:2d:2a:b4:8b:77:97:9f:65:c9:61:86:7c:a2:34:47:ca:32:
         20:b7:c7:7e:b7:46:c2:fd:6c:de:51:a1:0a:57:74:0b:65:62:
         82:17:f3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:16:47 2025 by rpki-client