Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa
File:                     3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa (raw, json)
Hash identifier:          XWtX0N0waJO936oRss9vOAe8JpJ1jjtTbbOmSjogQPM=
Subject key identifier:   76:2D:4C:7D:48:B3:36:59:CE:9B:90:AE:85:67:3C:46:6F:C9:75:97
Certificate issuer:       /CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Certificate serial:       3CE05B145F74CCFA278C41E08BC0D02A19AB7E09
Authority key identifier: 20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa
Signing time:             Sat 21 Dec 2024 00:28:42 +0000
ROA not before:           Sat 21 Dec 2024 00:23:42 +0000
ROA not after:            Sat 20 Dec 2025 00:28:42 +0000
asID:                     11097
IP address blocks:        200.202.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e0:5b:14:5f:74:cc:fa:27:8c:41:e0:8b:c0:d0:2a:19:ab:7e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202FA7CA4FB68A7F044DBC88811484C065334A74
        Validity
            Not Before: Dec 21 00:23:42 2024 GMT
            Not After : Dec 20 00:28:42 2025 GMT
        Subject: CN=762D4C7D48B33659CE9B90AE85673C466FC97597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:f9:ea:41:85:d0:0d:6c:d4:7c:d4:d1:34:
                    0b:5e:cd:6f:51:67:77:3c:44:8b:c6:e2:31:69:97:
                    43:58:73:bd:2a:23:d2:e1:3e:1f:54:42:6d:0b:e9:
                    df:a9:c4:19:4f:eb:45:cb:ca:cf:23:06:56:aa:1f:
                    d4:b0:45:b9:24:82:60:9b:74:39:1e:27:f5:92:f4:
                    74:6a:72:87:a7:7a:54:36:ba:83:f9:57:12:22:7e:
                    37:ce:e3:34:90:43:6b:ff:45:0f:e0:79:bb:54:99:
                    38:14:42:36:ec:3f:30:d1:c6:6f:75:5d:c6:3b:36:
                    de:e2:d3:f8:ff:b2:a4:20:1a:a3:d4:84:f5:d5:94:
                    c3:92:93:9f:70:90:f0:33:ac:1e:bb:0e:28:0d:23:
                    08:a6:42:e9:85:83:d5:ea:40:9f:5e:33:25:51:d7:
                    f1:02:b4:e6:50:7e:33:ca:da:90:fe:c5:d2:20:9e:
                    ae:03:8d:30:b5:7d:56:69:f3:72:f6:d8:c8:fd:b5:
                    69:d8:54:99:7b:2b:3d:33:66:7a:31:ce:df:ff:cc:
                    3f:c2:b4:76:15:53:b3:59:19:c7:d0:c0:28:4c:cb:
                    be:ac:d7:68:c2:63:7e:ec:90:0b:1e:8f:32:32:b9:
                    84:e3:77:ea:38:70:a7:44:99:db:79:ed:f9:25:0f:
                    1d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2D:4C:7D:48:B3:36:59:CE:9B:90:AE:85:67:3C:46:6F:C9:75:97
            X509v3 Authority Key Identifier:
                keyid:20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/202FA7CA4FB68A7F044DBC88811484C065334A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:65:bf:23:a2:da:1e:94:3f:b5:59:60:65:e7:36:28:58:
         d9:00:c4:44:6a:c0:25:95:38:31:d1:aa:86:7e:51:5f:2f:fa:
         de:8d:ec:93:2d:40:69:8a:41:3e:b6:8b:a6:30:d6:5e:26:de:
         d2:65:93:5e:a3:64:31:03:93:dc:4b:19:a8:60:5c:e6:33:87:
         41:13:e3:98:6a:ff:fc:a1:c3:18:62:a2:fd:58:f6:a1:e9:f2:
         ca:e9:01:b6:68:a1:74:5d:9d:2d:39:72:d7:81:91:e8:c9:48:
         b5:07:c5:71:e9:ba:e1:2e:4b:e4:db:dd:94:cf:46:e7:cc:69:
         84:c3:4e:f5:90:5a:92:f4:16:b8:92:52:75:d3:12:41:fe:fe:
         8f:4b:e5:9f:fd:5d:41:11:78:15:46:ad:97:97:f4:d4:10:0d:
         09:ce:69:6b:59:d7:2a:7a:e1:f8:a3:1b:fc:60:80:0c:42:65:
         ac:5e:04:78:16:56:1d:63:7e:fc:28:dd:68:c2:c8:35:21:65:
         14:b1:8d:db:70:d0:f6:10:e7:40:70:e1:10:ff:6c:12:a4:c4:
         1e:dd:c7:90:1c:cf:03:b2:da:a0:3c:df:50:61:f2:f6:9a:3d:
         07:7d:5c:b2:22:20:e1:a8:f3:e6:17:ae:c3:53:e3:50:bb:93:
         e8:f9:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:34:03 2025 by rpki-client