Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa
File:                     3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa (raw, json)
Hash identifier:          ikoTrncPvi/bKN0bJBVTO7w17MlI79Y7SyNCbrTGDU4=
Subject key identifier:   1C:DF:47:9B:1C:CF:0F:82:88:C3:51:B4:35:8A:6C:6D:84:E6:60:D0
Certificate issuer:       /CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
Certificate serial:       2BB89187BF3148D6942295E54392D1A74DD88D48
Authority key identifier: B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa
Signing time:             Sat 04 Apr 2026 17:26:42 +0000
ROA not before:           Sat 04 Apr 2026 17:21:42 +0000
ROA not after:            Sat 03 Apr 2027 17:26:42 +0000
asID:                     28584
IP address blocks:        200.159.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b8:91:87:bf:31:48:d6:94:22:95:e5:43:92:d1:a7:4d:d8:8d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
        Validity
            Not Before: Apr  4 17:21:42 2026 GMT
            Not After : Apr  3 17:26:42 2027 GMT
        Subject: CN=1CDF479B1CCF0F8288C351B4358A6C6D84E660D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:94:29:2d:e4:9f:74:b4:0b:fe:69:45:e3:
                    fc:39:d7:4a:89:36:1a:8e:0f:d4:73:84:36:06:62:
                    ee:f9:06:f2:dc:e4:26:71:52:33:38:b8:a6:ab:93:
                    37:be:6f:37:43:f9:8a:fc:ca:ff:a5:16:fc:a7:4e:
                    83:4f:ff:3a:d7:e0:67:67:75:8a:9e:1e:1d:05:a2:
                    56:bc:06:2a:46:25:ab:f9:c9:a5:e6:96:15:a8:c2:
                    93:46:a2:6f:24:dc:c7:9f:0f:8b:11:11:40:44:d9:
                    31:4f:45:b5:1b:37:8b:e0:53:75:9e:11:a4:81:52:
                    fd:31:4d:68:13:4e:b5:46:f2:03:2b:3b:17:36:66:
                    d5:94:e6:f0:e7:11:2f:a1:86:f6:f5:54:d7:71:54:
                    09:79:44:62:08:7f:ed:78:d4:3a:93:30:5d:23:f9:
                    55:35:31:a0:1b:f5:a5:dc:7c:2c:2f:03:92:c0:9a:
                    84:cc:c5:1a:db:43:f3:53:ad:08:3c:a8:b0:f6:f9:
                    11:95:01:03:41:c9:9d:31:1a:54:25:5b:d8:01:00:
                    2f:6e:b2:03:a6:61:b4:63:67:41:60:c9:12:8f:c9:
                    40:6e:61:5a:45:5f:ed:55:5e:0a:ea:47:40:69:75:
                    00:e3:b4:89:fb:23:ed:2a:69:1a:bc:ee:55:c8:07:
                    fd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DF:47:9B:1C:CF:0F:82:88:C3:51:B4:35:8A:6C:6D:84:E6:60:D0
            X509v3 Authority Key Identifier:
                keyid:B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.159.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b7:34:fe:8b:32:cd:cb:43:3a:39:7b:19:25:32:95:bf:35:db:
         57:3d:8e:d7:0b:3d:e2:a3:19:6c:e1:37:ca:59:2b:33:81:93:
         8d:0b:99:11:a5:2d:ec:fb:1d:9a:00:db:9a:78:b1:b4:78:25:
         49:18:b7:93:99:a5:22:77:ad:1f:b5:81:b5:3b:1e:f4:a0:c5:
         d2:d4:7a:3f:c6:ad:17:8a:e0:0b:9b:d9:4d:13:48:26:1f:d2:
         fc:74:27:2a:05:26:f4:9e:4b:d9:6e:ef:8e:44:ba:b6:4d:d7:
         ed:ae:e9:a2:8e:dc:68:e6:76:44:cf:d1:cf:78:bb:2c:c4:b0:
         b7:ed:3d:d1:34:83:6f:53:a7:46:0e:b4:8b:7e:1b:19:ae:ca:
         26:2b:9a:79:84:9d:6d:80:0b:af:b0:55:ba:9b:e8:59:80:a4:
         cc:eb:0c:f5:da:97:54:52:0e:63:6f:7c:d5:eb:24:fe:da:25:
         d4:fa:de:0c:1b:08:6a:77:e7:25:43:8b:fd:b6:d8:03:92:57:
         63:5c:71:f2:7e:2d:84:1e:7f:92:a6:3c:18:d7:39:a7:df:ea:
         ce:bd:be:a6:3c:89:97:6e:e3:f8:66:35:b3:b0:df:29:27:70:
         8e:c3:00:c5:0a:3b:0e:98:fb:8f:ae:61:af:9f:a0:c7:22:85:
         cd:70:74:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUK7iRh78xSNaUIpXlQ5LRp03YjUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFQzdGNUY3RDZCNjkwRjNCNzI0QkMyQjA2M0MxN0Yy
RDU0MTlCOTAeFw0yNjA0MDQxNzIxNDJaFw0yNzA0MDMxNzI2NDJaMDMxMTAvBgNV
BAMTKDFDREY0NzlCMUNDRjBGODI4OEMzNTFCNDM1OEE2QzZEODRFNjYwRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoApQpLeSfdLQL/mlF4/w510qJ
NhqOD9RzhDYGYu75BvLc5CZxUjM4uKarkze+bzdD+Yr8yv+lFvynToNP/zrX4Gdn
dYqeHh0Fola8BipGJav5yaXmlhWowpNGom8k3MefD4sREUBE2TFPRbUbN4vgU3We
EaSBUv0xTWgTTrVG8gMrOxc2ZtWU5vDnES+hhvb1VNdxVAl5RGIIf+141DqTMF0j
+VU1MaAb9aXcfCwvA5LAmoTMxRrbQ/NTrQg8qLD2+RGVAQNByZ0xGlQlW9gBAC9u
sgOmYbRjZ0FgyRKPyUBuYVpFX+1VXgrqR0BpdQDjtIn7I+0qaRq87lXIB/0zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHN9HmxzPD4KIw1G0NYpsbYTmYNAwHwYDVR0j
BBgwFoAUs+x/X31raQ87ckvCsGPBfy1UGbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFtVWMycnQ4RVVTbkRRb1JyWWdnUVJNNExWbW5kM2dmTnRVc2dwMVhR
a1AvMC9CM0VDN0Y1RjdENkI2OTBGM0I3MjRCQzJCMDYzQzE3RjJENTQxOUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRUM3RjVGN0Q2QjY5MEYz
QjcyNEJDMkIwNjNDMTdGMkQ1NDE5QjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBbVVjMnJ0OEVVU25EUW9ScllnZ1FSTTRMVm1uZDNnZk50VXNncDFYUWtQLzAv
MzIzMDMwMmUzMTM1MzkyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATIn6AwDQYJKoZIhvcNAQELBQADggEBALc0/osy
zctDOjl7GSUylb8121c9jtcLPeKjGWzhN8pZKzOBk40LmRGlLez7HZoA25p4sbR4
JUkYt5OZpSJ3rR+1gbU7HvSgxdLUej/GrReK4Aub2U0TSCYf0vx0JyoFJvSeS9lu
745EurZN1+2u6aKO3GjmdkTP0c94uyzEsLftPdE0g29Tp0YOtIt+GxmuyiYrmnmE
nW2AC6+wVbqb6FmApMzrDPXal1RSDmNvfNXrJP7aJdT63gwbCGp35yVDi/222AOS
V2NccfJ+LYQef5KmPBjXOaff6s69vqY8iZdu4/hmNbOw3ykncI7DAMUKOw6Y+4+u
Ya+foMcihc1wdBs=
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:36:50 2026 by rpki-client