Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa
File:                     3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa (raw, json)
Hash identifier:          BxB6GE4kHFzE5wUoGDmDFcb0CWCHJJOVcEpZmmtAjxI=
Subject key identifier:   6C:4E:39:FE:F0:A8:BA:AB:D4:D3:73:B5:DF:72:B7:22:EC:5D:1B:43
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       264B380F70E21FE1E3AD131E818661F5EB649C04
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa
Signing time:             Thu 06 Mar 2025 03:59:06 +0000
ROA not before:           Thu 06 Mar 2025 03:54:06 +0000
ROA not after:            Thu 05 Mar 2026 03:59:06 +0000
asID:                     270683
IP address blocks:        200.187.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4b:38:0f:70:e2:1f:e1:e3:ad:13:1e:81:86:61:f5:eb:64:9c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Mar  6 03:54:06 2025 GMT
            Not After : Mar  5 03:59:06 2026 GMT
        Subject: CN=6C4E39FEF0A8BAABD4D373B5DF72B722EC5D1B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:ce:b4:30:dd:61:96:bc:3f:0b:69:51:58:
                    7f:92:f1:50:5e:9d:8d:dc:08:d7:5d:43:2e:86:d7:
                    9f:0d:7c:ab:00:36:c4:fb:f1:5c:92:63:83:4a:cb:
                    cb:20:82:07:f0:67:e3:78:38:41:05:6d:f7:dc:53:
                    2c:ca:d9:24:2b:cc:5e:5d:1f:46:a8:3b:d8:91:0b:
                    c8:3d:d1:91:19:fe:f7:7e:03:6a:5a:e5:ac:f9:f1:
                    90:41:eb:6d:fc:89:91:46:28:f9:80:5e:ac:02:ff:
                    3f:08:56:28:ce:08:58:ef:27:13:c9:85:42:4d:d3:
                    e4:af:16:b3:d5:ef:89:74:d2:38:61:22:93:59:f1:
                    ea:da:19:00:62:c7:fd:49:48:41:0e:83:ad:cc:eb:
                    5c:3f:ad:e0:0a:fc:3e:a6:71:ab:18:e9:94:24:88:
                    99:86:21:bb:c5:b0:09:64:ab:23:ce:13:e8:e2:14:
                    59:60:4b:1d:b6:ba:25:cd:42:09:83:bb:71:8d:b6:
                    56:59:8d:d9:1b:48:63:3b:7b:d9:74:85:26:04:9f:
                    c7:d1:13:5e:56:49:03:bb:c5:73:03:13:1c:a8:a8:
                    63:6c:a4:34:79:bc:d4:ff:be:7a:39:c1:04:75:6f:
                    49:3d:59:ff:63:9d:0c:02:87:71:77:f1:6e:ba:aa:
                    e5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4E:39:FE:F0:A8:BA:AB:D4:D3:73:B5:DF:72:B7:22:EC:5D:1B:43
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:09:4a:98:fd:ac:88:2f:ab:e0:72:c4:09:5f:6b:8e:15:98:
         5d:4e:04:a9:36:c5:60:39:95:ba:b8:3f:e7:fa:cd:e5:41:73:
         65:14:d1:ac:be:e6:3d:65:fc:f5:74:40:d2:2d:aa:0b:89:66:
         79:3d:42:a4:35:cc:8b:2a:63:ec:73:25:97:5e:27:c1:d6:d8:
         ba:02:b9:5b:cf:41:08:38:1f:61:32:b4:34:51:55:4e:8a:ea:
         f3:cd:29:88:12:81:32:e1:8d:13:41:29:49:42:46:32:8f:6b:
         0d:d5:8a:f4:d1:93:cc:0a:0c:d8:24:da:fa:98:91:0d:8e:a8:
         42:57:b2:ef:8b:4a:20:48:ef:d0:f9:44:85:a6:bb:55:30:76:
         ed:56:d0:e9:0d:26:2f:f5:ef:30:a8:80:d0:81:e7:aa:a4:2b:
         ac:6e:ec:3e:19:2d:fc:7b:8f:b0:29:ab:bc:c9:88:45:f5:09:
         bb:43:27:94:7a:ac:79:08:11:6a:f6:71:c8:23:96:b3:88:8d:
         5f:ca:57:57:b5:64:84:d7:f0:29:93:ec:eb:1b:2c:51:fc:c7:
         63:65:38:ce:aa:2a:b9:e9:f6:7a:1a:34:3f:5d:02:5e:6f:f1:
         c3:b9:41:ec:e3:31:8f:4d:98:e3:a0:76:a1:fe:44:fb:e0:2e:
         8e:fc:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:13:23 2025 by rpki-client