Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3235302e302f32342d3234203d3e203631363936.roa
File:                     3230312e3134302e3235302e302f32342d3234203d3e203631363936.roa (raw, json)
Hash identifier:          zYd18oRsJdEIx8NaaAKy+oXJbPSVIPrQuo0IK4Z9mHg=
Subject key identifier:   12:93:E6:E9:E6:70:BF:7A:53:D9:31:98:B1:53:F4:CE:E4:DB:06:0B
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       764D6EEFA000AE17F21DD4B588C69B95D5BF61B4
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3235302e302f32342d3234203d3e203631363936.roa
Signing time:             Fri 06 Oct 2023 19:47:04 +0000
ROA not before:           Fri 06 Oct 2023 19:42:04 +0000
ROA not after:            Fri 04 Oct 2024 19:47:04 +0000
asID:                     61696
IP address blocks:        201.140.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4d:6e:ef:a0:00:ae:17:f2:1d:d4:b5:88:c6:9b:95:d5:bf:61:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct  6 19:42:04 2023 GMT
            Not After : Oct  4 19:47:04 2024 GMT
        Subject: CN=1293E6E9E670BF7A53D93198B153F4CEE4DB060B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:91:de:19:66:50:03:25:6b:c9:4e:45:88:
                    a2:5d:11:8a:02:51:cc:58:52:12:3e:0c:ad:03:d6:
                    47:d6:d3:25:1a:60:15:12:5a:9f:26:d6:9f:db:4a:
                    c5:aa:5a:7c:9c:83:a3:fa:eb:85:29:7a:f5:a8:b0:
                    81:79:00:3f:89:e9:28:1d:5b:9e:1a:55:01:54:23:
                    9c:fd:2f:25:37:3f:4c:98:c6:81:5f:34:93:b1:91:
                    92:27:42:d6:e1:b8:32:d4:00:25:64:39:36:59:bf:
                    e8:9d:92:bb:86:02:da:75:3b:48:7b:ed:4a:1c:2f:
                    ec:91:2b:08:24:f4:da:67:d7:d8:9b:89:08:fd:e4:
                    bd:c7:42:1f:8d:13:4d:21:d4:ca:d8:a9:9d:86:61:
                    f1:02:06:fa:6e:8e:af:89:10:66:a0:0b:65:04:6d:
                    5f:52:03:b2:bc:82:29:ce:bf:71:9a:9c:9b:de:88:
                    7b:5f:57:86:04:66:85:63:2a:0a:0c:c0:79:61:2b:
                    45:24:0f:df:93:02:21:e7:84:a1:fd:c7:cb:d2:fb:
                    56:e8:1e:ec:8b:81:1c:10:0b:02:78:3d:9f:3b:5f:
                    34:42:83:ec:89:f0:70:7c:c8:fc:95:b9:60:66:6c:
                    70:3e:39:12:4c:3b:19:15:a2:c9:86:aa:53:8b:b5:
                    4f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:93:E6:E9:E6:70:BF:7A:53:D9:31:98:B1:53:F4:CE:E4:DB:06:0B
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3235302e302f32342d3234203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:6c:f2:3e:d2:8d:93:64:b6:ed:f0:8a:89:23:b3:7b:01:
         ec:32:24:88:32:63:3d:26:2a:44:9a:1c:32:12:3d:be:ea:88:
         74:8d:5f:45:c4:f0:33:74:b7:9a:f6:83:93:17:26:96:54:a6:
         72:b3:c7:d5:45:51:c9:26:56:59:95:48:ca:f5:d8:8f:dd:fd:
         d6:7b:31:c5:82:e1:46:dd:a0:84:da:c9:90:1c:ba:1a:05:df:
         c4:71:27:c1:0a:a3:e6:2d:db:36:7f:b2:45:5a:58:b3:96:4b:
         13:05:56:5d:cd:da:88:1b:12:3b:09:f2:00:36:1d:a2:08:6f:
         f5:92:b2:c1:e4:86:4a:16:d0:88:f9:e0:e3:fc:bc:39:a2:f1:
         f6:88:fd:69:d1:aa:23:4b:b2:8a:d7:96:01:09:39:9a:df:7c:
         dc:92:01:a9:49:7c:1e:2a:fb:2c:c9:9e:aa:ba:fc:c8:44:50:
         5a:5d:ec:77:f4:ab:6c:1b:7e:5e:a0:fb:39:c6:2e:05:f4:4a:
         08:7d:bd:0c:cb:89:04:1c:7e:c7:e5:5f:a8:99:c9:03:20:f4:
         ad:81:fc:ba:e0:24:51:70:3e:f5:66:cd:54:ae:9d:0d:43:6e:
         72:d5:dd:a2:b5:48:b0:c7:ec:24:05:d7:2d:eb:ee:69:4a:98:
         15:b5:c0:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdk1u76AArhfyHdS1iMabldW/YbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDMDJFOUJBODIwRDJFNzA2NTI4QkM4NzNDODA0NDNE
MDJDRTY2NzAeFw0yMzEwMDYxOTQyMDRaFw0yNDEwMDQxOTQ3MDRaMDMxMTAvBgNV
BAMTKDEyOTNFNkU5RTY3MEJGN0E1M0Q5MzE5OEIxNTNGNENFRTREQjA2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5ZHeGWZQAyVryU5FiKJdEYoC
UcxYUhI+DK0D1kfW0yUaYBUSWp8m1p/bSsWqWnycg6P664UpevWosIF5AD+J6Sgd
W54aVQFUI5z9LyU3P0yYxoFfNJOxkZInQtbhuDLUACVkOTZZv+idkruGAtp1O0h7
7UocL+yRKwgk9Npn19ibiQj95L3HQh+NE00h1MrYqZ2GYfECBvpujq+JEGagC2UE
bV9SA7K8ginOv3GanJveiHtfV4YEZoVjKgoMwHlhK0UkD9+TAiHnhKH9x8vS+1bo
HuyLgRwQCwJ4PZ87XzRCg+yJ8HB8yPyVuWBmbHA+ORJMOxkVosmGqlOLtU9FAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEpPm6eZwv3pT2TGYsVP0zuTbBgswHwYDVR0j
BBgwFoAUw8Aum6gg0ucGUovIc8gEQ9As5mcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX
c3gvMC9DM0MwMkU5QkE4MjBEMkU3MDY1MjhCQzg3M0M4MDQ0M0QwMkNFNjY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzQzAyRTlCQTgyMEQyRTcw
NjUyOEJDODczQzgwNDQzRDAyQ0U2NjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJYRWlSSk5VZVV3dmVjWGI2TWh6TURpTUpVb1lhZXI4N2ozcXljalRjV3N4LzAv
MzIzMDMxMmUzMTM0MzAyZTMyMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJjPowDQYJKoZIhvcNAQELBQADggEBAIH6bPI+
0o2TZLbt8IqJI7N7AewyJIgyYz0mKkSaHDISPb7qiHSNX0XE8DN0t5r2g5MXJpZU
pnKzx9VFUckmVlmVSMr12I/d/dZ7McWC4UbdoITayZAcuhoF38RxJ8EKo+Yt2zZ/
skVaWLOWSxMFVl3N2ogbEjsJ8gA2HaIIb/WSssHkhkoW0Ij54OP8vDmi8faI/WnR
qiNLsorXlgEJOZrffNySAalJfB4q+yzJnqq6/MhEUFpd7Hf0q2wbfl6g+znGLgX0
Sgh9vQzLiQQcfsflX6iZyQMg9K2B/LrgJFFwPvVmzVSunQ1DbnLV3aK1SLDH7CQF
1y3r7mlKmBW1wI4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:23 2025 by rpki-client