Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa
File:                     3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (raw, json)
Hash identifier:          CpsEuj4SUzytQdND/kcONT9lDWdik50S8GD3+C6aB/w=
Subject key identifier:   0A:B1:83:1D:AD:EB:04:A8:A1:6F:0F:A4:70:C0:53:3F:EB:C0:EC:6D
Certificate issuer:       /CN=99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76
Certificate serial:       67DE96BE244EA2F7E691B21DDB80334CBB0B36A7
Authority key identifier: 99:DB:82:7F:B2:B7:D3:2F:4F:4C:E9:31:CF:63:CA:A5:C6:B2:FB:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     267492
IP address blocks:        201.182.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:de:96:be:24:4e:a2:f7:e6:91:b2:1d:db:80:33:4c:bb:0b:36:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4a:07:1a:b8:c6:88:4a:77:37:9b:9a:98:e9:
                    86:a1:7c:76:53:f2:4b:7c:a7:6e:fe:89:53:db:eb:
                    db:2c:db:c0:69:4c:e0:19:18:7c:07:1b:62:bf:7f:
                    3c:03:57:47:f4:da:89:21:eb:ac:11:5e:7f:84:51:
                    70:09:f3:56:06:b3:3d:57:a8:e7:af:66:eb:83:52:
                    1f:61:2d:9c:38:d6:8f:b9:03:48:f1:93:fc:5d:29:
                    21:e0:04:3c:24:eb:a3:af:ba:61:31:8b:aa:ad:33:
                    d8:cf:a5:1d:e0:f7:ea:6c:4e:80:92:47:9f:95:14:
                    02:2b:f7:14:0d:86:ad:15:10:1f:c1:3f:25:7e:2c:
                    24:e7:a4:7c:25:18:a1:c3:52:13:63:db:11:2e:4f:
                    ea:48:55:ac:7f:e5:19:ea:9a:fd:e4:f4:e3:0a:75:
                    41:3c:87:74:f6:1e:c6:b0:4f:0b:b9:f5:8d:cb:4f:
                    6b:33:c5:e5:c2:76:3c:5e:ae:7f:7b:60:fe:f3:71:
                    89:05:d9:34:54:0b:6c:87:2c:0b:7c:23:30:65:6e:
                    7b:63:15:c4:36:21:09:43:82:55:d0:15:03:73:c6:
                    97:be:74:26:54:e9:91:a1:3a:ef:03:88:5a:48:c5:
                    3d:ad:89:76:e5:7a:d5:4b:83:21:57:33:59:23:5c:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B1:83:1D:AD:EB:04:A8:A1:6F:0F:A4:70:C0:53:3F:EB:C0:EC:6D
            X509v3 Authority Key Identifier:
                keyid:99:DB:82:7F:B2:B7:D3:2F:4F:4C:E9:31:CF:63:CA:A5:C6:B2:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:13:c9:72:22:23:8b:b3:74:a1:b1:4e:99:11:45:a1:e0:b5:
         49:85:33:ac:1d:28:a5:dd:60:a2:8d:db:98:8f:ab:b5:d8:26:
         58:48:6c:3c:96:c4:26:2f:0d:69:de:bd:24:b2:1d:79:3f:41:
         08:84:25:89:b3:55:c7:11:41:f4:13:bd:d2:f4:ae:7b:00:2f:
         4e:a2:69:c7:7d:47:5c:78:6d:8d:c3:9a:2e:03:19:4f:7f:7b:
         3d:13:ee:2e:1d:2f:ca:32:bd:24:0b:8d:8b:7c:f0:8c:7a:60:
         c7:6b:32:f7:6a:f9:a2:05:d3:87:37:53:ff:f2:ce:d1:77:10:
         36:90:00:20:02:01:c8:86:57:2b:12:9d:fd:fd:59:e6:32:8a:
         47:a4:c7:80:2e:c6:49:82:d9:a8:28:71:3c:02:5a:16:d8:01:
         32:e8:d2:02:7a:2c:a9:e1:68:da:b7:39:1e:af:3d:8b:c7:0d:
         cf:68:e8:07:b2:f5:56:03:2e:7d:a5:96:a1:d7:ef:78:bb:30:
         57:62:f9:6f:3a:64:99:67:98:2b:47:8e:bd:9d:fe:7c:65:08:
         92:3a:4e:fc:90:5d:fa:4b:71:24:3b:23:3d:f8:cb:70:58:7a:
         b1:e7:04:96:d5:e0:d9:60:86:3c:f7:95:fd:94:95:a2:4a:57:
         4c:f5:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:56:59 2025 by rpki-client