Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32312d3231203d3e20323633323633.roa
File:                     3230302e33332e3132382e302f32312d3231203d3e20323633323633.roa (raw, json)
Hash identifier:          ZCvt0wxI8Thdo2aHkZ/lZKdTtvV5H3LTWujx0m9VNUI=
Subject key identifier:   38:74:FA:4E:3A:59:F1:5F:6E:FD:42:F6:A2:74:B3:98:3A:11:1F:B4
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       213A91790AB5653FD6DD324CB0A7E03F025956A1
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32312d3231203d3e20323633323633.roa
Signing time:             Thu 06 Mar 2025 08:00:30 +0000
ROA not before:           Thu 06 Mar 2025 07:55:30 +0000
ROA not after:            Thu 05 Mar 2026 08:00:30 +0000
asID:                     263263
IP address blocks:        200.33.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3a:91:79:0a:b5:65:3f:d6:dd:32:4c:b0:a7:e0:3f:02:59:56:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Mar  6 07:55:30 2025 GMT
            Not After : Mar  5 08:00:30 2026 GMT
        Subject: CN=3874FA4E3A59F15F6EFD42F6A274B3983A111FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:28:b6:1e:10:0f:fe:79:a5:f0:66:2c:99:
                    a7:a5:eb:08:3e:fd:7d:11:b4:d5:9e:f4:aa:4e:e0:
                    86:00:44:07:9e:4c:3f:37:9a:aa:be:cc:5d:c0:8f:
                    25:24:7e:53:ea:4e:7d:8c:ca:44:0f:b3:87:76:64:
                    cf:ad:75:93:37:57:3c:0a:af:a2:ff:c0:e7:12:ad:
                    4a:70:50:05:c5:3f:7f:dc:ea:58:8a:dc:19:90:4d:
                    e1:81:0f:8a:25:49:f7:e1:83:47:66:f2:09:70:9a:
                    b6:20:a5:1c:09:a9:90:8e:4c:ac:74:9e:13:dc:10:
                    b2:24:59:a8:41:3e:0a:af:e1:c1:55:8d:02:29:a8:
                    df:ae:0b:b5:73:7c:8a:cd:11:0a:cc:ef:85:84:20:
                    0c:3c:6d:9a:3a:4c:2f:37:f3:4d:b6:35:7d:0b:97:
                    12:b0:a9:47:c1:a9:22:db:be:36:4b:62:da:cb:e2:
                    bc:e8:fb:25:81:85:38:2c:59:f5:f7:3f:ab:35:38:
                    a5:ef:1a:de:41:f3:f1:5b:97:0c:d9:43:36:28:8a:
                    ce:99:cb:0b:53:a9:fb:f2:33:b7:e4:72:79:d6:68:
                    a5:55:ca:30:4e:92:aa:69:49:3d:55:13:86:c0:17:
                    ce:6e:7c:f4:c5:7f:ac:74:74:f7:ed:2b:82:ef:81:
                    52:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:74:FA:4E:3A:59:F1:5F:6E:FD:42:F6:A2:74:B3:98:3A:11:1F:B4
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32312d3231203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:3f:99:db:a3:50:6a:71:c6:19:6b:c1:fc:60:05:3b:70:e7:
         45:29:6b:08:b8:91:8e:c6:35:d0:aa:e9:e5:74:b3:68:4b:c5:
         cd:03:b7:31:37:9a:6b:0c:68:45:1f:38:35:4a:dc:c2:1b:e7:
         e6:2e:40:41:56:af:51:a1:6d:ad:69:96:05:75:7c:5b:97:34:
         66:bd:a7:5a:89:e8:b4:4d:e0:35:8c:d6:bd:5c:43:9a:d7:d8:
         ec:0e:74:0e:5b:b6:cf:49:3c:1f:0a:18:f0:81:d6:aa:36:30:
         1e:35:69:a9:bd:76:7b:4e:c9:e7:dd:d7:4a:95:60:5d:7f:08:
         f3:4c:6c:40:e3:90:78:fc:a3:69:81:80:08:a4:41:68:c2:75:
         12:1f:00:0c:39:ff:dd:13:57:0d:9e:21:cf:b5:af:24:79:1b:
         97:44:0c:f9:65:76:50:43:29:eb:01:75:6a:e0:4c:b5:db:8d:
         f1:a6:49:32:af:05:f1:b1:67:71:ba:e0:1d:09:f1:de:10:f4:
         fc:27:58:e1:a8:03:f5:00:93:09:a0:dc:32:aa:16:5a:45:07:
         53:ec:61:f0:d4:68:54:c5:e9:74:31:c9:e6:6c:71:a5:1c:36:
         aa:46:d4:b8:64:99:5b:e8:19:e7:72:ec:23:5b:db:f3:03:fd:
         3f:cb:ef:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:20:13 2025 by rpki-client