Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32322d3232203d3e20323633323633.roa
File:                     3230302e33332e3132382e302f32322d3232203d3e20323633323633.roa (raw, json)
Hash identifier:          Xl/gvRgo/wHWBwF4nSd7onm4MT17k5gyFEEbHm/Gjgs=
Subject key identifier:   DC:75:48:97:87:1B:D0:F5:59:36:A4:09:58:C3:CA:E3:77:53:3C:BD
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       6CE955B3997924C1D095CB43536EF61FFE00EC9E
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32322d3232203d3e20323633323633.roa
Signing time:             Thu 06 Mar 2025 08:00:26 +0000
ROA not before:           Thu 06 Mar 2025 07:55:26 +0000
ROA not after:            Thu 05 Mar 2026 08:00:26 +0000
asID:                     263263
IP address blocks:        200.33.128.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e9:55:b3:99:79:24:c1:d0:95:cb:43:53:6e:f6:1f:fe:00:ec:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Mar  6 07:55:26 2025 GMT
            Not After : Mar  5 08:00:26 2026 GMT
        Subject: CN=DC754897871BD0F55936A40958C3CAE377533CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:45:db:e1:42:04:2f:14:f1:fe:3c:dd:05:86:
                    4b:da:b2:9a:c7:21:c1:f4:3f:ed:05:6f:6b:7b:cf:
                    62:c6:ff:8a:ad:b7:c1:fe:02:d4:fd:40:31:55:49:
                    9e:5e:8b:d0:0b:7e:80:b2:e9:82:b9:05:9b:94:79:
                    e2:20:70:10:00:1a:18:64:e2:12:28:b2:c1:9e:6b:
                    70:63:39:43:9a:35:4c:ea:de:75:f0:1b:dc:36:89:
                    4a:27:d4:c6:80:c4:1c:67:c0:b6:e6:38:74:f3:99:
                    e9:49:5f:50:15:69:9d:d6:08:1d:0c:2c:c9:ae:49:
                    18:20:64:9f:df:b6:9f:17:39:73:ad:ee:dd:7f:1e:
                    7e:7d:35:ae:dc:84:ae:e9:c4:21:5c:c2:ff:fe:d2:
                    86:fc:33:5a:47:14:9e:0f:8b:7e:8b:e8:55:9b:59:
                    06:a8:8b:ad:49:86:59:93:09:c7:49:57:e7:de:54:
                    24:32:cd:78:f3:74:00:82:f6:0d:c2:13:d1:37:fc:
                    48:38:65:eb:11:b2:b7:43:2d:1a:ac:6a:0d:a3:72:
                    07:5d:6f:83:bf:67:b4:de:9e:37:0a:a3:76:99:e8:
                    af:4a:e4:b4:04:89:29:fa:94:2d:c3:a3:e7:ac:b8:
                    d0:6e:07:5b:6b:78:f1:56:d7:66:3b:ea:a8:d5:82:
                    67:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:75:48:97:87:1B:D0:F5:59:36:A4:09:58:C3:CA:E3:77:53:3C:BD
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32322d3232203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:7d:31:ab:ca:c2:b6:e3:98:da:b3:bb:09:b4:1a:c6:00:
         7f:fa:8a:c7:97:45:7a:3b:41:41:77:01:79:ff:a3:75:51:c1:
         79:88:43:49:2c:92:1f:a8:92:eb:e3:ea:d7:4a:2d:11:2d:e2:
         0b:f4:63:9b:6f:2f:4e:30:6e:15:52:2c:b2:63:dc:41:65:fc:
         dd:79:d6:59:7e:0a:29:e6:48:f0:fb:77:89:80:54:b4:8b:33:
         c5:3d:7f:03:5e:91:21:e6:db:77:1a:33:d9:01:c8:00:6e:01:
         fb:5e:af:49:38:de:70:37:38:4f:e3:26:89:47:ff:04:5c:84:
         94:06:76:1a:b1:a6:50:c3:40:65:35:cc:98:a0:d5:73:d8:54:
         79:65:9d:2b:aa:08:c0:39:46:bb:e0:35:2f:8e:fa:13:88:98:
         d1:31:75:0d:61:25:36:14:0c:52:f1:f8:93:3b:e7:68:16:f6:
         ca:77:ff:a8:c5:d5:09:48:01:98:0a:14:74:bf:92:81:b1:5d:
         24:9b:21:2d:a6:89:20:e4:5b:88:c8:aa:d8:15:bd:df:42:a1:
         a3:97:07:41:f2:5b:a8:80:d7:15:4a:ef:d0:71:79:03:1b:b7:
         83:2e:23:52:d0:f9:e9:67:f5:48:d8:a0:73:52:a0:10:40:6d:
         90:1b:6e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:15:27 2025 by rpki-client