Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133302e302f32332d3233203d3e20323633323633.roa
File:                     3230302e33332e3133302e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          iy7YGP1Py6OqaGygSGOzTr7PoSoLsDJ07zxJB50rZzU=
Subject key identifier:   83:B7:03:98:FD:7F:EF:62:DC:08:C9:75:71:FD:4C:6D:44:2B:5C:2D
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       71BF092DD25F503CE2CAAB812FFDEFB9FAF84CF2
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133302e302f32332d3233203d3e20323633323633.roa
Signing time:             Thu 06 Mar 2025 08:00:29 +0000
ROA not before:           Thu 06 Mar 2025 07:55:29 +0000
ROA not after:            Thu 05 Mar 2026 08:00:29 +0000
asID:                     263263
IP address blocks:        200.33.130.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bf:09:2d:d2:5f:50:3c:e2:ca:ab:81:2f:fd:ef:b9:fa:f8:4c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Mar  6 07:55:29 2025 GMT
            Not After : Mar  5 08:00:29 2026 GMT
        Subject: CN=83B70398FD7FEF62DC08C97571FD4C6D442B5C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:aa:e6:b2:96:45:04:fe:1f:68:5b:aa:c6:
                    86:d1:17:3e:0e:2b:e5:e6:5d:9f:3f:db:0e:87:12:
                    5c:52:ef:37:72:0e:33:8a:30:6d:49:37:66:a3:03:
                    ec:e3:4c:77:29:7d:d0:1b:f7:f7:f4:b2:39:22:38:
                    74:f9:f2:13:83:d0:ae:4c:c1:4e:4f:26:52:f9:3f:
                    16:27:ee:25:d3:fd:c6:05:1f:17:59:c3:1d:cb:85:
                    b8:56:d5:b3:b2:f2:09:e2:b5:79:e0:91:55:41:b9:
                    62:a7:fa:93:c5:d5:4f:9e:5b:5c:d3:23:db:65:34:
                    73:fd:fa:6b:57:95:d8:37:7a:2b:ae:10:81:de:03:
                    0a:71:ac:24:ef:8a:e5:ec:92:bd:5c:54:34:6d:a1:
                    f6:9f:e6:30:7b:d4:ff:1b:de:1f:be:e9:f8:af:26:
                    94:c2:0e:97:c5:83:ad:16:3e:18:bc:f8:56:26:69:
                    3d:0f:92:01:0e:4c:12:78:6a:d5:11:ce:3e:6b:a7:
                    fe:1b:47:d2:e2:61:10:71:9f:aa:cf:f6:7c:cb:30:
                    c1:26:6c:a0:66:b1:be:25:e8:6a:1b:ce:30:36:71:
                    55:9a:32:89:69:0c:8d:50:18:c4:4a:0d:17:ad:90:
                    0e:89:d0:5c:03:e4:0d:89:4a:54:01:17:4e:4f:cd:
                    07:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B7:03:98:FD:7F:EF:62:DC:08:C9:75:71:FD:4C:6D:44:2B:5C:2D
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133302e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:94:e9:ab:dd:08:0e:27:18:43:3d:ec:e8:49:94:4a:9f:9b:
         e2:f9:1b:59:45:41:8e:4e:42:30:8b:df:ab:4b:7d:5d:d2:6a:
         f7:80:9b:a2:ab:60:1d:5f:1e:96:59:19:6e:7b:25:b0:50:d2:
         0b:cf:1f:16:e7:7d:f0:c3:26:98:1e:e5:22:ee:8c:bf:31:66:
         3d:98:6f:20:dc:af:ba:2d:13:93:d5:4e:7f:dc:ba:33:e4:11:
         29:b6:6e:70:49:81:95:5f:8f:43:26:62:c2:c1:f2:77:39:3b:
         37:d3:51:9a:5f:33:4f:44:83:2c:96:f3:c5:c8:5c:b5:94:fe:
         8b:90:44:a7:28:92:96:7c:f4:dd:94:b4:19:e2:5a:c1:ec:a7:
         27:d2:81:db:91:38:a3:fe:07:6a:55:9a:62:81:16:53:73:15:
         19:2c:5b:61:7f:19:db:9b:c9:73:56:9b:6e:8f:ff:80:88:f9:
         6e:27:e0:0d:bb:81:3d:54:8e:b4:bc:b3:38:d6:11:3b:9c:25:
         62:46:8c:da:61:08:8d:65:44:46:86:db:59:96:4c:8f:8e:88:
         dd:85:6c:ea:ed:1a:2f:ca:13:44:ef:d8:81:fd:b2:02:2a:72:
         05:0e:03:2b:7e:80:5c:af:6f:5e:10:2b:d6:5f:d5:3b:5a:b6:
         b6:36:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:29:41 2025 by rpki-client