Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32332d3233203d3e20323633323633.roa
File:                     3230302e33332e3133322e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          /DTe5C/GIg2SWfz8KcEjoYYsSdsv/Qc1wvDNF5Gm1AM=
Subject key identifier:   58:C0:65:24:83:48:91:22:F4:D1:96:F3:A6:1F:73:C2:44:FF:13:5C
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       0A86FCCABB554898C9003EB2C6473C7E59C50EBD
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32332d3233203d3e20323633323633.roa
Signing time:             Thu 06 Mar 2025 08:00:25 +0000
ROA not before:           Thu 06 Mar 2025 07:55:25 +0000
ROA not after:            Thu 05 Mar 2026 08:00:25 +0000
asID:                     263263
IP address blocks:        200.33.132.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:86:fc:ca:bb:55:48:98:c9:00:3e:b2:c6:47:3c:7e:59:c5:0e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Mar  6 07:55:25 2025 GMT
            Not After : Mar  5 08:00:25 2026 GMT
        Subject: CN=58C0652483489122F4D196F3A61F73C244FF135C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:2f:df:01:77:56:db:2e:c5:19:f9:ef:bc:
                    43:5a:7f:86:16:40:32:a5:32:c9:1d:8b:e2:45:dc:
                    97:d6:17:a4:5a:66:61:bc:22:1f:e9:55:4e:59:e0:
                    30:1b:c9:7d:66:74:67:ba:cf:cf:8e:30:3d:32:aa:
                    2c:04:12:a1:62:f5:af:99:3b:f2:b3:e5:cd:43:c9:
                    e5:d9:02:81:1a:3c:50:64:c1:85:d3:68:61:ef:58:
                    5b:0d:c8:ab:4d:62:6e:2b:ad:c8:47:6e:43:ea:88:
                    d1:b8:5b:af:95:56:b7:df:c5:f6:10:5e:1b:70:83:
                    6d:d7:cf:7b:e4:f0:53:93:fb:28:f6:ec:3a:ed:62:
                    1a:7e:1d:4d:12:e0:4a:e9:03:f7:d6:5d:01:d2:3e:
                    60:b0:80:48:3e:1b:cf:cc:30:03:f1:82:a1:a9:03:
                    e7:07:85:7e:2d:4b:a5:c4:86:19:89:c5:5b:7a:a7:
                    4a:83:b5:55:62:8d:07:79:37:78:6e:d9:6b:1f:8c:
                    3a:75:9d:5d:d4:c7:cb:28:46:55:0c:89:a0:ca:9b:
                    b4:7e:97:61:6e:f9:af:ea:d4:72:b4:96:d1:e1:aa:
                    b8:77:2e:31:a6:db:77:1f:8a:cf:58:3f:12:cb:45:
                    f4:a9:8f:d1:ec:9b:c7:85:d8:ec:91:48:e3:b2:95:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C0:65:24:83:48:91:22:F4:D1:96:F3:A6:1F:73:C2:44:FF:13:5C
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:29:81:53:95:0b:58:a4:d1:8b:76:45:0d:54:a3:b6:f5:1d:
         20:c8:f5:62:5c:0c:ad:14:e3:bb:f2:b6:0e:b5:ee:e3:36:d7:
         f2:05:f6:46:18:2d:86:e2:11:49:32:7e:9e:71:f2:9d:a3:bc:
         b1:66:e6:7a:47:7a:eb:42:c6:56:96:f2:c0:25:ff:67:80:4a:
         c8:9f:02:cb:56:86:56:7b:97:e9:64:07:aa:96:3c:66:a8:68:
         74:e5:dd:7d:77:19:48:5e:58:6b:58:c4:e4:d1:8d:16:57:80:
         d3:3c:62:f5:81:10:37:e8:4a:36:62:dc:4e:17:29:dd:63:bb:
         2e:56:b2:ff:eb:b2:6d:af:58:ec:15:ff:07:b8:bf:3b:c9:4e:
         73:1c:07:72:69:bb:d7:1f:65:42:72:ed:f3:f1:86:34:e6:f4:
         9f:1a:34:39:e0:5e:6c:60:01:c8:ce:56:75:8d:6f:fe:78:56:
         1f:b1:35:91:71:16:91:07:ef:2d:c0:15:a4:a7:da:7e:7f:65:
         ed:af:80:ea:d0:33:fe:94:62:85:b2:04:d9:72:cf:00:b7:f1:
         b5:44:dd:90:02:a8:2a:5c:8c:8c:55:a8:d9:5c:4b:d8:48:37:
         8b:93:f0:8e:c5:27:f9:b8:25:fd:8e:05:7e:4a:9a:30:98:ea:
         98:5c:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:03:24 2025 by rpki-client