Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          Oqg/joeYc4TNudGoO6LL10u7ey63YRgZeaI2lwfnn0c=
Subject key identifier:   3D:48:9C:92:68:D6:5D:D3:69:E0:BF:F9:35:EE:A3:1A:E9:1B:D1:8C
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       59BD7B9E85A1A677F50303E9346A995997009DAC
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 06 Mar 2025 08:00:27 +0000
ROA not before:           Thu 06 Mar 2025 07:55:27 +0000
ROA not after:            Thu 05 Mar 2026 08:00:27 +0000
asID:                     263263
IP address blocks:        200.33.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bd:7b:9e:85:a1:a6:77:f5:03:03:e9:34:6a:99:59:97:00:9d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Mar  6 07:55:27 2025 GMT
            Not After : Mar  5 08:00:27 2026 GMT
        Subject: CN=3D489C9268D65DD369E0BFF935EEA31AE91BD18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:b1:93:55:00:4f:f5:30:21:41:f7:81:aa:
                    80:b6:7f:eb:57:9b:ac:c1:39:e4:1b:29:70:30:c4:
                    bd:a2:27:46:1f:b6:11:ba:5c:4b:2e:ae:a0:fe:1d:
                    3b:31:5e:66:6b:54:fd:67:53:8d:4c:42:e9:77:4f:
                    f8:d2:fb:bb:60:52:a7:52:93:39:a8:0e:92:87:ca:
                    27:5f:72:3c:2f:20:5d:d5:b7:65:96:ee:2c:ff:58:
                    ef:b5:f5:97:0d:6a:be:2f:9e:7f:7b:87:99:67:71:
                    fc:47:ad:32:1e:29:e9:5f:a4:6c:a2:6c:b4:73:4c:
                    5b:36:37:15:7a:a3:fe:27:99:15:f0:dc:dd:25:3a:
                    ea:4d:9c:d8:bc:6b:cd:f0:f8:96:4f:2e:de:5a:7a:
                    50:9e:2d:45:15:a0:5f:a3:bd:e9:c9:e8:92:a7:f7:
                    ed:a7:4d:cb:8c:a5:ac:15:26:27:c9:3c:cf:a1:92:
                    6b:4b:bc:be:26:58:8a:6c:5a:26:44:57:c3:34:6d:
                    44:bc:27:de:12:28:72:dc:46:b0:16:c8:d2:86:b4:
                    4e:14:a9:54:c1:fc:2a:4e:a7:c7:00:62:5e:dd:59:
                    ba:b1:2a:7e:ec:7e:2d:3d:c4:4e:b9:36:c2:2f:a0:
                    44:d4:26:30:ff:61:66:dd:83:9d:6f:3b:6f:40:9b:
                    7f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:48:9C:92:68:D6:5D:D3:69:E0:BF:F9:35:EE:A3:1A:E9:1B:D1:8C
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:4a:38:39:71:38:6c:fc:ea:fb:04:b9:a7:34:f0:f9:3d:cf:
         8b:ad:92:96:b3:79:c3:a4:41:27:98:72:23:51:f4:37:72:93:
         ce:29:f2:43:9e:aa:6f:1c:04:01:e9:7b:d7:b3:a7:12:ce:f6:
         c3:05:40:02:5c:92:cb:1d:4e:08:bb:02:6c:1b:60:14:7d:5a:
         6b:33:15:a0:f1:f8:bd:34:e0:bb:f2:3f:eb:3a:5e:7f:09:19:
         30:08:5c:dc:d9:a6:6e:00:23:16:4e:dc:7f:b0:06:60:f6:2e:
         27:e9:d7:8d:c7:ba:d6:2e:a0:fc:e2:96:4e:d5:03:09:28:c4:
         82:32:cc:4e:65:24:00:b0:05:27:73:d0:8e:0b:5f:2a:f9:1c:
         a0:91:a2:0f:13:a2:4b:b0:00:33:78:73:d2:e8:ad:b8:b5:be:
         c7:cf:b3:5d:de:46:fb:d3:c7:24:c8:bc:e2:3a:3a:38:b7:8c:
         01:4d:62:9e:9f:22:5b:ff:9b:43:0c:bd:7b:c1:d3:55:78:2d:
         25:63:df:b6:26:a6:f8:58:58:31:d4:25:59:b9:87:07:a4:f2:
         d7:4a:99:a9:8e:84:ac:e6:a7:72:e3:c6:03:60:75:27:cd:68:
         e2:14:2f:88:b6:55:98:dc:4e:2f:23:b7:9f:3d:8a:a7:27:a3:
         61:aa:59:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWb17noWhpnf1AwPpNGqZWZcAnawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UyRDFCQzhCMjY3MzVFOTA2OEU4ODMzMzIwQTlGREVC
MDRFNjlDRDAeFw0yNTAzMDYwNzU1MjdaFw0yNjAzMDUwODAwMjdaMDMxMTAvBgNV
BAMTKDNENDg5QzkyNjhENjVERDM2OUUwQkZGOTM1RUVBMzFBRTkxQkQxOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFArGTVQBP9TAhQfeBqoC2f+tX
m6zBOeQbKXAwxL2iJ0YfthG6XEsurqD+HTsxXmZrVP1nU41MQul3T/jS+7tgUqdS
kzmoDpKHyidfcjwvIF3Vt2WW7iz/WO+19ZcNar4vnn97h5lncfxHrTIeKelfpGyi
bLRzTFs2NxV6o/4nmRXw3N0lOupNnNi8a83w+JZPLt5aelCeLUUVoF+jvenJ6JKn
9+2nTcuMpawVJifJPM+hkmtLvL4mWIpsWiZEV8M0bUS8J94SKHLcRrAWyNKGtE4U
qVTB/CpOp8cAYl7dWbqxKn7sfi09xE65NsIvoETUJjD/YWbdg51vO29Am39nAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPUickmjWXdNp4L/5Ne6jGukb0YwwHwYDVR0j
BBgwFoAUzi0byLJnNekGjogzMgqf3rBOac0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMS9DRTJEMUJDOEIyNjczNUU5MDY4RTg4MzMzMjBBOUZERUIwNEU2OUNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMkQxQkM4QjI2NzM1RTkw
NjhFODgzMzMyMEE5RkRFQjA0RTY5Q0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzEv
MzIzMDMwMmUzMzMzMmUzMTMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIIYQwDQYJKoZIhvcNAQELBQADggEBAGNKODlx
OGz86vsEuac08Pk9z4utkpazecOkQSeYciNR9Ddyk84p8kOeqm8cBAHpe9ezpxLO
9sMFQAJckssdTgi7AmwbYBR9WmszFaDx+L004LvyP+s6Xn8JGTAIXNzZpm4AIxZO
3H+wBmD2Lifp143HutYuoPzilk7VAwkoxIIyzE5lJACwBSdz0I4LXyr5HKCRog8T
okuwADN4c9Lorbi1vsfPs13eRvvTxyTIvOI6Oji3jAFNYp6fIlv/m0MMvXvB01V4
LSVj37YmpvhYWDHUJVm5hwek8tdKmamOhKzmp3LjxgNgdSfNaOIUL4i2VZjcTi8j
t589iqcno2GqWb4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:06 2025 by rpki-client