Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/3230312e3133302e32302e302f32322d3234203d3e203631383232.roa
File:                     3230312e3133302e32302e302f32322d3234203d3e203631383232.roa (raw, json)
Hash identifier:          kZNosV0vW8H0ffPDF8qiyBGs5rudDX9ftfT8Q08wB54=
Subject key identifier:   24:9C:E5:3D:64:88:A4:78:BD:38:88:F1:03:67:E8:D1:06:A2:E7:35
Certificate issuer:       /CN=D83644536B842CD15686D699796D2336D6F94682
Certificate serial:       2A15FEDBF4548EB34ECC5CF1B2889BDF5E982C02
Authority key identifier: D8:36:44:53:6B:84:2C:D1:56:86:D6:99:79:6D:23:36:D6:F9:46:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/3230312e3133302e32302e302f32322d3234203d3e203631383232.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     61822
IP address blocks:        201.130.20.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:15:fe:db:f4:54:8e:b3:4e:cc:5c:f1:b2:88:9b:df:5e:98:2c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83644536B842CD15686D699796D2336D6F94682
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:25:9d:fc:a9:6e:93:ac:78:2c:0b:4a:16:ee:
                    cc:ae:35:83:b4:70:e3:d1:9b:88:a5:7b:8f:90:17:
                    27:35:8c:a4:d9:ba:15:72:cc:fd:7a:f4:33:30:c3:
                    be:1f:03:4e:e1:50:a7:f4:2a:b7:65:3b:f5:dd:b2:
                    ef:93:1f:6a:79:f2:e8:76:2d:26:b1:4b:d7:08:99:
                    6c:64:03:8f:60:b4:f7:f0:37:fa:3a:08:aa:7f:ac:
                    3d:92:cf:9a:86:18:ae:49:1e:d2:cf:f0:0c:20:0d:
                    77:29:f4:ef:3d:b1:f2:be:fb:e7:84:4a:b5:6b:8a:
                    62:4f:03:3c:5e:27:4a:60:c4:78:4b:e4:07:5d:0c:
                    ba:cc:52:16:34:4a:86:84:a9:82:0c:d1:cf:05:82:
                    40:92:87:ab:c7:e1:d4:73:97:d0:cb:b4:3f:c6:0a:
                    20:57:0f:2c:53:88:a4:49:7d:f6:5b:cf:6f:f8:91:
                    b6:bc:ac:d4:92:82:6c:e2:da:c6:93:b4:6f:2b:29:
                    83:ae:2a:28:aa:37:62:b7:fa:1f:71:cd:c6:52:ea:
                    71:89:a0:03:00:da:f4:98:85:a8:a1:45:b7:05:37:
                    af:0a:7e:14:f1:83:a4:0c:bb:9f:7f:ff:89:51:9e:
                    5d:43:d5:9d:4b:04:4b:49:c5:f9:0b:d9:2c:35:46:
                    26:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9C:E5:3D:64:88:A4:78:BD:38:88:F1:03:67:E8:D1:06:A2:E7:35
            X509v3 Authority Key Identifier:
                keyid:D8:36:44:53:6B:84:2C:D1:56:86:D6:99:79:6D:23:36:D6:F9:46:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/3230312e3133302e32302e302f32322d3234203d3e203631383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:58:43:0f:ee:b0:e4:e6:82:37:90:e6:f8:3a:cf:43:b0:71:
         3e:53:98:24:4f:e2:39:58:be:3c:d0:53:4c:b0:8b:05:10:be:
         a5:6c:ae:b8:a0:06:15:71:22:ab:e5:4b:31:96:b9:11:4b:73:
         99:e2:0a:a1:06:63:5a:33:d6:7e:9e:37:50:b1:79:d2:59:07:
         37:4a:94:be:7f:8c:10:9e:04:5b:77:af:a1:80:72:6e:05:1e:
         db:22:a0:75:ec:ed:ab:44:dc:bf:10:5d:13:33:08:fc:2e:f9:
         2b:3a:db:70:bb:0c:8c:d6:20:b9:2b:62:1e:47:5a:87:47:37:
         37:3f:74:66:0a:3d:f7:99:e1:ab:2c:1b:8d:63:90:23:64:6b:
         46:c9:60:d1:12:d8:00:a4:ab:ab:2b:26:0d:ef:e1:ab:96:df:
         fb:a5:e2:2d:d3:32:2d:4d:7c:5a:10:96:e1:9f:8c:9e:ca:bd:
         fe:9e:3a:01:1e:27:89:a1:d2:35:14:8d:8d:bb:81:4b:34:73:
         ed:0e:58:24:79:91:55:cb:a7:e5:9e:a6:86:d9:15:a5:91:92:
         72:c7:27:38:32:f6:80:c1:e5:82:e6:6c:ae:d2:59:7f:86:01:
         48:df:02:38:92:b6:c6:4a:f8:e6:e3:0b:df:f8:7a:4a:67:91:
         dc:6f:4a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:32:58 2025 by rpki-client