Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32342d3234203d3e20323733363839.roa
File:                     3230302e3134322e3232342e302f32342d3234203d3e20323733363839.roa (raw, json)
Hash identifier:          rCNboon4rx6qX4wo1RRtBzLGJ+l0JiIpeO0NvKBOM3U=
Subject key identifier:   5A:10:6D:C1:32:88:63:D6:CA:45:EE:BD:9B:87:9E:E7:23:64:0C:09
Certificate issuer:       /CN=2B7410E96445484E31D8CA6B9453554810501CE8
Certificate serial:       51E271BA34DB5518417F618EA15BEDF39B22CD21
Authority key identifier: 2B:74:10:E9:64:45:48:4E:31:D8:CA:6B:94:53:55:48:10:50:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B7410E96445484E31D8CA6B9453554810501CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32342d3234203d3e20323733363839.roa
Signing time:             Tue 05 Mar 2024 17:13:20 +0000
ROA not before:           Tue 05 Mar 2024 17:08:20 +0000
ROA not after:            Wed 05 Mar 2025 17:13:20 +0000
asID:                     273689
IP address blocks:        200.142.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e2:71:ba:34:db:55:18:41:7f:61:8e:a1:5b:ed:f3:9b:22:cd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7410E96445484E31D8CA6B9453554810501CE8
        Validity
            Not Before: Mar  5 17:08:20 2024 GMT
            Not After : Mar  5 17:13:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:96:96:a1:15:db:cd:8a:ae:56:68:d2:60:
                    d2:84:d3:74:31:35:17:e9:7b:d0:1b:0c:9f:5d:74:
                    f0:e6:24:56:d2:81:1f:37:1c:7b:c5:a6:6d:ea:b6:
                    0a:3c:26:80:90:0b:4e:8b:69:13:4a:39:6a:e6:56:
                    69:ad:4b:fd:84:53:bf:f5:05:0a:4c:54:af:dd:c9:
                    49:19:94:0d:6b:91:f9:08:19:22:2e:72:ca:e2:af:
                    65:1d:02:3e:bf:0d:bf:ab:37:81:25:1e:78:02:63:
                    3a:61:23:73:e7:05:fc:98:ee:a4:eb:b3:25:5c:07:
                    c2:b2:98:a6:5b:6d:b0:48:83:2b:66:fe:4d:f5:0f:
                    58:95:80:8f:17:1a:c3:cc:0e:d8:08:23:b6:4b:f5:
                    56:37:d1:86:88:da:22:ce:45:54:31:ea:fa:fb:a1:
                    7d:1d:e7:49:29:56:ba:e7:8b:1b:3c:3f:92:34:28:
                    15:8f:a6:7f:d9:42:8e:e4:6a:26:db:75:47:7e:41:
                    4f:7a:10:86:04:cf:e3:93:e6:7d:88:5e:52:65:f2:
                    67:3f:76:5c:83:9e:29:db:6c:04:dd:e6:3b:5e:e7:
                    1b:9b:4d:4a:97:d7:7c:e0:3a:f6:f7:58:4a:65:03:
                    f9:ba:7d:61:fb:19:02:52:af:c0:d7:f0:9a:ed:5a:
                    d7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:10:6D:C1:32:88:63:D6:CA:45:EE:BD:9B:87:9E:E7:23:64:0C:09
            X509v3 Authority Key Identifier:
                keyid:2B:74:10:E9:64:45:48:4E:31:D8:CA:6B:94:53:55:48:10:50:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/2B7410E96445484E31D8CA6B9453554810501CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B7410E96445484E31D8CA6B9453554810501CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32342d3234203d3e20323733363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:f9:02:d0:b4:95:20:0b:05:de:3e:8f:4c:29:88:e6:55:20:
         a5:60:cb:49:6f:87:43:df:e9:4f:93:c9:1e:2b:8b:07:4e:51:
         66:3c:d7:17:8d:42:39:8e:7c:98:dc:ea:b8:fb:22:71:2d:a5:
         ec:d9:fe:3e:71:71:3b:74:db:bc:2b:a1:94:5a:bf:a1:9d:51:
         a7:c6:ad:03:3d:14:62:7d:24:a8:4d:b5:e6:0f:6a:14:87:9a:
         67:79:00:6c:8c:6e:51:8a:82:65:2d:e3:23:ba:fe:32:c2:63:
         87:14:b6:de:85:1f:7c:e1:41:cc:b2:f1:64:a9:ec:38:b0:65:
         72:7d:ed:36:e3:80:74:ab:f1:ae:41:f0:34:a6:96:9e:34:2a:
         bf:d5:56:ab:c9:bf:67:d7:9a:64:7a:c9:9f:41:6a:57:f0:89:
         e6:4f:c1:24:08:9a:43:e3:b4:f1:db:64:89:84:99:9e:ea:e3:
         ed:62:0b:b0:cc:47:1c:d5:66:fc:79:e9:ac:63:fd:74:86:97:
         8c:e4:38:3a:9c:23:f0:4a:7b:38:c6:39:8f:a9:5c:21:b8:59:
         68:76:84:e1:11:28:76:49:80:47:cf:e3:69:9b:d3:63:91:5b:
         ba:b0:32:5f:87:b9:58:55:26:eb:ec:6a:95:ef:b1:22:3c:46:
         e5:86:45:7f
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUUeJxujTbVRhBf2GOoVvt85sizSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3NDEwRTk2NDQ1NDg0RTMxRDhDQTZCOTQ1MzU1NDgx
MDUwMUNFODAeFw0yNDAzMDUxNzA4MjBaFw0yNTAzMDUxNzEzMjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOThCMTk2OTZBMTE1REJDRDhB
QUU1NjY4RDI2MEQyODREMzc0MzEzNTE3RTk3QkQwMUIwQzlGNUQ3NEYwRTYyNDU2
RDI4MTFGMzcxQzdCQzVBNjZERUFCNjBBM0MyNjgwOTAwQjRFOEI2OTEzNEEzOTZB
RTY1NjY5QUQ0QkZEODQ1M0JGRjUwNTBBNEM1NEFGRERDOTQ5MTk5NDBENkI5MUY5
MDgxOTIyMkU3MkNBRTJBRjY1MUQwMjNFQkYwREJGQUIzNzgxMjUxRTc4MDI2MzNB
NjEyMzczRTcwNUZDOThFRUE0RUJCMzI1NUMwN0MyQjI5OEE2NUI2REIwNDg4MzJC
NjZGRTRERjUwRjU4OTU4MDhGMTcxQUMzQ0MwRUQ4MDgyM0I2NEJGNTU2MzdEMTg2
ODhEQTIyQ0U0NTU0MzFFQUZBRkJBMTdEMURFNzQ5Mjk1NkJBRTc4QjFCM0MzRjky
MzQyODE1OEZBNjdGRDk0MjhFRTQ2QTI2REI3NTQ3N0U0MTRGN0ExMDg2MDRDRkUz
OTNFNjdEODg1RTUyNjVGMjY3M0Y3NjVDODM5RTI5REI2QzA0RERFNjNCNUVFNzFC
OUI0RDRBOTdENzdDRTAzQUY2Rjc1ODRBNjUwM0Y5QkE3RDYxRkIxOTAyNTJBRkMw
RDdGMDlBRUQ1QUQ3RDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmLGWlqEV282KrlZo0mDShNN0MTUX6XvQGwyfXXTw5iRW0oEfNxx7
xaZt6rYKPCaAkAtOi2kTSjlq5lZprUv9hFO/9QUKTFSv3clJGZQNa5H5CBkiLnLK
4q9lHQI+vw2/qzeBJR54AmM6YSNz5wX8mO6k67MlXAfCspimW22wSIMrZv5N9Q9Y
lYCPFxrDzA7YCCO2S/VWN9GGiNoizkVUMer6+6F9HedJKVa654sbPD+SNCgVj6Z/
2UKO5Gom23VHfkFPehCGBM/jk+Z9iF5SZfJnP3Zcg54p22wE3eY7Xucbm01Kl9d8
4Dr291hKZQP5un1h+xkCUq/A1/Ca7VrX2QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FFoQbcEyiGPWykXuvZuHnucjZAwJMB8GA1UdIwQYMBaAFCt0EOlkRUhOMdjKa5RT
VUgQUBzoMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVKRDVyVGFKQTQ5alFT
ZkxhOGZYQ2c2dnJuMlJpY05HVnVDcDl0Rnp2ZVhuLzAvMkI3NDEwRTk2NDQ1NDg0
RTMxRDhDQTZCOTQ1MzU1NDgxMDUwMUNFOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yQjc0MTBFOTY0NDU0ODRFMzFEOENBNkI5NDUzNTU0ODEwNTAx
Q0U4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81SkQ1clRhSkE0OWpRU2ZMYThm
WENnNnZybjJSaWNOR1Z1Q3A5dEZ6dmVYbi8wLzMyMzAzMDJlMzEzNDMyMmUzMjMy
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzNjM4Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADIjuAwDQYJKoZIhvcNAQELBQADggEBAED5AtC0lSALBd4+j0wpiOZVIKVgy0lv
h0Pf6U+TyR4riwdOUWY81xeNQjmOfJjc6rj7InEtpezZ/j5xcTt027wroZRav6Gd
UafGrQM9FGJ9JKhNteYPahSHmmd5AGyMblGKgmUt4yO6/jLCY4cUtt6FH3zhQcyy
8WSp7DiwZXJ97TbjgHSr8a5B8DSmlp40Kr/VVqvJv2fXmmR6yZ9BalfwieZPwSQI
mkPjtPHbZImEmZ7q4+1iC7DMRxzVZvx56axj/XSGl4zkODqcI/BKezjGOY+pXCG4
WWh2hOERKHZJgEfP42mb02ORW7qwMl+HuVhVJuvsapXvsSI8RuWGRX8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:29:37 2025 by rpki-client