Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232372e302f32342d3234203d3e20323730393331.roa
File:                     3230302e3134322e3232372e302f32342d3234203d3e20323730393331.roa (raw, json)
Hash identifier:          D5M4QtQ5qD+D9whXXf8peMd6mYAr9AM4Bx/D7OWl7cg=
Subject key identifier:   70:9C:0F:CC:1E:4A:52:9E:BB:9B:0C:FF:DD:54:D5:44:44:85:41:B4
Certificate issuer:       /CN=DBB73F660469C2567ABB9FC0CA341D1CFD435875
Certificate serial:       46178F82C90FF1DDB272AA4942672B8D88238CBC
Authority key identifier: DB:B7:3F:66:04:69:C2:56:7A:BB:9F:C0:CA:34:1D:1C:FD:43:58:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB73F660469C2567ABB9FC0CA341D1CFD435875.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232372e302f32342d3234203d3e20323730393331.roa
Signing time:             Fri 04 Oct 2024 11:07:56 +0000
ROA not before:           Fri 04 Oct 2024 11:02:56 +0000
ROA not after:            Fri 03 Oct 2025 11:07:56 +0000
asID:                     270931
IP address blocks:        200.142.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:17:8f:82:c9:0f:f1:dd:b2:72:aa:49:42:67:2b:8d:88:23:8c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB73F660469C2567ABB9FC0CA341D1CFD435875
        Validity
            Not Before: Oct  4 11:02:56 2024 GMT
            Not After : Oct  3 11:07:56 2025 GMT
        Subject: CN=709C0FCC1E4A529EBB9B0CFFDD54D544448541B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fc:43:bc:fe:b4:98:50:63:fb:eb:d2:98:80:
                    ce:f4:85:f3:07:fb:1d:27:fc:aa:ff:01:92:bb:80:
                    b6:ab:b7:9c:6b:73:2d:2a:08:0c:12:5c:2a:8a:9e:
                    92:96:62:96:27:c0:e6:9e:73:c8:19:79:73:98:ab:
                    3b:5c:dc:9f:39:6d:87:10:f2:cb:3d:b8:4a:73:1a:
                    29:cd:ac:7a:b4:52:b1:fe:d4:ec:0b:71:2d:27:ee:
                    05:be:95:fc:92:37:96:a8:6a:ea:5f:37:7e:f2:3d:
                    a0:2a:b3:67:59:c4:41:18:f1:be:ec:23:8c:91:85:
                    d9:72:bb:db:a2:09:01:15:bb:0c:1c:53:89:1b:07:
                    5d:14:af:2e:16:56:e6:fd:8b:9b:77:ca:39:54:a3:
                    53:68:dd:cb:00:b4:a9:e1:a9:5e:94:a6:eb:a2:7e:
                    a5:b0:52:b2:75:5f:3d:e1:2c:34:d1:0c:b3:88:39:
                    ee:11:07:a0:16:6b:73:d3:9e:f2:c9:8f:63:3a:c5:
                    81:f9:76:27:14:c7:e2:72:7f:47:3e:c9:0f:20:07:
                    a8:1b:32:87:e0:c3:b5:3a:40:aa:9e:1e:64:d4:7e:
                    c2:cb:db:e2:15:cc:4a:aa:c6:95:8d:e7:74:db:ac:
                    61:34:49:d3:51:72:b3:0f:3b:aa:8c:a9:f6:7e:e0:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9C:0F:CC:1E:4A:52:9E:BB:9B:0C:FF:DD:54:D5:44:44:85:41:B4
            X509v3 Authority Key Identifier:
                keyid:DB:B7:3F:66:04:69:C2:56:7A:BB:9F:C0:CA:34:1D:1C:FD:43:58:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/DBB73F660469C2567ABB9FC0CA341D1CFD435875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB73F660469C2567ABB9FC0CA341D1CFD435875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232372e302f32342d3234203d3e20323730393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:b8:ae:05:bf:84:dc:65:ab:9c:18:a3:84:f2:3c:15:81:38:
         e7:04:bd:67:94:2d:bd:24:a1:39:0c:a6:02:92:86:50:c1:fb:
         d6:88:51:f4:04:90:6c:83:d1:75:9f:64:cf:e6:2b:c3:e5:7b:
         12:e0:8f:7b:6a:26:41:3b:1b:66:63:54:1b:5e:2f:4f:aa:ec:
         61:14:75:a7:c2:c7:48:bd:15:64:46:30:8a:de:30:23:bb:c5:
         9c:0e:a1:fb:9d:6f:5f:56:61:d0:08:f5:96:7c:99:34:db:b0:
         a1:0f:1b:f3:d8:55:e5:6b:49:93:aa:39:73:c2:5c:43:36:b3:
         c6:e6:3a:36:cb:46:de:8d:b5:b0:ca:c2:95:f1:f9:d7:c3:da:
         14:20:c3:6d:e0:bb:54:44:69:f9:19:fb:55:88:d6:b8:80:d3:
         3d:53:95:e9:ee:83:20:ae:85:3e:59:bf:d4:32:08:ef:e2:1a:
         f1:d2:e3:bf:d2:b5:99:2a:a8:88:93:a5:1d:9b:74:02:e7:85:
         6b:d2:be:3a:d9:f9:d8:e4:27:79:fa:1d:62:84:05:a2:85:93:
         70:12:67:6b:d1:0c:c7:40:e6:6d:ac:5c:ea:1a:32:e4:23:17:
         09:8c:3c:6e:ae:f3:e5:e8:fa:53:51:7a:2d:86:f6:50:59:f0:
         7f:31:b2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:57 2025 by rpki-client