Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32322d3232203d3e20323731343233.roa
File:                     3230302e33362e3139362e302f32322d3232203d3e20323731343233.roa (raw, json)
Hash identifier:          ivcoMPCMqXwub93yoUISY4gw0ogxJRyrafhxgrxbF6A=
Subject key identifier:   83:EF:1F:F2:FA:EF:AF:B7:01:4B:6B:09:7A:BC:EF:18:E7:38:56:0B
Certificate issuer:       /CN=D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74
Certificate serial:       629FE0A6FFD3BCFC307F839D99D3B1B097B03C5A
Authority key identifier: D0:EF:0D:E2:C9:A8:B3:47:D2:F9:1A:1A:82:A7:B5:53:AF:6B:0A:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32322d3232203d3e20323731343233.roa
Signing time:             Wed 10 Jan 2024 13:58:45 +0000
ROA not before:           Wed 10 Jan 2024 13:53:45 +0000
ROA not after:            Wed 08 Jan 2025 13:58:45 +0000
asID:                     271423
IP address blocks:        200.36.196.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9f:e0:a6:ff:d3:bc:fc:30:7f:83:9d:99:d3:b1:b0:97:b0:3c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74
        Validity
            Not Before: Jan 10 13:53:45 2024 GMT
            Not After : Jan  8 13:58:45 2025 GMT
        Subject: CN=83EF1FF2FAEFAFB7014B6B097ABCEF18E738560B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:48:74:ae:93:46:7b:eb:c0:62:2e:15:70:
                    27:ac:92:c5:59:88:fe:27:c4:8e:34:2c:95:7a:1c:
                    03:88:95:0b:9a:b2:50:36:5a:70:c0:20:fa:b7:3e:
                    ca:96:81:25:ef:19:ea:03:84:8c:c3:f8:95:28:7e:
                    98:66:6d:35:96:06:b3:ee:23:c4:c2:b1:fd:f4:7c:
                    a8:5d:2c:14:a7:d2:b9:f4:6d:ff:b4:80:de:3c:bb:
                    4e:1a:48:9d:23:0b:85:36:c6:cf:0e:1d:ac:1b:01:
                    d6:dc:49:79:59:5d:6e:04:ec:d0:5e:fd:da:93:48:
                    61:f3:63:9f:71:4c:99:29:78:80:b4:2c:31:5b:32:
                    99:61:3e:3d:a5:50:57:ce:a3:3d:2a:5f:68:22:0a:
                    83:66:8f:22:8f:9d:b8:25:63:6f:b4:f6:ff:76:61:
                    09:0b:de:ee:eb:ee:7f:7f:02:91:cb:f3:f1:29:d4:
                    4b:ff:e2:1a:f1:f7:36:b9:aa:80:29:68:69:c7:18:
                    c0:49:5b:a6:67:cf:c9:08:2e:11:62:ee:fe:69:c7:
                    95:af:7a:63:f3:5f:62:7d:a5:cb:5b:5b:85:6b:7f:
                    6e:c8:e3:71:e3:41:de:b0:27:fc:f1:ba:3d:bc:63:
                    fd:28:9a:1d:e3:60:55:e6:75:f2:93:36:74:c1:a4:
                    4b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EF:1F:F2:FA:EF:AF:B7:01:4B:6B:09:7A:BC:EF:18:E7:38:56:0B
            X509v3 Authority Key Identifier:
                keyid:D0:EF:0D:E2:C9:A8:B3:47:D2:F9:1A:1A:82:A7:B5:53:AF:6B:0A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32322d3232203d3e20323731343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:a9:a6:c1:8c:38:64:d7:2d:d0:06:92:22:3e:a1:76:f1:69:
         01:f9:14:e7:af:ad:0b:96:db:c8:89:42:93:98:c0:8e:e4:3d:
         56:29:c8:66:52:74:29:37:4e:83:18:f9:ee:f0:26:df:de:89:
         8e:aa:6f:0d:3c:1a:88:27:82:09:6a:ee:71:3f:82:6b:6e:ad:
         af:b3:a1:bb:8f:09:d0:ff:c5:7b:d7:12:94:ed:f1:16:3f:f0:
         e0:0e:e5:50:4f:99:33:9c:e8:81:a9:f7:bf:95:df:11:5e:91:
         40:c1:51:96:25:33:b2:ad:1b:eb:7f:02:ab:cd:47:02:f8:21:
         11:1b:66:ae:be:5b:ee:68:d0:88:ac:3a:1c:6f:f7:b1:bc:65:
         52:ae:20:c3:44:2f:fb:de:0a:3f:4b:9b:5d:7f:da:38:dd:4a:
         5f:b1:78:49:7d:b8:41:d0:4a:80:68:eb:d1:01:de:4b:a3:1c:
         0d:a9:38:50:d0:3b:15:c5:94:14:17:0f:02:a9:8d:2f:ea:fc:
         29:de:79:94:0a:65:ca:e5:f7:58:87:79:29:06:d0:a5:cc:47:
         b9:29:ef:ca:a8:97:42:f4:77:89:60:76:4b:eb:12:7b:ba:03:
         ff:bd:d8:6b:fb:1d:d5:a6:10:f0:f4:a2:ec:66:e9:0d:a3:a9:
         ce:61:4a:01
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYp/gpv/TvPwwf4OdmdOxsJewPFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBFRjBERTJDOUE4QjM0N0QyRjkxQTFBODJBN0I1NTNB
RjZCMEE3NDAeFw0yNDAxMTAxMzUzNDVaFw0yNTAxMDgxMzU4NDVaMDMxMTAvBgNV
BAMTKDgzRUYxRkYyRkFFRkFGQjcwMTRCNkIwOTdBQkNFRjE4RTczODU2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvv0h0rpNGe+vAYi4VcCesksVZ
iP4nxI40LJV6HAOIlQuaslA2WnDAIPq3PsqWgSXvGeoDhIzD+JUofphmbTWWBrPu
I8TCsf30fKhdLBSn0rn0bf+0gN48u04aSJ0jC4U2xs8OHawbAdbcSXlZXW4E7NBe
/dqTSGHzY59xTJkpeIC0LDFbMplhPj2lUFfOoz0qX2giCoNmjyKPnbglY2+09v92
YQkL3u7r7n9/ApHL8/Ep1Ev/4hrx9za5qoApaGnHGMBJW6Znz8kILhFi7v5px5Wv
emPzX2J9pctbW4Vrf27I43HjQd6wJ/zxuj28Y/0omh3jYFXmdfKTNnTBpEsTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg+8f8vrvr7cBS2sJerzvGOc4VgswHwYDVR0j
BBgwFoAU0O8N4smos0fS+Roagqe1U69rCnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWh2Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUy
czYvMC9EMEVGMERFMkM5QThCMzQ3RDJGOTFBMUE4MkE3QjU1M0FGNkIwQTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwRUYwREUyQzlBOEIzNDdE
MkY5MUExQTgyQTdCNTUzQUY2QjBBNzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVodmI5NEJ0UDNDOGI0R1ZneUd0ZllBQUtTOGt2akh0eDM2bWRaMjllMnM2LzAv
MzIzMDMwMmUzMzM2MmUzMTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzNDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIJMQwDQYJKoZIhvcNAQELBQADggEBADappsGM
OGTXLdAGkiI+oXbxaQH5FOevrQuW28iJQpOYwI7kPVYpyGZSdCk3ToMY+e7wJt/e
iY6qbw08Gogngglq7nE/gmtura+zobuPCdD/xXvXEpTt8RY/8OAO5VBPmTOc6IGp
97+V3xFekUDBUZYlM7KtG+t/AqvNRwL4IREbZq6+W+5o0IisOhxv97G8ZVKuIMNE
L/veCj9Lm11/2jjdSl+xeEl9uEHQSoBo69EB3kujHA2pOFDQOxXFlBQXDwKpjS/q
/CneeZQKZcrl91iHeSkG0KXMR7kp78qol0L0d4lgdkvrEnu6A/+92Gv7HdWmEPD0
ouxm6Q2jqc5hSgE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:16 2025 by rpki-client