Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa
File:                     3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa (raw, json)
Hash identifier:          MXqk6cN9SWRBCWeCnvsiQM4qr1q4rLAs2Hf+/ZKYTbA=
Subject key identifier:   72:83:9D:4F:4B:0F:B4:27:EF:EA:76:A4:42:29:4A:0A:3A:1A:AE:25
Certificate issuer:       /CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
Certificate serial:       1F4D7AC76F54F5F684417DD7FA3B263C5A3E8FB5
Authority key identifier: FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa
Signing time:             Thu 06 Mar 2025 21:40:33 +0000
ROA not before:           Thu 06 Mar 2025 21:35:33 +0000
ROA not after:            Thu 05 Mar 2026 21:40:33 +0000
asID:                     270682
IP address blocks:        200.187.96.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4d:7a:c7:6f:54:f5:f6:84:41:7d:d7:fa:3b:26:3c:5a:3e:8f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
        Validity
            Not Before: Mar  6 21:35:33 2025 GMT
            Not After : Mar  5 21:40:33 2026 GMT
        Subject: CN=72839D4F4B0FB427EFEA76A442294A0A3A1AAE25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:43:0c:0a:70:58:22:5a:f6:8a:0f:fc:df:
                    31:88:2c:05:df:ad:92:3e:a6:7e:47:ad:77:0e:e9:
                    03:59:9e:53:54:ba:40:95:87:c8:ed:67:c5:06:31:
                    53:0e:68:20:54:de:65:f8:a8:dd:f5:05:3e:67:c2:
                    52:be:ce:09:72:09:93:d0:54:54:6e:c2:dc:d6:66:
                    85:41:b1:84:db:82:53:ec:c5:80:1f:ae:6f:7a:7c:
                    dc:56:38:8e:43:41:7a:e9:bb:3d:64:c6:e3:12:b9:
                    cd:df:38:36:8b:2d:e0:59:65:ad:13:da:02:2f:73:
                    4e:b5:99:c6:84:7c:ad:64:7d:79:67:0e:99:46:2b:
                    dc:30:ca:7d:22:6d:a0:ed:3e:af:4e:12:60:0b:93:
                    a9:96:74:fb:ad:e9:2d:70:8d:e1:ed:ef:83:44:ee:
                    c8:e7:a5:43:f6:de:03:76:07:bd:3c:e0:1b:62:d7:
                    76:0e:87:fa:03:43:78:b0:03:3f:71:65:66:a3:36:
                    8e:e2:8b:79:db:43:54:e4:79:07:bb:e5:4f:d5:83:
                    8a:46:80:71:ff:39:fb:2f:65:a6:ec:e0:db:02:75:
                    5d:bf:e8:9f:c0:67:40:e7:bd:4e:19:72:60:95:c5:
                    5e:66:b0:01:0e:32:6b:f5:0c:2a:ab:c7:1c:07:8d:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:83:9D:4F:4B:0F:B4:27:EF:EA:76:A4:42:29:4A:0A:3A:1A:AE:25
            X509v3 Authority Key Identifier:
                keyid:FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:f7:46:47:53:ad:da:07:eb:8f:32:4a:f3:2d:b3:40:6b:c5:
         0c:44:df:9c:57:93:e8:55:f9:c6:6e:58:96:9e:52:f9:00:96:
         6e:64:f7:74:61:ff:8a:0a:25:f4:f4:55:dd:73:eb:61:ff:df:
         45:89:6f:9d:2e:5e:4e:ee:e7:31:43:c9:cc:5d:39:8a:d7:73:
         3e:f1:4d:47:b9:05:8b:50:8d:6a:75:8f:44:cd:12:cf:43:ac:
         f0:10:87:56:27:49:de:15:3b:0c:ba:d9:d2:95:d4:75:f4:1b:
         72:0f:19:2a:6a:bf:01:cf:7c:75:bb:98:85:b4:5a:91:f9:ee:
         5c:5d:ff:4e:be:66:f5:1d:ac:06:2c:25:aa:bf:dd:c3:62:47:
         de:62:ca:40:9d:b6:34:8a:60:9d:8d:c1:43:a7:43:5b:c8:b5:
         c8:75:c3:d4:81:fb:2e:a9:c8:27:ed:25:29:18:6d:34:71:89:
         47:6d:30:d2:8e:67:bb:b2:d7:01:4e:fa:51:98:81:ae:77:94:
         b2:32:2c:f8:79:8f:96:31:e7:00:aa:cf:18:8c:4b:e4:ee:be:
         dd:02:28:d6:4e:b1:a4:40:6c:8a:48:e0:d0:c9:86:4f:c8:55:
         6a:15:40:c2:f7:fc:cf:33:5a:3e:73:48:fd:2f:e7:35:f0:24:
         98:f1:14:a8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH016x29U9faEQX3X+jsmPFo+j7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZDNkQ4N0MzMzI1NURFNzE4RUY5QTM4QTkyN0M0QzA5
QzVBMkEyNzAeFw0yNTAzMDYyMTM1MzNaFw0yNjAzMDUyMTQwMzNaMDMxMTAvBgNV
BAMTKDcyODM5RDRGNEIwRkI0MjdFRkVBNzZBNDQyMjk0QTBBM0ExQUFFMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrK0MMCnBYIlr2ig/83zGILAXf
rZI+pn5HrXcO6QNZnlNUukCVh8jtZ8UGMVMOaCBU3mX4qN31BT5nwlK+zglyCZPQ
VFRuwtzWZoVBsYTbglPsxYAfrm96fNxWOI5DQXrpuz1kxuMSuc3fODaLLeBZZa0T
2gIvc061mcaEfK1kfXlnDplGK9wwyn0ibaDtPq9OEmALk6mWdPut6S1wjeHt74NE
7sjnpUP23gN2B7084Bti13YOh/oDQ3iwAz9xZWajNo7ii3nbQ1TkeQe75U/Vg4pG
gHH/OfsvZabs4NsCdV2/6J/AZ0DnvU4ZcmCVxV5msAEOMmv1DCqrxxwHjX8BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcoOdT0sPtCfv6nakQilKCjoariUwHwYDVR0j
BBgwFoAU/8bYfDMlXecY75o4qSfEwJxaKicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVvZWY4b05RclRDTERGTnZHdVRQWTlzcVh4SzlYWGJINEJtd0FrMTFl
N2IvMS9GRkM2RDg3QzMzMjU1REU3MThFRjlBMzhBOTI3QzRDMDlDNUEyQTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGQzZEODdDMzMyNTVERTcx
OEVGOUEzOEE5MjdDNEMwOUM1QTJBMjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1b2VmOG9OUXJUQ0xERk52R3VUUFk5c3FYeEs5WFhiSDRCbXdBazExZTdiLzEv
MzIzMDMwMmUzMTM4MzcyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNjM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIu2AwDQYJKoZIhvcNAQELBQADggEBAMf3RkdT
rdoH648ySvMts0BrxQxE35xXk+hV+cZuWJaeUvkAlm5k93Rh/4oKJfT0Vd1z62H/
30WJb50uXk7u5zFDycxdOYrXcz7xTUe5BYtQjWp1j0TNEs9DrPAQh1YnSd4VOwy6
2dKV1HX0G3IPGSpqvwHPfHW7mIW0WpH57lxd/06+ZvUdrAYsJaq/3cNiR95iykCd
tjSKYJ2NwUOnQ1vItch1w9SB+y6pyCftJSkYbTRxiUdtMNKOZ7uy1wFO+lGYga53
lLIyLPh5j5Yx5wCqzxiMS+Tuvt0CKNZOsaRAbIpI4NDJhk/IVWoVQML3/M8zWj5z
SP0v5zXwJJjxFKg=
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:40:54 2025 by rpki-client