Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32332d3234203d3e20323733363633.roa
File:                     3230302e3132342e37382e302f32332d3234203d3e20323733363633.roa (raw, json)
Hash identifier:          gmT/8emEi5ZZUzm+4Sq6efihzDRT4sUIJY08HBuStRg=
Subject key identifier:   76:38:B4:D8:38:A9:69:C4:2D:73:1B:BA:1A:41:FC:C6:5D:53:2B:E3
Certificate issuer:       /CN=F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA
Certificate serial:       1E0A79226EFF01E98CFBF068544146922E7BBA3F
Authority key identifier: F5:35:04:90:5C:7D:BB:52:F8:EA:92:D9:E5:D9:C2:24:C5:2A:B8:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32332d3234203d3e20323733363633.roa
Signing time:             Thu 13 Mar 2025 14:42:10 +0000
ROA not before:           Thu 13 Mar 2025 14:37:10 +0000
ROA not after:            Thu 12 Mar 2026 14:42:10 +0000
asID:                     273663
IP address blocks:        200.124.78.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0a:79:22:6e:ff:01:e9:8c:fb:f0:68:54:41:46:92:2e:7b:ba:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA
        Validity
            Not Before: Mar 13 14:37:10 2025 GMT
            Not After : Mar 12 14:42:10 2026 GMT
        Subject: CN=7638B4D838A969C42D731BBA1A41FCC65D532BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:80:cb:24:7b:f1:52:6c:6b:fb:c6:93:3d:
                    49:bb:7e:60:87:cb:d1:e7:93:20:17:ab:38:0f:28:
                    a5:ff:7f:64:0d:43:7b:d7:39:a8:23:66:39:81:59:
                    31:c5:84:d6:43:69:fc:70:b8:14:7d:79:0a:6d:9e:
                    a4:84:67:42:03:5e:e8:06:41:33:d5:d5:46:67:e4:
                    28:4d:93:92:2f:96:b5:7e:40:72:3e:f8:84:0b:b0:
                    0d:83:34:53:a2:42:09:83:e8:3c:fc:21:a8:e2:64:
                    50:9b:70:72:fa:c8:c8:2f:62:1d:fb:cd:9b:8c:94:
                    fc:c2:6c:a3:ff:f1:3b:ea:8e:bf:41:16:6d:0b:74:
                    f3:27:3e:cc:1c:86:d9:5a:bb:a8:5d:50:8a:56:b1:
                    65:e2:db:76:ca:f4:a7:ec:29:25:50:dd:3f:5f:7c:
                    b8:02:80:8a:29:d7:51:78:14:8f:ca:59:06:5b:0e:
                    93:5e:86:01:c4:4b:db:65:63:a7:bf:3f:97:18:bb:
                    c6:13:be:8b:c0:60:40:12:ca:21:7e:e3:c4:11:2f:
                    a7:e6:75:6a:c2:b7:00:aa:7d:68:d1:4a:ba:0d:0e:
                    52:f2:b1:cc:8c:97:0d:6a:14:61:97:54:39:a9:f3:
                    5b:98:ac:60:02:6d:e1:96:9f:63:d8:b1:1d:ae:85:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:38:B4:D8:38:A9:69:C4:2D:73:1B:BA:1A:41:FC:C6:5D:53:2B:E3
            X509v3 Authority Key Identifier:
                keyid:F5:35:04:90:5C:7D:BB:52:F8:EA:92:D9:E5:D9:C2:24:C5:2A:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32332d3234203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:67:17:64:1a:c9:f9:89:c8:81:ec:47:73:cc:17:74:37:34:
         28:e7:0a:e7:2b:4f:a5:d7:3f:4f:55:83:78:2d:ea:7f:f1:00:
         28:78:1a:d4:6a:49:1e:5b:92:ff:95:f8:f4:9b:59:36:22:51:
         1b:22:fe:29:46:ee:22:c2:5b:f8:f4:3a:ec:3d:e9:90:c3:3c:
         1d:06:d8:0d:41:70:2d:f3:fb:a2:1b:d5:ba:67:62:e9:4b:ee:
         ee:bd:f7:08:63:4f:a1:55:41:f2:e8:35:d8:92:3f:cf:d0:35:
         70:8a:8c:b1:dc:14:b9:8b:4a:04:1d:91:68:d1:b6:1a:b9:cc:
         fd:1f:38:ae:20:26:74:63:7a:6e:d0:32:26:67:a4:e0:cb:1c:
         28:c5:17:cc:68:f6:94:7c:0f:99:09:8c:c0:ca:66:11:4c:7f:
         f6:c1:c9:cd:cd:6f:59:08:e9:ef:1b:15:ac:68:51:23:67:b0:
         6c:45:96:d2:9b:a1:29:eb:42:df:3a:9b:d5:cf:4a:3a:32:87:
         0d:d1:2e:33:d5:e4:93:54:c5:12:a6:b1:c3:99:56:80:86:d6:
         10:c5:cf:74:32:47:62:6a:9b:dd:a5:42:f8:79:62:e2:74:af:
         00:11:d2:ab:ac:67:8f:fb:6c:e7:96:47:0e:d9:2c:87:04:a4:
         cf:2f:38:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:42:03 2025 by rpki-client