Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e31382e302e302f32302d3234203d3e203130373135.roa
File:                     3230302e31382e302e302f32302d3234203d3e203130373135.roa (raw, json)
Hash identifier:          USZoNjqjcV9uNlw2f8KnA2YzBEELVAk/5Ux09ObZ900=
Subject key identifier:   06:38:B9:14:16:2D:C3:88:69:66:AC:04:72:CD:17:44:8D:4B:C7:BD
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       5CF07E7F218F893A9B171AD8735C692D9B584C85
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e31382e302e302f32302d3234203d3e203130373135.roa
Signing time:             Wed 05 Mar 2025 20:25:52 +0000
ROA not before:           Wed 05 Mar 2025 20:20:52 +0000
ROA not after:            Wed 04 Mar 2026 20:25:52 +0000
asID:                     10715
IP address blocks:        200.18.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f0:7e:7f:21:8f:89:3a:9b:17:1a:d8:73:5c:69:2d:9b:58:4c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Mar  5 20:20:52 2025 GMT
            Not After : Mar  4 20:25:52 2026 GMT
        Subject: CN=0638B914162DC3886966AC0472CD17448D4BC7BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:cb:dd:73:2f:6b:67:a3:88:20:a8:01:bf:
                    fa:7d:49:37:91:d6:02:52:0c:bd:a8:e0:d3:99:49:
                    5f:d5:7d:06:63:53:71:c2:69:eb:df:05:d9:da:83:
                    72:09:0f:b3:b6:81:9d:7e:42:77:cc:b1:cc:c1:c7:
                    3d:82:e3:3a:2b:86:16:bb:4c:f6:9a:38:df:66:32:
                    53:11:74:a0:da:8f:9e:a8:30:c0:e4:b3:8d:70:5d:
                    17:ae:a1:51:62:8e:69:ce:10:fd:d5:8a:e7:6c:61:
                    26:38:64:dd:7b:cb:72:f4:e0:11:87:7e:96:ea:49:
                    5a:a0:09:d2:f5:38:fe:b7:3a:44:4d:94:fb:16:59:
                    00:90:25:bf:2c:63:8a:7a:23:b4:73:3a:b3:08:41:
                    9b:6b:2f:16:d0:6f:47:a9:73:ad:66:4d:39:3b:a5:
                    fa:83:5c:63:d3:a9:6a:bf:d0:7a:3a:84:59:a6:12:
                    5a:3f:c3:e4:c2:dd:bb:b2:54:bb:7d:a1:d6:08:0c:
                    1c:4d:6a:0e:44:37:88:a4:f0:39:5f:9d:4d:b4:ff:
                    52:e8:66:9a:59:e3:5c:4d:4f:e1:89:9c:c6:a7:9f:
                    38:a9:d8:ba:e4:7a:eb:f4:eb:e3:61:ca:99:32:e1:
                    fb:36:9e:8e:8b:62:2a:ce:b7:df:99:7c:77:12:99:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:38:B9:14:16:2D:C3:88:69:66:AC:04:72:CD:17:44:8D:4B:C7:BD
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e31382e302e302f32302d3234203d3e203130373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:06:04:f0:1b:f4:d8:3d:63:a7:24:74:3b:0a:9a:d7:af:
         7c:cd:d3:35:dc:83:2b:11:b1:7e:0f:3d:6f:3c:6b:98:bd:45:
         55:c8:46:0b:4e:d1:1f:6e:5f:97:8d:b0:57:f8:04:de:bd:85:
         5f:31:d7:80:80:7e:77:dc:ee:03:16:d7:b3:18:b2:0a:f4:73:
         b0:6b:c6:1c:b0:15:0d:29:e3:4b:cb:ab:bb:2d:2f:82:cd:22:
         5b:61:a0:89:e8:f4:0f:ec:cd:45:29:9f:c1:78:64:15:37:e4:
         bf:41:9c:d2:54:f3:c6:45:0f:d1:ed:54:67:cb:f9:ff:76:76:
         00:00:73:44:78:ce:57:df:bb:50:c4:ea:7c:d7:43:70:0d:54:
         25:45:15:51:63:78:fa:e9:a6:97:66:94:c4:04:47:8a:17:57:
         22:39:0b:ec:82:df:77:de:9d:8d:6b:f8:e2:cb:5a:fe:61:a5:
         f8:5c:8c:0d:b3:23:f4:c8:64:24:d5:46:20:ce:cf:85:bf:ae:
         11:84:1b:36:e0:05:02:99:9c:13:c5:b9:f5:65:15:78:91:10:
         09:cb:d5:1e:17:f4:81:60:e0:7b:18:43:17:4d:0a:fe:bf:c6:
         97:2b:be:02:90:b0:57:25:22:3b:d0:63:52:80:2a:3f:6a:1e:
         e5:2c:86:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:30 2025 by rpki-client