Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e31392e39362e302f32302d3234203d3e203130373135.roa
File:                     3230302e31392e39362e302f32302d3234203d3e203130373135.roa (raw, json)
Hash identifier:          fk2LVHxxs77LL5HsP/+glHtC5MM4IBjpEGdxICWfWyg=
Subject key identifier:   24:09:A4:FB:37:9F:EB:4A:9C:A9:44:CD:7F:82:1E:E8:84:01:B1:5F
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       1ACA775D683740D377F56EEF51B870E97A3C36AC
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e31392e39362e302f32302d3234203d3e203130373135.roa
Signing time:             Wed 05 Mar 2025 20:25:51 +0000
ROA not before:           Wed 05 Mar 2025 20:20:51 +0000
ROA not after:            Wed 04 Mar 2026 20:25:51 +0000
asID:                     10715
IP address blocks:        200.19.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ca:77:5d:68:37:40:d3:77:f5:6e:ef:51:b8:70:e9:7a:3c:36:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Mar  5 20:20:51 2025 GMT
            Not After : Mar  4 20:25:51 2026 GMT
        Subject: CN=2409A4FB379FEB4A9CA944CD7F821EE88401B15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:7d:79:2e:ab:1e:c5:86:8a:e6:5b:3f:b8:
                    85:24:4d:93:07:e9:16:b1:cc:b0:f6:96:ef:04:dc:
                    35:e9:b1:d0:b6:c2:26:16:ec:ae:c3:45:03:3b:73:
                    86:12:ad:71:f5:d9:31:46:76:ea:8f:5a:83:7c:51:
                    83:90:59:31:be:e8:53:df:3a:6a:4f:db:4e:80:7b:
                    ed:39:48:7a:a2:28:d8:81:98:5f:12:66:cb:4d:ac:
                    fc:cd:30:a0:32:aa:4a:c1:0d:05:a1:78:9f:86:dd:
                    34:72:ec:9b:7c:a8:9c:0f:12:3d:95:f8:13:4b:c1:
                    17:1e:ea:07:82:1a:b7:fd:42:df:e6:cf:6f:f5:9f:
                    4e:4b:99:b3:9c:20:52:3c:f6:7f:2f:65:e3:4a:e7:
                    21:cb:10:06:e7:ed:83:9c:45:47:50:24:17:a4:bd:
                    e8:5c:03:92:45:8e:91:f7:ad:5c:f3:47:45:6d:ae:
                    1a:a3:98:54:7c:dc:9d:9c:b8:1c:02:95:db:2d:fc:
                    e6:fc:ae:e5:8e:97:83:8b:8e:19:60:5f:25:6c:b0:
                    a0:d4:05:98:00:be:45:21:f5:b0:27:ef:89:d1:d6:
                    81:54:b9:e2:b9:43:3a:3f:e0:f9:cf:31:2b:5e:2f:
                    27:cb:32:6a:6c:e4:c9:f0:bc:db:aa:a7:b9:45:05:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:09:A4:FB:37:9F:EB:4A:9C:A9:44:CD:7F:82:1E:E8:84:01:B1:5F
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e31392e39362e302f32302d3234203d3e203130373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:33:9c:d4:8d:e0:81:83:0a:dc:4f:79:1d:3c:15:f0:a3:
         6a:1c:be:8f:ad:03:34:9b:89:9e:04:e4:83:dd:22:7d:7a:16:
         14:d9:d6:eb:29:47:7c:3a:cf:f4:9c:06:16:e8:50:c2:56:73:
         d3:c0:c2:4b:e6:3c:b4:1c:16:24:7a:f3:70:88:cd:ff:06:7a:
         0e:d8:49:fc:73:b5:b3:d4:a0:41:31:b1:6d:d3:42:be:f0:af:
         b2:69:bc:74:b1:f2:79:44:1a:96:3a:fe:c5:78:64:b8:04:21:
         e2:70:ca:f3:0c:68:fa:18:de:2e:c9:29:5b:83:96:31:b0:f3:
         32:02:b8:39:0b:4f:b2:e7:bb:0e:d1:8c:77:1d:27:b9:50:2f:
         07:c2:de:85:ff:b1:33:85:b0:3e:f5:43:3b:38:77:03:81:b6:
         41:be:5c:cd:20:7c:68:bb:66:81:66:b5:d9:33:1c:8a:20:21:
         80:52:7e:58:26:2d:68:bf:a7:5b:86:14:04:f5:65:8e:82:f0:
         40:83:9a:93:45:2f:c0:f7:dc:ad:19:20:7f:3c:19:04:f9:39:
         0d:ce:29:af:25:0d:7a:d7:03:59:f5:c6:49:13:46:8a:99:09:
         f3:12:11:36:ec:af:5d:59:e5:a0:e6:42:e0:4a:81:f8:98:3e:
         17:80:63:bc
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGsp3XWg3QNN39W7vUbhw6Xo8NqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU2NkFCMTNERjE5RjJFODkzNUNBRkIxMTlFNDAzMDhE
MEEwODE0NjAeFw0yNTAzMDUyMDIwNTFaFw0yNjAzMDQyMDI1NTFaMDMxMTAvBgNV
BAMTKDI0MDlBNEZCMzc5RkVCNEE5Q0E5NDRDRDdGODIxRUU4ODQwMUIxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2X15LqsexYaK5ls/uIUkTZMH
6RaxzLD2lu8E3DXpsdC2wiYW7K7DRQM7c4YSrXH12TFGduqPWoN8UYOQWTG+6FPf
OmpP206Ae+05SHqiKNiBmF8SZstNrPzNMKAyqkrBDQWheJ+G3TRy7Jt8qJwPEj2V
+BNLwRce6geCGrf9Qt/mz2/1n05LmbOcIFI89n8vZeNK5yHLEAbn7YOcRUdQJBek
vehcA5JFjpH3rVzzR0VtrhqjmFR83J2cuBwCldst/Ob8ruWOl4OLjhlgXyVssKDU
BZgAvkUh9bAn74nR1oFUueK5Qzo/4PnPMSteLyfLMmps5MnwvNuqp7lFBSfxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJAmk+zef60qcqUTNf4Ie6IQBsV8wHwYDVR0j
BBgwFoAU5WarE98Z8uiTXK+xGeQDCNCggUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlF2blVuRVhlNUpUZjdWaFFIblVGUndkemVFcGJGNHJ0M2I1UExydmRl
eXkvMS9FNTY2QUIxM0RGMTlGMkU4OTM1Q0FGQjExOUU0MDMwOEQwQTA4MTQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1NjZBQjEzREYxOUYyRTg5
MzVDQUZCMTE5RTQwMzA4RDBBMDgxNDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRdm5VbkVYZTVKVGY3VmhRSG5VRlJ3ZHplRXBiRjRydDNiNVBMcnZkZXl5LzEv
MzIzMDMwMmUzMTM5MmUzOTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzMDM3
MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBMgTYDANBgkqhkiG9w0BAQsFAAOCAQEAMFwznNSN4IGD
CtxPeR08FfCjahy+j60DNJuJngTkg90ifXoWFNnW6ylHfDrP9JwGFuhQwlZz08DC
S+Y8tBwWJHrzcIjN/wZ6DthJ/HO1s9SgQTGxbdNCvvCvsmm8dLHyeUQaljr+xXhk
uAQh4nDK8wxo+hjeLskpW4OWMbDzMgK4OQtPsue7DtGMdx0nuVAvB8Lehf+xM4Ww
PvVDOzh3A4G2Qb5czSB8aLtmgWa12TMciiAhgFJ+WCYtaL+nW4YUBPVljoLwQIOa
k0UvwPfcrRkgfzwZBPk5Dc4pryUNetcDWfXGSRNGipkJ8xIRNuyvXVnloOZC4EqB
+Jg+F4BjvA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:34:08 2025 by rpki-client