Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3230302e3139362e3134302e302f32322d3332203d3e203532373930.roa
File:                     3230302e3139362e3134302e302f32322d3332203d3e203532373930.roa (raw, json)
Hash identifier:          GAAXkPhjHAYk608pHC6yuagPUrwR3qxPbb0gc1OCqw8=
Subject key identifier:   F5:34:E6:78:43:52:65:16:38:FB:47:D2:4A:FD:51:11:09:57:E5:76
Certificate issuer:       /CN=A55E93D565F6F77E37BF561CEEE467048A013F7C
Certificate serial:       4AB216A639EA85243CABC7DEDF162A8E13D41FF0
Authority key identifier: A5:5E:93:D5:65:F6:F7:7E:37:BF:56:1C:EE:E4:67:04:8A:01:3F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55E93D565F6F77E37BF561CEEE467048A013F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3230302e3139362e3134302e302f32322d3332203d3e203532373930.roa
Signing time:             Fri 14 Feb 2025 11:17:10 +0000
ROA not before:           Fri 14 Feb 2025 11:12:10 +0000
ROA not after:            Fri 13 Feb 2026 11:17:10 +0000
asID:                     52790
IP address blocks:        200.196.140.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b2:16:a6:39:ea:85:24:3c:ab:c7:de:df:16:2a:8e:13:d4:1f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55E93D565F6F77E37BF561CEEE467048A013F7C
        Validity
            Not Before: Feb 14 11:12:10 2025 GMT
            Not After : Feb 13 11:17:10 2026 GMT
        Subject: CN=F534E6784352651638FB47D24AFD51110957E576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:b9:8e:3d:82:09:ff:ae:86:f6:0f:92:c3:
                    a6:e5:48:0a:ae:4e:f2:ac:36:ae:2b:42:b5:03:a0:
                    d2:e1:c8:eb:a9:0a:72:df:4f:16:7f:ec:21:2d:ba:
                    61:ce:54:83:41:a8:80:a2:b9:a9:26:97:46:ee:f4:
                    0e:9f:7f:ca:3d:2b:b7:af:fb:00:30:9d:0c:b9:0a:
                    48:4f:b0:63:fe:16:28:97:7e:12:9d:9f:4f:59:00:
                    8b:29:6f:5a:9c:91:e5:2f:b8:fe:5e:f6:d9:1b:6c:
                    3b:c8:89:42:18:0e:04:55:55:5c:e1:c4:16:72:b2:
                    2e:0c:42:74:74:6f:5c:4d:fc:86:c3:e3:c3:f7:e8:
                    27:aa:0c:e3:45:9e:d5:77:49:5b:44:8b:c4:86:19:
                    b1:0e:81:ab:a9:b3:8f:03:72:21:6c:bc:e6:04:cb:
                    8b:ad:a4:0d:fc:f3:56:bb:06:2c:cd:c8:7a:9b:2f:
                    7a:42:e8:01:6f:69:f1:64:ff:e8:3a:4b:5e:33:42:
                    73:5b:82:96:3b:93:7d:11:e8:6f:fc:9d:57:ba:46:
                    e6:87:01:1a:dd:c2:a9:09:70:18:58:79:dc:13:ba:
                    b9:9b:37:93:25:4b:ad:70:ba:48:e1:89:33:18:47:
                    22:59:9b:43:1e:31:58:41:e5:aa:4d:f9:cf:7b:c3:
                    89:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:34:E6:78:43:52:65:16:38:FB:47:D2:4A:FD:51:11:09:57:E5:76
            X509v3 Authority Key Identifier:
                keyid:A5:5E:93:D5:65:F6:F7:7E:37:BF:56:1C:EE:E4:67:04:8A:01:3F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/A55E93D565F6F77E37BF561CEEE467048A013F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55E93D565F6F77E37BF561CEEE467048A013F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3230302e3139362e3134302e302f32322d3332203d3e203532373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:d0:54:b5:46:8b:8a:94:11:45:3c:9e:6d:ab:18:db:69:36:
         4a:5d:ae:a4:73:90:57:6d:b3:6c:5e:af:9a:54:a7:52:9f:bc:
         f5:2d:e5:16:c1:02:fa:0a:41:84:e4:fd:60:64:93:77:82:8c:
         96:12:7a:10:f7:f1:ea:fa:d9:f8:23:5b:f3:6e:7b:7e:95:7e:
         23:79:07:36:a6:84:8f:cd:8f:36:4a:90:94:e6:2b:d1:9b:e4:
         a1:3d:30:0f:de:c8:b5:fa:a8:ff:ab:b7:fb:6e:40:29:e2:8f:
         20:c5:97:0a:b3:a7:53:2b:ff:fa:a9:88:83:d8:71:a3:a2:c5:
         65:e0:e4:52:13:6e:a7:39:98:74:a6:34:f0:fa:9a:4a:14:a5:
         de:ec:90:55:a1:8b:28:49:bc:13:b9:22:ba:ca:06:bf:91:06:
         70:c2:5c:1a:52:a6:ef:d1:49:a6:70:3b:b4:35:20:0b:73:82:
         2c:a2:9a:a2:4f:d7:c7:29:6d:f9:53:de:0c:f4:c5:a9:13:cd:
         9d:fe:9e:7d:9f:94:8e:70:d4:09:7a:1b:d8:0b:7a:96:e0:11:
         06:6b:d7:2f:9b:af:62:16:91:34:27:4c:2d:37:12:fb:f9:81:
         5e:b0:c4:d2:e9:ad:18:7d:02:67:8e:55:5d:4a:f2:46:9c:01:
         58:dc:66:08
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSrIWpjnqhSQ8q8fe3xYqjhPUH/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU1RTkzRDU2NUY2Rjc3RTM3QkY1NjFDRUVFNDY3MDQ4
QTAxM0Y3QzAeFw0yNTAyMTQxMTEyMTBaFw0yNjAyMTMxMTE3MTBaMDMxMTAvBgNV
BAMTKEY1MzRFNjc4NDM1MjY1MTYzOEZCNDdEMjRBRkQ1MTExMDk1N0U1NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrermOPYIJ/66G9g+Sw6blSAqu
TvKsNq4rQrUDoNLhyOupCnLfTxZ/7CEtumHOVINBqICiuakml0bu9A6ff8o9K7ev
+wAwnQy5CkhPsGP+FiiXfhKdn09ZAIspb1qckeUvuP5e9tkbbDvIiUIYDgRVVVzh
xBZysi4MQnR0b1xN/IbD48P36CeqDONFntV3SVtEi8SGGbEOgaups48DciFsvOYE
y4utpA3881a7BizNyHqbL3pC6AFvafFk/+g6S14zQnNbgpY7k30R6G/8nVe6RuaH
ARrdwqkJcBhYedwTurmbN5MlS61wukjhiTMYRyJZm0MeMVhB5apN+c97w4n7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9TTmeENSZRY4+0fSSv1REQlX5XYwHwYDVR0j
BBgwFoAUpV6T1WX29343v1Yc7uRnBIoBP3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmJRamZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdj
dU4vMC9BNTVFOTNENTY1RjZGNzdFMzdCRjU2MUNFRUU0NjcwNDhBMDEzRjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NUU5M0Q1NjVGNkY3N0Uz
N0JGNTYxQ0VFRTQ2NzA0OEEwMTNGN0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZiUWpmQ1B3TG9mY1B1NVZieDdLRWRFc3AxdDVRSkV1clBjeVBhaVhnY3VOLzAv
MzIzMDMwMmUzMTM5MzYyZTMxMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzIzNzM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIxIwwDQYJKoZIhvcNAQELBQADggEBAK7QVLVG
i4qUEUU8nm2rGNtpNkpdrqRzkFdts2xer5pUp1KfvPUt5RbBAvoKQYTk/WBkk3eC
jJYSehD38er62fgjW/Nue36VfiN5BzamhI/NjzZKkJTmK9Gb5KE9MA/eyLX6qP+r
t/tuQCnijyDFlwqzp1Mr//qpiIPYcaOixWXg5FITbqc5mHSmNPD6mkoUpd7skFWh
iyhJvBO5IrrKBr+RBnDCXBpSpu/RSaZwO7Q1IAtzgiyimqJP18cpbflT3gz0xakT
zZ3+nn2flI5w1Al6G9gLepbgEQZr1y+br2IWkTQnTC03Evv5gV6wxNLprRh9AmeO
VV1K8kacAVjcZgg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:23:03 2025 by rpki-client