Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e312e302f32342d3234203d3e20323731303137.roa
File:                     3230302e3231392e312e302f32342d3234203d3e20323731303137.roa (raw, json)
Hash identifier:          VRLmBk0KCXeAWBhrJgrkG+fuA0SNRHhFQz53Yuzm/MQ=
Subject key identifier:   E4:9D:80:81:78:EC:D6:98:92:5F:51:73:5F:DD:DE:4E:37:C2:9C:4F
Certificate issuer:       /CN=1E852D4B8775E20C8F2494B5AD8501A1D3F235EC
Certificate serial:       4B2B44EBE2FE660A2E404CA9FB613CC58B056082
Authority key identifier: 1E:85:2D:4B:87:75:E2:0C:8F:24:94:B5:AD:85:01:A1:D3:F2:35:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E852D4B8775E20C8F2494B5AD8501A1D3F235EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e312e302f32342d3234203d3e20323731303137.roa
Signing time:             Mon 04 Mar 2024 21:27:35 +0000
ROA not before:           Mon 04 Mar 2024 21:22:35 +0000
ROA not after:            Mon 03 Mar 2025 21:27:35 +0000
asID:                     271017
IP address blocks:        200.219.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2b:44:eb:e2:fe:66:0a:2e:40:4c:a9:fb:61:3c:c5:8b:05:60:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E852D4B8775E20C8F2494B5AD8501A1D3F235EC
        Validity
            Not Before: Mar  4 21:22:35 2024 GMT
            Not After : Mar  3 21:27:35 2025 GMT
        Subject: CN=E49D808178ECD698925F51735FDDDE4E37C29C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:2b:3d:b8:fe:9d:da:1b:03:d1:e1:45:a9:
                    88:ff:63:aa:89:28:52:5f:22:7a:52:d4:51:66:d7:
                    81:66:85:7f:6f:33:ea:8e:86:f5:50:76:9f:74:a4:
                    b4:35:21:3c:8e:cd:77:b3:f3:64:c1:e4:67:ba:3b:
                    8c:f7:d4:d0:46:1f:a7:27:b9:5f:61:9f:6a:27:79:
                    42:9e:db:a9:f4:ae:e1:6c:8b:20:39:1e:d7:fa:50:
                    3a:f3:66:99:bc:7f:87:63:fa:44:b0:45:05:c3:14:
                    a7:ed:16:90:1d:9e:7d:ed:56:e2:a8:61:be:af:07:
                    a4:12:cd:cd:4b:31:80:79:fe:c5:27:4e:f0:f1:f9:
                    b6:6f:60:4d:1c:d0:85:f0:d6:6c:e1:f6:cb:32:5e:
                    e8:e3:23:52:f5:2e:41:ae:4d:88:8e:35:b2:8f:de:
                    fb:2a:86:d3:84:5c:50:3e:b4:8f:c0:be:dd:b1:32:
                    30:5e:5d:f1:51:5b:3c:88:9c:c8:40:db:8a:2c:5b:
                    90:f8:cc:6e:79:40:e4:c5:73:b9:1a:5d:ae:c9:cb:
                    e4:c8:08:5a:34:11:ec:e4:a1:a3:bd:04:31:77:af:
                    15:19:fa:d0:ba:d8:9d:7e:f9:08:21:63:92:37:73:
                    03:ef:ad:34:1e:2d:1c:b9:0d:87:d2:36:2c:9d:34:
                    0f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9D:80:81:78:EC:D6:98:92:5F:51:73:5F:DD:DE:4E:37:C2:9C:4F
            X509v3 Authority Key Identifier:
                keyid:1E:85:2D:4B:87:75:E2:0C:8F:24:94:B5:AD:85:01:A1:D3:F2:35:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/1E852D4B8775E20C8F2494B5AD8501A1D3F235EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E852D4B8775E20C8F2494B5AD8501A1D3F235EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e312e302f32342d3234203d3e20323731303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:58:30:13:c2:4b:ee:52:09:a1:46:84:17:69:da:51:a2:
         89:5b:ce:a5:a9:91:70:9b:4e:15:2b:b5:41:95:9f:67:41:81:
         29:ed:eb:15:39:e5:b4:24:72:8b:df:db:2a:9a:9a:c8:9a:0e:
         56:e7:05:1e:1f:97:4f:a8:62:b9:1a:06:07:b5:bb:7d:f5:1f:
         04:a6:8f:ce:2a:72:bc:16:1c:e6:de:2a:70:eb:80:42:59:7e:
         8f:2c:d6:96:b0:3a:7e:71:4a:ac:38:fb:98:e9:5b:d0:da:04:
         af:c7:f5:81:31:00:20:b6:71:59:f9:13:89:fd:69:12:bb:5e:
         bb:38:69:d9:03:70:1b:12:f1:d1:86:fb:44:5b:47:7c:5b:4a:
         c7:6c:a8:c6:ce:a3:aa:7e:44:67:95:93:08:dc:18:fe:b0:43:
         b1:9c:fa:ce:ec:01:7d:27:5b:77:37:3d:46:1f:2b:bb:c7:ac:
         4a:d4:5d:ea:e8:aa:9f:52:93:0c:15:49:db:e0:97:f7:55:fc:
         dd:95:e6:71:39:5c:11:ca:49:e6:e5:92:51:9a:67:bd:ef:51:
         0a:72:90:a1:fc:50:7e:94:61:23:47:12:ac:1f:f1:2c:92:64:
         d0:fa:73:09:e6:9b:44:b7:a2:c5:70:ea:a2:28:49:6e:23:77:
         58:35:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:26:00 2025 by rpki-client