Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e322e302f32342d3234203d3e20323731303137.roa
File:                     3230302e3231392e322e302f32342d3234203d3e20323731303137.roa (raw, json)
Hash identifier:          b4YrwjP8iaRkvZb/3CBL7NSFnFd4O5MwEGdFmjaHyQg=
Subject key identifier:   7C:C3:47:AD:F8:3F:10:54:BC:26:38:44:00:F2:83:CC:4A:6A:D4:44
Certificate issuer:       /CN=1E852D4B8775E20C8F2494B5AD8501A1D3F235EC
Certificate serial:       779E5B5975D2E39DED697447D2FD2E6F4A6A7D0F
Authority key identifier: 1E:85:2D:4B:87:75:E2:0C:8F:24:94:B5:AD:85:01:A1:D3:F2:35:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E852D4B8775E20C8F2494B5AD8501A1D3F235EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e322e302f32342d3234203d3e20323731303137.roa
Signing time:             Mon 04 Mar 2024 21:27:34 +0000
ROA not before:           Mon 04 Mar 2024 21:22:34 +0000
ROA not after:            Mon 03 Mar 2025 21:27:34 +0000
asID:                     271017
IP address blocks:        200.219.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9e:5b:59:75:d2:e3:9d:ed:69:74:47:d2:fd:2e:6f:4a:6a:7d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E852D4B8775E20C8F2494B5AD8501A1D3F235EC
        Validity
            Not Before: Mar  4 21:22:34 2024 GMT
            Not After : Mar  3 21:27:34 2025 GMT
        Subject: CN=7CC347ADF83F1054BC26384400F283CC4A6AD444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:4e:7c:91:35:41:1f:ae:7f:19:10:90:c5:
                    a1:3c:30:2a:4a:74:ca:cd:07:0e:9d:37:0d:2e:ac:
                    74:d3:50:ed:bd:e6:47:45:fe:d1:5d:b8:1a:8e:ef:
                    4b:50:14:6e:6d:c4:a4:91:08:b5:56:98:36:84:d8:
                    1a:b0:58:94:5e:c6:1b:c4:e0:c6:e4:37:f3:48:cd:
                    e8:5a:5c:3e:bd:b7:5f:86:9b:6f:6a:66:ef:de:e0:
                    9d:bf:d1:84:72:64:43:7d:9a:51:25:c1:e7:69:f5:
                    d1:ca:c2:88:5c:c0:82:df:0b:9c:a7:5e:c1:d0:97:
                    de:e4:bb:c8:76:01:a4:38:26:c5:5b:f6:e7:d4:ec:
                    3a:8a:42:ee:8e:15:87:2b:28:45:e2:4d:2b:96:1b:
                    59:62:33:65:c6:cc:3f:dd:59:89:0c:33:fd:f4:0f:
                    c3:13:84:63:5a:a0:1b:20:14:d8:2e:ff:c3:e9:85:
                    4a:66:14:8d:bc:3f:9b:7b:a2:7d:85:6f:f2:b0:2d:
                    f5:f7:88:d4:26:ae:ec:6b:0d:a5:43:ee:65:41:07:
                    12:9a:d3:a2:89:22:a5:fc:d6:9d:25:44:d6:59:b1:
                    85:bb:35:5b:b4:ce:af:6b:52:d3:64:a4:88:e3:f1:
                    e3:69:9d:73:a7:75:eb:5e:40:b1:d7:d2:37:a6:e9:
                    d0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C3:47:AD:F8:3F:10:54:BC:26:38:44:00:F2:83:CC:4A:6A:D4:44
            X509v3 Authority Key Identifier:
                keyid:1E:85:2D:4B:87:75:E2:0C:8F:24:94:B5:AD:85:01:A1:D3:F2:35:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/1E852D4B8775E20C8F2494B5AD8501A1D3F235EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E852D4B8775E20C8F2494B5AD8501A1D3F235EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/3230302e3231392e322e302f32342d3234203d3e20323731303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:1d:a8:6b:e6:44:14:0e:50:5d:bb:cc:5a:d1:f0:ed:5a:da:
         17:3a:5c:37:b3:e8:d4:9f:3b:bc:0e:c8:67:fa:36:81:37:26:
         fc:72:cc:2f:42:0e:a8:04:c6:3a:82:08:70:71:52:8a:f6:5c:
         5c:93:04:43:24:40:ca:80:4b:d1:15:fc:d3:eb:3c:03:f6:06:
         69:da:9a:c2:84:76:40:b4:2c:a1:6e:25:9b:05:5e:53:76:e6:
         f3:f4:f9:17:65:60:d4:60:1f:de:71:ee:a7:b3:d4:b9:81:a0:
         cf:94:49:0d:e9:ad:01:20:89:f1:34:80:eb:26:76:a8:3d:19:
         15:9e:a1:ff:c3:d6:7f:bc:f5:32:a4:01:01:07:36:5a:b6:1c:
         8f:45:8c:2b:d3:02:02:37:34:eb:c5:65:73:24:a4:fe:4c:d6:
         c5:5e:f4:31:4a:4f:cd:de:c2:db:eb:d1:a0:62:9d:a1:de:4b:
         c4:9b:74:9d:eb:e3:2a:2a:70:46:50:bc:f7:68:f4:03:4e:1e:
         1c:ef:73:69:e1:7d:e7:60:5d:ac:ef:49:33:27:c6:53:72:c7:
         76:38:e4:18:85:38:0c:81:11:65:58:9b:e9:c7:ba:74:8c:ce:
         e9:7a:d2:f8:bd:b9:38:85:2f:90:4e:43:98:56:7b:7f:da:a8:
         b6:e0:25:db
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUd55bWXXS453taXRH0v0ub0pqfQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU4NTJENEI4Nzc1RTIwQzhGMjQ5NEI1QUQ4NTAxQTFE
M0YyMzVFQzAeFw0yNDAzMDQyMTIyMzRaFw0yNTAzMDMyMTI3MzRaMDMxMTAvBgNV
BAMTKDdDQzM0N0FERjgzRjEwNTRCQzI2Mzg0NDAwRjI4M0NDNEE2QUQ0NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaN058kTVBH65/GRCQxaE8MCpK
dMrNBw6dNw0urHTTUO295kdF/tFduBqO70tQFG5txKSRCLVWmDaE2BqwWJRexhvE
4MbkN/NIzehaXD69t1+Gm29qZu/e4J2/0YRyZEN9mlElwedp9dHKwohcwILfC5yn
XsHQl97ku8h2AaQ4JsVb9ufU7DqKQu6OFYcrKEXiTSuWG1liM2XGzD/dWYkMM/30
D8MThGNaoBsgFNgu/8PphUpmFI28P5t7on2Fb/KwLfX3iNQmruxrDaVD7mVBBxKa
06KJIqX81p0lRNZZsYW7NVu0zq9rUtNkpIjj8eNpnXOndeteQLHX0jem6dB5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfMNHrfg/EFS8JjhEAPKDzEpq1EQwHwYDVR0j
BBgwFoAUHoUtS4d14gyPJJS1rYUBodPyNewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJjVWVyYWZodFhZc2JXclpEZzhCVEZnOWM0VkVmNnFvUlNrM3A3TEd0
WjgvMC8xRTg1MkQ0Qjg3NzVFMjBDOEYyNDk0QjVBRDg1MDFBMUQzRjIzNUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFODUyRDRCODc3NUUyMEM4
RjI0OTRCNUFEODUwMUExRDNGMjM1RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZyY1VlcmFmaHRYWXNiV3JaRGc4QlRGZzljNFZFZjZxb1JTazNwN0xHdFo4LzAv
MzIzMDMwMmUzMjMxMzkyZTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzAzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyNsCMA0GCSqGSIb3DQEBCwUAA4IBAQB8Hahr5kQU
DlBdu8xa0fDtWtoXOlw3s+jUnzu8Dshn+jaBNyb8cswvQg6oBMY6gghwcVKK9lxc
kwRDJEDKgEvRFfzT6zwD9gZp2prChHZAtCyhbiWbBV5Tdubz9PkXZWDUYB/ece6n
s9S5gaDPlEkN6a0BIInxNIDrJnaoPRkVnqH/w9Z/vPUypAEBBzZathyPRYwr0wIC
NzTrxWVzJKT+TNbFXvQxSk/N3sLb69GgYp2h3kvEm3Sd6+MqKnBGULz3aPQDTh4c
73Np4X3nYF2s70kzJ8ZTcsd2OOQYhTgMgRFlWJvpx7p0jM7petL4vbk4hS+QTkOY
Vnt/2qi24CXb
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:48 2025 by rpki-client