Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e302e302f32342d3234203d3e20323731303137.roa
File:                     3230302e3231392e302e302f32342d3234203d3e20323731303137.roa (raw, json)
Hash identifier:          +bJw5mbpmMUNin/92WExmliztOBul4k1RlgLSxI/TDM=
Subject key identifier:   69:82:25:AB:12:3C:E8:38:D0:D6:30:27:14:F8:BC:04:E5:62:89:54
Certificate issuer:       /CN=227999345B6825C592F26D792A9A591CD758367B
Certificate serial:       74AA01BAB7F3FD76FFF85B7A5082C8AE44FBFBC5
Authority key identifier: 22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/227999345B6825C592F26D792A9A591CD758367B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e302e302f32342d3234203d3e20323731303137.roa
Signing time:             Thu 28 Mar 2024 18:51:22 +0000
ROA not before:           Thu 28 Mar 2024 18:46:22 +0000
ROA not after:            Thu 27 Mar 2025 18:51:22 +0000
asID:                     271017
IP address blocks:        200.219.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:aa:01:ba:b7:f3:fd:76:ff:f8:5b:7a:50:82:c8:ae:44:fb:fb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227999345B6825C592F26D792A9A591CD758367B
        Validity
            Not Before: Mar 28 18:46:22 2024 GMT
            Not After : Mar 27 18:51:22 2025 GMT
        Subject: CN=698225AB123CE838D0D6302714F8BC04E5628954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:9b:28:85:b4:95:d9:e4:c4:cc:10:a2:62:
                    96:eb:57:58:ef:51:17:ce:20:c2:7c:4b:d1:88:96:
                    04:f8:5b:34:1a:5a:84:c1:cd:11:2d:3a:57:14:5e:
                    e9:6f:e1:b1:49:71:7c:24:35:38:64:48:63:37:21:
                    c5:44:fe:1f:9a:2a:c7:e6:2f:17:16:1e:e8:28:c7:
                    60:8b:6d:3a:5a:e2:49:74:5e:d6:87:a5:3f:9b:14:
                    34:a8:1b:4a:44:bb:68:c4:9e:43:3e:60:cf:8a:f7:
                    dc:dd:eb:43:b5:af:5b:62:cc:39:3e:c2:f5:6c:53:
                    e7:60:c5:26:f7:a7:c9:0c:7e:ec:7b:f8:ee:f9:78:
                    63:2e:10:7e:ee:76:36:7c:17:97:48:52:b9:84:1f:
                    e4:cc:e7:ae:c4:96:b6:69:f2:12:2e:b3:71:73:c3:
                    58:e0:e0:0c:40:e6:a5:bd:f5:24:dd:c6:ec:86:02:
                    88:15:0b:80:d5:49:d4:fa:33:2b:aa:39:c1:4d:49:
                    05:9d:e6:e7:54:5c:71:b7:18:3a:d1:ed:71:c5:5b:
                    91:bd:13:55:38:1a:28:89:ee:0e:f8:1a:13:eb:5e:
                    64:7d:bb:46:31:2c:9b:ce:b5:41:7d:7f:0b:ae:ae:
                    22:d9:14:dd:9d:4d:fd:c6:98:ab:36:3a:b7:8c:8b:
                    52:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:82:25:AB:12:3C:E8:38:D0:D6:30:27:14:F8:BC:04:E5:62:89:54
            X509v3 Authority Key Identifier:
                keyid:22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/227999345B6825C592F26D792A9A591CD758367B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/227999345B6825C592F26D792A9A591CD758367B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e302e302f32342d3234203d3e20323731303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:64:bc:95:e4:72:21:11:c3:3f:a2:85:a3:00:fb:bb:16:d7:
         b2:0e:f7:09:f5:d1:fa:06:ed:72:67:e1:06:2b:ca:9e:36:a4:
         0c:c9:d4:da:13:12:6c:8d:22:0f:66:8e:18:3c:10:63:82:36:
         41:2d:f8:9e:fe:f5:a3:e2:1f:80:82:f3:33:67:5c:0b:dd:02:
         ec:17:1f:9b:db:2a:a7:01:02:59:30:85:66:49:23:65:7d:7d:
         e2:e6:0c:b7:d6:9f:ad:ca:ac:f5:4e:6e:00:9a:a2:cb:85:38:
         a4:d7:9f:1f:87:1f:38:be:d5:89:36:c5:89:b8:61:e4:73:b8:
         aa:7a:d0:17:33:c8:27:23:23:38:10:c0:cd:65:3d:57:72:d5:
         b2:d3:e2:6e:a9:45:a3:e7:61:58:90:d1:e5:bc:a8:66:fe:2c:
         2e:32:fe:1e:2c:6b:3c:b6:25:d5:2a:63:31:06:6c:df:49:bf:
         aa:75:33:48:77:8f:d9:fb:6f:28:18:3f:95:b0:4a:97:14:73:
         d4:a9:8e:28:40:3a:74:eb:0d:60:bb:80:a8:b1:62:f2:fc:26:
         7e:76:7b:85:7c:a0:03:fe:88:b6:d6:35:3d:b2:62:2b:66:51:
         b2:52:35:85:f7:0d:48:6c:83:9e:21:51:a6:21:b3:f6:ba:4c:
         da:d6:15:a0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdKoBurfz/Xb/+Ft6UILIrkT7+8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI3OTk5MzQ1QjY4MjVDNTkyRjI2RDc5MkE5QTU5MUNE
NzU4MzY3QjAeFw0yNDAzMjgxODQ2MjJaFw0yNTAzMjcxODUxMjJaMDMxMTAvBgNV
BAMTKDY5ODIyNUFCMTIzQ0U4MzhEMEQ2MzAyNzE0RjhCQzA0RTU2Mjg5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyoJsohbSV2eTEzBCiYpbrV1jv
URfOIMJ8S9GIlgT4WzQaWoTBzREtOlcUXulv4bFJcXwkNThkSGM3IcVE/h+aKsfm
LxcWHugox2CLbTpa4kl0XtaHpT+bFDSoG0pEu2jEnkM+YM+K99zd60O1r1tizDk+
wvVsU+dgxSb3p8kMfux7+O75eGMuEH7udjZ8F5dIUrmEH+TM567ElrZp8hIus3Fz
w1jg4AxA5qW99STdxuyGAogVC4DVSdT6MyuqOcFNSQWd5udUXHG3GDrR7XHFW5G9
E1U4GiiJ7g74GhPrXmR9u0YxLJvOtUF9fwuuriLZFN2dTf3GmKs2OreMi1JBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaYIlqxI86DjQ1jAnFPi8BOViiVQwHwYDVR0j
BBgwFoAUInmZNFtoJcWS8m15KppZHNdYNnswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJjVWVyYWZodFhZc2JXclpEZzhCVEZnOWM0VkVmNnFvUlNrM3A3TEd0
WjgvMS8yMjc5OTkzNDVCNjgyNUM1OTJGMjZENzkyQTlBNTkxQ0Q3NTgzNjdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIyNzk5OTM0NUI2ODI1QzU5
MkYyNkQ3OTJBOUE1OTFDRDc1ODM2N0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZyY1VlcmFmaHRYWXNiV3JaRGc4QlRGZzljNFZFZjZxb1JTazNwN0xHdFo4LzEv
MzIzMDMwMmUzMjMxMzkyZTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzAzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyNsAMA0GCSqGSIb3DQEBCwUAA4IBAQCQZLyV5HIh
EcM/ooWjAPu7FteyDvcJ9dH6Bu1yZ+EGK8qeNqQMydTaExJsjSIPZo4YPBBjgjZB
Lfie/vWj4h+AgvMzZ1wL3QLsFx+b2yqnAQJZMIVmSSNlfX3i5gy31p+tyqz1Tm4A
mqLLhTik158fhx84vtWJNsWJuGHkc7iqetAXM8gnIyM4EMDNZT1XctWy0+JuqUWj
52FYkNHlvKhm/iwuMv4eLGs8tiXVKmMxBmzfSb+qdTNId4/Z+28oGD+VsEqXFHPU
qY4oQDp06w1gu4CosWLy/CZ+dnuFfKAD/oi21jU9smIrZlGyUjWF9w1IbIOeIVGm
IbP2ukza1hWg
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:40 2025 by rpki-client