Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa
File:                     3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa (raw, json)
Hash identifier:          753vyCcBG+OPAYC2STkDG9VcLNfQ7Dc5Lw2Lw7Qp9yQ=
Subject key identifier:   3F:71:7E:43:DD:D6:C3:59:09:51:6C:C0:46:55:1E:6D:82:7E:5C:00
Certificate issuer:       /CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
Certificate serial:       1ED3E5B73CEC9866003C5130F080B2466859F7A6
Authority key identifier: B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa
Signing time:             Tue 06 Aug 2024 13:39:59 +0000
ROA not before:           Tue 06 Aug 2024 13:34:59 +0000
ROA not after:            Tue 05 Aug 2025 13:39:59 +0000
asID:                     270266
IP address blocks:        200.115.104.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d3:e5:b7:3c:ec:98:66:00:3c:51:30:f0:80:b2:46:68:59:f7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
        Validity
            Not Before: Aug  6 13:34:59 2024 GMT
            Not After : Aug  5 13:39:59 2025 GMT
        Subject: CN=3F717E43DDD6C35909516CC046551E6D827E5C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:5b:ba:d4:10:c3:16:ca:a8:c7:d8:b9:64:
                    15:f1:07:3c:7b:6b:5c:51:b8:4d:d8:a8:1f:88:92:
                    af:00:35:04:cd:dd:84:af:a2:2d:75:2f:94:3a:86:
                    6c:ca:cf:8f:ce:7a:62:87:a7:82:c8:21:27:97:4e:
                    dc:e4:0b:45:f9:0d:67:69:9c:8d:22:1e:26:66:7e:
                    9a:a1:ac:19:6a:58:5c:70:1e:16:2e:66:ee:5f:9a:
                    9f:8a:ad:ea:14:2e:99:48:64:f3:3d:2b:c9:77:71:
                    bf:2f:21:f7:9f:97:74:25:30:d8:e3:a4:25:d7:64:
                    16:c0:59:8f:b7:ca:b5:ef:fc:a0:ee:09:25:d9:9a:
                    a7:bf:93:ea:db:6d:0a:03:00:15:e4:67:bd:0b:2d:
                    8b:a7:2e:22:09:1c:23:c3:15:db:cb:96:9e:3a:54:
                    5e:43:f5:3f:e6:af:2c:b4:46:c2:2a:8c:fc:02:2a:
                    82:28:03:b6:1a:09:77:ed:41:73:c8:8a:58:e4:31:
                    d0:94:9c:2b:65:b9:5f:d6:91:69:f5:fe:17:87:2c:
                    06:23:c6:3f:d0:c1:98:05:40:4c:74:d2:8f:80:5f:
                    56:4d:63:89:8a:fc:55:c0:6e:1a:25:f7:2e:35:5a:
                    d7:f6:02:07:dc:7c:b3:4d:db:1f:1c:29:ad:10:57:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:71:7E:43:DD:D6:C3:59:09:51:6C:C0:46:55:1E:6D:82:7E:5C:00
            X509v3 Authority Key Identifier:
                keyid:B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:33:e1:54:52:a6:ec:56:ab:5c:49:93:ef:08:28:36:f0:60:
         09:c6:a4:47:6b:20:97:fb:cf:c6:fe:c5:96:31:1a:2c:94:95:
         be:4d:b3:dd:55:5d:b9:95:68:7e:a8:99:bc:93:09:4c:81:79:
         fb:8e:ef:c2:ac:d0:48:28:67:bf:14:be:53:84:dc:f4:c7:cc:
         ac:f4:25:cc:5a:58:d0:7d:f2:a1:ec:91:a9:86:92:4e:4c:7e:
         c7:0b:e6:b5:e2:77:bb:52:e1:78:99:2f:d8:62:12:b6:44:6d:
         de:de:7d:56:09:08:cf:a9:68:de:99:e1:8b:fb:22:74:22:be:
         f7:9b:ca:d6:0e:21:eb:00:95:fb:08:bd:54:0b:29:2c:18:a1:
         d3:4d:d9:66:33:bc:f3:02:4a:57:d8:32:eb:de:78:95:f2:06:
         d8:8e:f8:af:9c:34:5d:3b:90:4c:45:94:ee:d3:05:e3:d8:f7:
         5b:67:75:86:52:9d:20:29:d3:8d:19:fe:32:5f:9c:b7:7a:16:
         9a:46:66:7e:16:93:26:61:85:02:7c:a5:d8:8a:11:97:d7:01:
         8a:58:80:fe:b0:83:b7:5e:43:aa:db:7a:22:e2:2d:4c:76:14:
         50:1f:42:51:8d:51:00:ff:5a:b7:03:74:c7:33:d9:7e:31:94:
         59:b9:3a:9a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHtPltzzsmGYAPFEw8ICyRmhZ96YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJCRTAyMTBEQTYxRTJBNzdFQjA0NDVFNThBNTBFN0RC
NjRGMDZDNDAeFw0yNDA4MDYxMzM0NTlaFw0yNTA4MDUxMzM5NTlaMDMxMTAvBgNV
BAMTKDNGNzE3RTQzRERENkMzNTkwOTUxNkNDMDQ2NTUxRTZEODI3RTVDMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdrlu61BDDFsqox9i5ZBXxBzx7
a1xRuE3YqB+Ikq8ANQTN3YSvoi11L5Q6hmzKz4/OemKHp4LIISeXTtzkC0X5DWdp
nI0iHiZmfpqhrBlqWFxwHhYuZu5fmp+KreoULplIZPM9K8l3cb8vIfefl3QlMNjj
pCXXZBbAWY+3yrXv/KDuCSXZmqe/k+rbbQoDABXkZ70LLYunLiIJHCPDFdvLlp46
VF5D9T/mryy0RsIqjPwCKoIoA7YaCXftQXPIiljkMdCUnCtluV/WkWn1/heHLAYj
xj/QwZgFQEx00o+AX1ZNY4mK/FXAbhol9y41Wtf2AgfcfLNN2x8cKa0QV6NZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUP3F+Q93Ww1kJUWzARlUebYJ+XAAwHwYDVR0j
BBgwFoAUsr4CENph4qd+sEReWKUOfbZPBsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1hydVFhSHZMVE1nV3FZTmJFNk16SnVDenI0ZEdiVmNVUjRRS3lQZldz
cHkvMC9CMkJFMDIxMERBNjFFMkE3N0VCMDQ0NUU1OEE1MEU3REI2NEYwNkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyQkUwMjEwREE2MUUyQTc3
RUIwNDQ1RTU4QTUwRTdEQjY0RjA2QzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYcnVRYUh2TFRNZ1dxWU5iRTZNekp1Q3pyNGRHYlZjVVI0UUt5UGZXc3B5LzAv
MzIzMDMwMmUzMTMxMzUyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDMyMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshzaDANBgkqhkiG9w0BAQsFAAOCAQEAqjPh
VFKm7FarXEmT7wgoNvBgCcakR2sgl/vPxv7FljEaLJSVvk2z3VVduZVofqiZvJMJ
TIF5+47vwqzQSChnvxS+U4Tc9MfMrPQlzFpY0H3yoeyRqYaSTkx+xwvmteJ3u1Lh
eJkv2GIStkRt3t59VgkIz6lo3pnhi/sidCK+95vK1g4h6wCV+wi9VAspLBih003Z
ZjO88wJKV9gy6954lfIG2I74r5w0XTuQTEWU7tMF49j3W2d1hlKdICnTjRn+Ml+c
t3oWmkZmfhaTJmGFAnyl2IoRl9cBiliA/rCDt15Dqtt6IuItTHYUUB9CUY1RAP9a
twN0xzPZfjGUWbk6mg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:15 2025 by rpki-client