Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa
File:                     3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa (raw, json)
Hash identifier:          IFW5g1qVhgy5lCJ/cQF+Lleela9zm/7dvJU0i/tInH0=
Subject key identifier:   89:40:84:B7:3D:C7:F0:6C:3F:6C:81:EF:09:28:F0:E1:5F:7B:B9:CD
Certificate issuer:       /CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
Certificate serial:       01C1B57F9BEDA60B3FFF2E39B484BC74098BD1C9
Authority key identifier: B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa
Signing time:             Tue 06 Aug 2024 13:39:50 +0000
ROA not before:           Tue 06 Aug 2024 13:34:50 +0000
ROA not after:            Tue 05 Aug 2025 13:39:50 +0000
asID:                     270266
IP address blocks:        200.115.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c1:b5:7f:9b:ed:a6:0b:3f:ff:2e:39:b4:84:bc:74:09:8b:d1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
        Validity
            Not Before: Aug  6 13:34:50 2024 GMT
            Not After : Aug  5 13:39:50 2025 GMT
        Subject: CN=894084B73DC7F06C3F6C81EF0928F0E15F7BB9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:38:12:da:2a:90:1e:b2:bc:f3:4d:44:ee:
                    2e:ab:70:c1:0c:ab:94:42:81:a1:bf:19:94:89:36:
                    f9:cc:94:ef:e3:dc:a8:98:01:76:44:b1:c8:76:d0:
                    db:af:54:99:1c:e9:44:ca:07:58:13:1d:a1:9c:c1:
                    ad:53:02:88:1f:97:20:c9:a6:38:42:56:b7:b5:b6:
                    c6:d6:7d:31:72:db:f8:96:f2:b1:2f:2e:76:e1:dc:
                    63:20:36:f1:bb:5f:24:66:d9:de:e1:ff:58:80:32:
                    33:a8:19:8f:00:5f:2a:88:5f:65:d3:30:75:b4:bd:
                    fd:35:15:01:56:05:ae:2e:35:fe:3c:56:6d:78:b6:
                    21:c1:bb:c0:45:df:ed:8a:2a:ad:03:4a:a1:06:d4:
                    47:2c:79:28:cc:48:0a:2c:fe:68:78:2c:54:78:f8:
                    b0:61:98:d2:67:e6:27:76:e6:47:49:d6:27:6c:28:
                    d3:ae:af:ba:4b:61:47:b4:f0:2d:66:c6:d1:17:0b:
                    7f:7c:86:51:fd:1f:d9:54:e1:ef:93:ad:72:d5:28:
                    79:42:ec:6a:51:32:00:1a:e6:4f:ff:2e:6e:e8:26:
                    42:f0:59:f7:4d:0b:b6:28:cb:a3:20:5d:b6:b0:5c:
                    22:ab:c5:fc:cc:26:b6:fc:cc:76:b2:cb:30:8f:5e:
                    82:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:40:84:B7:3D:C7:F0:6C:3F:6C:81:EF:09:28:F0:E1:5F:7B:B9:CD
            X509v3 Authority Key Identifier:
                keyid:B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:33:fd:43:70:8d:76:61:8f:4c:c0:77:c0:1a:d7:ee:33:85:
         98:e4:c7:51:b9:47:f0:2b:eb:e7:74:13:91:34:e9:0c:dd:20:
         1e:4b:c8:80:10:b6:ed:66:e4:45:c1:f7:a9:29:2c:6f:1a:5f:
         4d:6b:a6:43:4c:4f:28:97:9a:67:2a:00:0a:89:53:15:eb:21:
         fb:5f:86:f5:c1:ba:cf:80:2b:03:e3:97:6f:fd:29:9f:2b:46:
         4c:4d:8e:92:77:d7:81:b0:d8:1f:f8:c6:e4:3e:d7:40:f1:a6:
         71:a8:29:4d:fc:69:f2:97:4f:e4:d5:bf:e8:5f:bb:0b:63:ab:
         e5:4a:bf:c4:52:18:b8:b3:a4:5d:53:a9:0b:d5:30:a4:79:42:
         34:2d:9d:a0:31:ac:29:fb:6c:d2:69:ed:b3:4b:e8:3e:a9:4f:
         b9:57:ac:fb:e7:4e:c8:fe:5c:46:04:8d:49:8f:86:0c:d2:9d:
         a0:a5:27:da:71:e9:1e:7d:cc:65:4a:e2:10:0e:22:07:94:db:
         64:df:d3:c6:8e:33:a6:53:e6:50:25:fe:6a:67:4c:d1:fb:e4:
         09:0f:90:83:83:6c:4b:62:1d:81:3e:6b:33:25:9b:e2:95:5b:
         6c:10:fc:39:5e:0d:5a:5e:8d:cf:69:05:ed:59:d1:64:27:b1:
         ce:22:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:04 2025 by rpki-client