Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa
File:                     3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa (raw, json)
Hash identifier:          8wvSLHQQsaSJY//VOW7+woEmL4+S6IAPcUfC8pz0/Aw=
Subject key identifier:   EA:F0:9F:52:6C:64:00:1D:C5:70:B5:0E:79:E8:3A:F2:0C:B6:AB:48
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       36DD1B1DC6357D2F0A9E7ACD8A57D6F0E722DB25
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268744
IP address blocks:        200.132.240.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:dd:1b:1d:c6:35:7d:2f:0a:9e:7a:cd:8a:57:d6:f0:e7:22:db:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:3a:08:ba:0b:49:ab:69:47:63:fc:ef:8a:
                    5b:72:8a:91:80:53:3c:57:3f:0e:43:ba:f8:b0:bc:
                    51:9f:7f:4c:56:b8:0b:33:a9:a1:79:0d:b9:6a:43:
                    0c:32:9c:0f:ad:65:f5:63:ad:37:55:41:08:e5:ed:
                    38:ef:2c:a3:01:8b:92:48:5d:eb:5c:9d:62:4e:dd:
                    47:39:d6:52:a9:16:f1:81:4f:89:a5:95:bf:c2:82:
                    97:77:ea:5f:aa:a3:d8:62:10:69:c9:36:3f:36:07:
                    80:e5:53:17:54:48:0f:0e:b1:b1:7e:d9:6d:2d:7e:
                    23:35:d0:cb:46:f0:c0:82:55:c5:a3:69:05:a2:d9:
                    6b:93:0a:49:7b:68:f4:e0:7b:09:35:01:31:4b:45:
                    81:5b:f5:b0:e7:d0:7b:43:5b:45:da:e4:05:79:ea:
                    d5:f6:80:61:b1:79:de:69:b0:bf:3f:6f:74:76:26:
                    10:c7:66:81:1b:a5:e1:e3:6f:17:e0:44:01:c0:16:
                    9b:05:83:43:50:59:db:46:6d:48:fe:44:bc:08:7e:
                    51:68:2d:ae:6e:0d:71:3f:e5:40:c2:b1:fb:7c:f4:
                    31:f7:fc:18:19:a2:5d:b3:d1:3d:3e:57:74:58:a4:
                    6c:d9:b0:42:ed:da:92:a1:5d:e3:f4:88:ab:75:55:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F0:9F:52:6C:64:00:1D:C5:70:B5:0E:79:E8:3A:F2:0C:B6:AB:48
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:3a:cf:f7:9e:90:02:fd:b5:e7:15:c3:02:10:be:fe:42:db:
         56:4e:9b:2d:2c:c6:82:7b:e7:25:b0:d0:23:71:8c:b3:04:8b:
         1a:af:c7:44:e0:e4:ef:df:b7:21:35:12:40:01:b8:96:62:bd:
         36:7d:47:42:bb:f2:6d:ce:c9:d1:6a:07:51:98:86:1e:bc:81:
         ee:30:4d:22:1a:2c:aa:28:5d:d8:d6:15:4e:f0:47:2a:92:5a:
         84:b8:81:11:df:0e:c7:72:fd:9c:41:ae:74:d9:b0:8a:08:08:
         2e:9e:00:53:eb:c8:43:16:2d:79:27:87:03:dd:61:a9:ef:9d:
         3a:5f:5f:72:04:8f:ba:56:5e:ef:df:b0:ed:3a:50:cc:bc:90:
         3a:75:55:1e:5b:fd:55:80:ba:37:6f:eb:1d:0c:11:3d:e4:15:
         a0:ac:f7:6a:21:09:85:52:17:2c:be:ca:0f:d3:ac:5c:9e:d4:
         dd:50:ba:a2:a9:e2:47:ab:d9:69:db:95:ad:f8:4c:16:8a:18:
         fc:3c:fe:ca:01:60:f0:70:c9:00:15:8b:0a:20:b5:ec:cb:65:
         6c:1f:fc:84:69:4f:f3:25:93:16:11:a2:55:78:96:6a:03:db:
         67:5d:28:86:de:23:f4:79:50:06:61:17:ab:bb:ab:1e:83:59:
         d5:09:21:62
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUNt0bHcY1fS8KnnrNilfW8Oci2yUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG
RkUzNjczRTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI4QTNBMDhCQTBCNDlBQjY5
NDc2M0ZDRUY4QTVCNzI4QTkxODA1MzNDNTczRjBFNDNCQUY4QjBCQzUxOUY3RjRD
NTZCODBCMzNBOUExNzkwREI5NkE0MzBDMzI5QzBGQUQ2NUY1NjNBRDM3NTU0MTA4
RTVFRDM4RUYyQ0EzMDE4QjkyNDg1REVCNUM5RDYyNEVERDQ3MzlENjUyQTkxNkYx
ODE0Rjg5QTU5NUJGQzI4Mjk3NzdFQTVGQUFBM0Q4NjIxMDY5QzkzNjNGMzYwNzgw
RTU1MzE3NTQ0ODBGMEVCMUIxN0VEOTZEMkQ3RTIzMzVEMENCNDZGMEMwODI1NUM1
QTM2OTA1QTJEOTZCOTMwQTQ5N0I2OEY0RTA3QjA5MzUwMTMxNEI0NTgxNUJGNUIw
RTdEMDdCNDM1QjQ1REFFNDA1NzlFQUQ1RjY4MDYxQjE3OURFNjlCMEJGM0Y2Rjc0
NzYyNjEwQzc2NjgxMUJBNUUxRTM2RjE3RTA0NDAxQzAxNjlCMDU4MzQzNTA1OURC
NDY2RDQ4RkU0NEJDMDg3RTUxNjgyREFFNkUwRDcxM0ZFNTQwQzJCMUZCN0NGNDMx
RjdGQzE4MTlBMjVEQjNEMTNEM0U1Nzc0NThBNDZDRDlCMDQyRUREQTkyQTE1REUz
RjQ4OEFCNzU1NTFFNEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu4o6CLoLSatpR2P874pbcoqRgFM8Vz8OQ7r4sLxRn39MVrgLM6mh
eQ25akMMMpwPrWX1Y603VUEI5e047yyjAYuSSF3rXJ1iTt1HOdZSqRbxgU+JpZW/
woKXd+pfqqPYYhBpyTY/NgeA5VMXVEgPDrGxftltLX4jNdDLRvDAglXFo2kFotlr
kwpJe2j04HsJNQExS0WBW/Ww59B7Q1tF2uQFeerV9oBhsXneabC/P290diYQx2aB
G6Xh428X4EQBwBabBYNDUFnbRm1I/kS8CH5RaC2ubg1xP+VAwrH7fPQx9/wYGaJd
s9E9Pld0WKRs2bBC7dqSoV3j9IirdVUeSwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FOrwn1JsZAAdxXC1DnnoOvIMtqtIMB8GA1UdIwQYMBaAFNVMN2lgomlyoLdnvaCE
BI3/42c+MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEvRDU0QzM3Njk2MEEyNjk3
MkEwQjc2N0JEQTA4NDA0OERGRkUzNjczRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2
NzNFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8xLzMyMzAzMDJlMzEzMzMyMmUzMjM0
MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2MzgzNzM0MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAPIhPAwDQYJKoZIhvcNAQELBQADggEBALQ6z/eekAL9tecVwwIQvv5C21ZOmy0s
xoJ75yWw0CNxjLMEixqvx0Tg5O/ftyE1EkABuJZivTZ9R0K78m3OydFqB1GYhh68
ge4wTSIaLKooXdjWFU7wRyqSWoS4gRHfDsdy/ZxBrnTZsIoICC6eAFPryEMWLXkn
hwPdYanvnTpfX3IEj7pWXu/fsO06UMy8kDp1VR5b/VWAujdv6x0MET3kFaCs92oh
CYVSFyy+yg/TrFye1N1QuqKp4ker2Wnbla34TBaKGPw8/soBYPBwyQAViwogtezL
ZWwf/IRpT/MlkxYRolV4lmoD22ddKIbeI/R5UAZhF6u7qx6DWdUJIWI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:02 2025 by rpki-client