Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa
File:                     3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          gFTKeK+eFm1CgzAvbvurwavof5csjlmanN34+i/UZr4=
Subject key identifier:   0C:15:C4:F5:1D:97:1D:0D:E8:AE:18:CA:F9:84:D0:99:B1:C6:AF:E4
Certificate issuer:       /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial:       1676C5BB184195A0886E3C5C1F72FBDA92A3E3B9
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa
Signing time:             Fri 08 Nov 2024 18:39:54 +0000
ROA not before:           Fri 08 Nov 2024 18:34:54 +0000
ROA not after:            Fri 07 Nov 2025 18:39:54 +0000
asID:                     262688
IP address blocks:        200.229.176.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:76:c5:bb:18:41:95:a0:88:6e:3c:5c:1f:72:fb:da:92:a3:e3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
        Validity
            Not Before: Nov  8 18:34:54 2024 GMT
            Not After : Nov  7 18:39:54 2025 GMT
        Subject: CN=0C15C4F51D971D0DE8AE18CAF984D099B1C6AFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:92:f9:e3:64:f1:44:32:b1:29:cd:a0:5f:
                    cf:ca:24:5e:14:87:12:65:77:13:b1:63:ec:b1:d4:
                    69:59:63:df:d8:8e:90:53:e5:c0:ce:de:f8:fa:1c:
                    1b:11:3c:7d:2e:54:2f:2e:8f:c4:56:2d:ab:45:16:
                    30:e0:39:c7:e8:41:dc:1b:5f:5e:40:b6:81:84:f3:
                    6a:dc:03:b4:89:2d:12:f7:8a:a8:85:34:99:17:be:
                    4a:c6:e0:8f:64:3e:4a:26:58:3b:2c:ba:8d:1b:84:
                    a9:8f:ba:7e:8a:42:cf:d4:e5:dd:0e:10:61:3d:5c:
                    86:0f:fe:1b:86:7b:21:d5:b7:ea:eb:7d:89:31:58:
                    f1:44:82:99:80:5d:e9:a0:99:bf:ac:f7:f7:53:89:
                    74:ba:d9:89:d9:03:7e:79:85:8a:b9:13:d1:c9:6e:
                    22:3f:fe:a4:50:f7:ba:54:e5:22:6b:11:a0:47:b0:
                    e8:ba:93:7f:7a:cb:d7:85:87:1e:ae:31:5c:25:da:
                    23:36:64:89:75:70:9a:9f:c9:5a:75:75:43:c9:20:
                    61:7d:0a:09:0e:97:25:bd:5c:4c:60:7c:ff:a7:d0:
                    5b:bf:71:61:c5:c7:ee:d0:eb:e6:5a:67:d7:6f:5f:
                    c1:4a:ed:1e:9a:a4:ad:e2:51:ad:55:14:c5:19:84:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:15:C4:F5:1D:97:1D:0D:E8:AE:18:CA:F9:84:D0:99:B1:C6:AF:E4
            X509v3 Authority Key Identifier:
                keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:50:29:3b:bb:c8:51:2e:6c:83:0d:4b:1f:5e:db:64:db:3b:
         f9:30:11:64:82:f5:87:4e:97:70:f9:da:85:4c:37:7c:ce:43:
         03:2c:fe:38:2c:f9:3c:af:68:1e:d0:08:5a:79:f7:e4:da:98:
         ec:6a:2a:ba:73:de:ab:51:ab:5d:13:c6:40:7e:74:b3:3f:81:
         9d:99:72:fb:bf:e3:cd:eb:54:b2:f3:33:85:54:e4:85:81:00:
         8c:d2:44:69:b3:4b:ce:38:44:60:f4:59:80:ae:54:c6:88:67:
         08:15:54:09:bb:d2:ea:0a:57:cb:4a:0d:0d:73:a5:e8:10:1d:
         ed:5f:49:32:1f:1a:da:54:3a:55:83:b9:3b:53:04:bb:2d:79:
         db:2f:ea:08:a9:a3:a8:91:05:f6:31:c1:0f:33:c8:a4:78:8b:
         8c:96:dc:35:c2:ea:90:db:7a:03:db:71:c6:71:5a:17:6e:0a:
         5c:12:c1:29:c6:f3:f0:df:a8:52:a6:0b:f8:d8:d6:51:13:21:
         7f:eb:b7:a5:65:43:5b:6b:01:f3:ea:a4:8e:78:86:a5:db:28:
         1a:99:1c:9a:6e:84:60:2f:b9:0f:30:25:fc:26:f5:1b:c4:c7:
         e7:be:0f:2c:fc:51:17:ac:24:d4:75:3e:a5:08:4b:03:5f:68:
         af:fa:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:03:37 2025 by rpki-client