Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39322e302f32322d3234203d3e20323730343336.roa
File:                     3230302e362e39322e302f32322d3234203d3e20323730343336.roa (raw, json)
Hash identifier:          Rx54lEm9nY4E0AbWVp9pwISoWCgfNk1BkW7zTG+9G5c=
Subject key identifier:   0F:12:D2:68:8B:55:34:9F:4F:42:37:82:34:C7:2F:5A:FB:2F:E0:98
Certificate issuer:       /CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
Certificate serial:       26B840AC8F91CCB411EEEF211C2F7E98C231DE1D
Authority key identifier: B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39322e302f32322d3234203d3e20323730343336.roa
Signing time:             Tue 18 Mar 2025 23:22:11 +0000
ROA not before:           Tue 18 Mar 2025 23:17:11 +0000
ROA not after:            Tue 17 Mar 2026 23:22:11 +0000
asID:                     270436
IP address blocks:        200.6.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b8:40:ac:8f:91:cc:b4:11:ee:ef:21:1c:2f:7e:98:c2:31:de:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
        Validity
            Not Before: Mar 18 23:17:11 2025 GMT
            Not After : Mar 17 23:22:11 2026 GMT
        Subject: CN=0F12D2688B55349F4F42378234C72F5AFB2FE098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:5f:3f:26:53:4b:0b:56:dc:31:a0:93:f7:
                    0d:cf:c3:c9:f2:1e:14:01:16:5a:3a:b0:20:48:bf:
                    9c:d8:d3:3c:fd:0b:5f:30:d1:bb:00:e7:9b:e2:53:
                    1c:d5:4c:a1:c0:cc:d1:a4:68:3e:63:dc:5a:28:5d:
                    b4:ca:68:24:05:d1:97:b8:d2:20:c5:14:cd:86:bb:
                    9f:df:0e:54:ad:d7:d9:4f:1b:62:1f:dc:18:2a:03:
                    aa:90:6f:a5:af:1b:f8:d1:33:8d:60:af:07:d9:be:
                    9b:30:d0:49:f0:d4:18:cd:8a:94:39:1e:ed:59:e2:
                    31:f4:b0:53:13:08:d2:f6:d1:c9:7b:69:83:8f:b9:
                    3e:63:65:4c:b7:b3:68:3a:78:e3:64:eb:cd:74:3f:
                    a6:d8:a2:05:fb:ad:42:73:4e:15:7a:d7:06:b0:c6:
                    02:8d:d3:a2:07:cb:f7:73:20:3b:40:69:fb:49:a1:
                    b3:66:e0:a5:28:96:dd:ac:34:db:90:5f:a0:eb:a2:
                    2f:13:3e:34:5d:d8:f2:5f:54:b9:3c:b1:af:5e:4d:
                    54:22:dc:db:d4:d8:07:6f:47:91:bd:51:6f:ac:7d:
                    eb:5d:9d:cc:bc:1a:36:ae:0d:9a:5b:9f:ef:15:b4:
                    a1:75:a6:a4:e8:3c:59:ba:2e:78:20:a4:de:37:3b:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:12:D2:68:8B:55:34:9F:4F:42:37:82:34:C7:2F:5A:FB:2F:E0:98
            X509v3 Authority Key Identifier:
                keyid:B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39322e302f32322d3234203d3e20323730343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:eb:ca:c8:12:03:0c:8c:da:eb:2b:ad:6f:5d:f9:2c:b9:0f:
         8f:44:ed:40:a4:c6:e5:b7:8c:72:fe:60:4f:16:b3:cf:29:62:
         27:db:2f:46:40:ad:cf:df:44:24:c0:bb:24:bb:39:de:99:fc:
         bf:48:9c:b1:12:59:67:86:c2:50:61:63:c0:cf:d5:4b:b9:fe:
         f3:25:c1:15:9d:f5:c2:2c:2f:d5:1f:69:6c:4e:f5:cd:4c:ed:
         54:c4:23:65:15:c0:1c:05:cc:7d:50:a1:a1:be:b7:16:74:c2:
         ec:12:7c:61:98:17:ac:a4:4d:f9:7d:2a:17:75:b9:90:57:54:
         d8:66:24:96:e9:00:cd:f3:78:8c:f8:aa:0a:f9:b2:55:cb:c0:
         e5:e4:94:03:bb:6e:fe:ee:69:59:b3:2d:1f:0b:02:2a:3c:28:
         2d:8e:dc:5f:e3:3a:f8:fd:53:59:a7:84:35:b0:da:05:0b:4a:
         f3:21:ce:98:66:6e:05:0e:ce:26:08:a9:a4:2c:e3:28:a7:d4:
         2e:17:45:6c:84:be:c4:b4:94:99:19:df:d4:48:b2:40:1f:f1:
         12:9a:35:1f:51:3b:0e:42:b6:5e:88:19:bc:b2:ef:77:3f:67:
         a5:01:6e:e7:ac:98:ac:68:bd:ba:e7:f8:50:c0:5e:5f:b0:df:
         4d:51:b2:88
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJrhArI+RzLQR7u8hHC9+mMIx3h0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhENTA1NUI5OTg0RTExOUMwNTJERURCM0YzQjExQjlC
NjU3RjI5MTAeFw0yNTAzMTgyMzE3MTFaFw0yNjAzMTcyMzIyMTFaMDMxMTAvBgNV
BAMTKDBGMTJEMjY4OEI1NTM0OUY0RjQyMzc4MjM0QzcyRjVBRkIyRkUwOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCY18/JlNLC1bcMaCT9w3Pw8ny
HhQBFlo6sCBIv5zY0zz9C18w0bsA55viUxzVTKHAzNGkaD5j3FooXbTKaCQF0Ze4
0iDFFM2Gu5/fDlSt19lPG2If3BgqA6qQb6WvG/jRM41grwfZvpsw0Enw1BjNipQ5
Hu1Z4jH0sFMTCNL20cl7aYOPuT5jZUy3s2g6eONk6810P6bYogX7rUJzThV61waw
xgKN06IHy/dzIDtAaftJobNm4KUolt2sNNuQX6Droi8TPjRd2PJfVLk8sa9eTVQi
3NvU2AdvR5G9UW+sfetdncy8GjauDZpbn+8VtKF1pqToPFm6LnggpN43O0zLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUDxLSaItVNJ9PQjeCNMcvWvsv4JgwHwYDVR0j
BBgwFoAUuNUFW5mE4RnAUt7bPzsRubZX8pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGpkeXFrMmR5eXRLR2ZQNGVpMUprUnZBcnV6d1pXb2tLRFpTdkYzNTFQ
OFcvMC9COEQ1MDU1Qjk5ODRFMTE5QzA1MkRFREIzRjNCMTFCOUI2NTdGMjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4RDUwNTVCOTk4NEUxMTlD
MDUyREVEQjNGM0IxMUI5QjY1N0YyOTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhqZHlxazJkeXl0S0dmUDRlaTFKa1J2QXJ1endaV29rS0RaU3ZGMzUxUDhXLzAv
MzIzMDMwMmUzNjJlMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMDM0
MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAsgGXDANBgkqhkiG9w0BAQsFAAOCAQEATuvKyBIDDIza
6yutb135LLkPj0TtQKTG5beMcv5gTxazzyliJ9svRkCtz99EJMC7JLs53pn8v0ic
sRJZZ4bCUGFjwM/VS7n+8yXBFZ31wiwv1R9pbE71zUztVMQjZRXAHAXMfVChob63
FnTC7BJ8YZgXrKRN+X0qF3W5kFdU2GYklukAzfN4jPiqCvmyVcvA5eSUA7tu/u5p
WbMtHwsCKjwoLY7cX+M6+P1TWaeENbDaBQtK8yHOmGZuBQ7OJgippCzjKKfULhdF
bIS+xLSUmRnf1EiyQB/xEpo1H1E7DkK2XogZvLLvdz9npQFu56yYrGi9uuf4UMBe
X7DfTVGyiA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:35:08 2025 by rpki-client