Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39342e302f32342d3234203d3e20323730343336.roa
File:                     3230302e362e39342e302f32342d3234203d3e20323730343336.roa (raw, json)
Hash identifier:          82ZmiKF8O+LwfuxZFPIX121lC3TrmL2eXlRMkVyw73s=
Subject key identifier:   84:FE:ED:EE:7D:31:07:A6:37:80:4E:10:C5:AE:8F:7B:CC:39:A1:9E
Certificate issuer:       /CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
Certificate serial:       110F42A1E84C3FC52A9209949D3CC34D0CD18D41
Authority key identifier: B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39342e302f32342d3234203d3e20323730343336.roa
Signing time:             Tue 11 Mar 2025 19:56:52 +0000
ROA not before:           Tue 11 Mar 2025 19:51:52 +0000
ROA not after:            Tue 10 Mar 2026 19:56:52 +0000
asID:                     270436
IP address blocks:        200.6.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0f:42:a1:e8:4c:3f:c5:2a:92:09:94:9d:3c:c3:4d:0c:d1:8d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
        Validity
            Not Before: Mar 11 19:51:52 2025 GMT
            Not After : Mar 10 19:56:52 2026 GMT
        Subject: CN=84FEEDEE7D3107A637804E10C5AE8F7BCC39A19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:7c:60:30:11:b9:f8:f7:81:c4:33:d4:c2:
                    dc:a4:f6:68:fb:b3:fd:4b:8d:af:34:e2:9c:87:41:
                    d4:fe:5b:e8:96:53:11:19:cd:b5:42:6d:07:c0:54:
                    87:57:3a:2e:85:11:ce:f5:20:78:87:78:e0:bd:a8:
                    7c:60:53:3b:b1:d8:8e:26:0c:5c:7f:92:69:60:fb:
                    9a:a5:b2:f4:79:23:3a:dc:fa:91:7a:03:f3:81:9a:
                    c9:56:df:64:46:dc:a1:7a:3e:84:21:e4:bc:de:6d:
                    87:a1:8a:dd:76:8c:ff:80:22:11:41:35:1e:ab:f6:
                    12:55:fb:46:30:f0:6f:38:f5:a6:e2:d1:d1:5a:fe:
                    fd:4d:28:ce:2f:4c:bf:f6:95:25:f2:76:fd:78:0b:
                    69:b7:50:b6:37:9c:32:09:04:ac:7d:44:e4:32:cf:
                    7b:9b:c1:da:0f:0f:1e:32:0a:f9:03:24:9e:29:ae:
                    26:df:dc:ef:b7:03:89:4c:1c:63:ef:16:56:aa:4c:
                    f0:5e:54:da:0b:1b:a8:db:c7:90:11:d3:fb:36:e6:
                    0a:c6:ae:15:c3:d0:50:93:61:fd:7e:5c:26:dc:74:
                    80:ab:3e:bc:35:9e:7f:27:44:ca:11:8d:2d:cc:96:
                    0c:f2:d1:d4:fc:3e:9c:99:b1:28:8d:4a:ed:b0:1c:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FE:ED:EE:7D:31:07:A6:37:80:4E:10:C5:AE:8F:7B:CC:39:A1:9E
            X509v3 Authority Key Identifier:
                keyid:B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39342e302f32342d3234203d3e20323730343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:c9:5e:7e:99:0a:55:03:f7:c9:1b:5f:ee:ff:ce:aa:36:3b:
         35:f4:5b:46:32:6f:1d:07:4f:f7:37:77:6c:8e:cd:13:e1:32:
         09:f0:95:39:55:dc:0e:02:82:cc:cf:9c:8e:70:29:5b:88:d1:
         65:d0:40:dd:d5:e0:cd:c6:9a:05:4f:51:fb:3c:1f:f8:75:1c:
         72:fd:c6:4f:0e:b2:f7:64:fd:2e:ae:8e:63:d0:f9:6e:80:3d:
         ca:2b:6e:6d:b6:b2:78:91:83:b6:a8:a3:34:9c:73:2d:ef:94:
         45:0d:8e:ee:89:5f:ca:7b:81:35:71:3a:59:42:f5:a0:27:31:
         3d:d6:33:2a:f2:83:eb:1c:11:81:9a:bd:7c:b0:fc:44:9a:64:
         e1:53:3a:4c:ec:2f:dc:9f:81:df:3c:44:d2:3e:33:32:a8:7e:
         ab:01:bd:bb:b5:8b:5b:98:42:aa:31:04:57:76:f8:aa:cf:6f:
         a0:f0:3a:22:4c:2f:5a:79:d4:39:d8:c4:36:b7:b3:d7:0e:a2:
         ac:ec:53:39:77:89:75:02:d4:87:d0:43:07:1c:e3:9e:66:ac:
         d8:80:54:22:cc:f9:1d:6c:a8:e4:ad:43:3e:f8:a0:41:e8:08:
         d1:4c:e4:6a:e2:b4:56:a6:43:f3:63:10:4c:c9:ac:4b:63:94:
         7f:31:e6:17
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEQ9CoehMP8UqkgmUnTzDTQzRjUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhENTA1NUI5OTg0RTExOUMwNTJERURCM0YzQjExQjlC
NjU3RjI5MTAeFw0yNTAzMTExOTUxNTJaFw0yNjAzMTAxOTU2NTJaMDMxMTAvBgNV
BAMTKDg0RkVFREVFN0QzMTA3QTYzNzgwNEUxMEM1QUU4RjdCQ0MzOUExOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5HxgMBG5+PeBxDPUwtyk9mj7
s/1Lja804pyHQdT+W+iWUxEZzbVCbQfAVIdXOi6FEc71IHiHeOC9qHxgUzux2I4m
DFx/kmlg+5qlsvR5Izrc+pF6A/OBmslW32RG3KF6PoQh5LzebYehit12jP+AIhFB
NR6r9hJV+0Yw8G849abi0dFa/v1NKM4vTL/2lSXydv14C2m3ULY3nDIJBKx9ROQy
z3ubwdoPDx4yCvkDJJ4pribf3O+3A4lMHGPvFlaqTPBeVNoLG6jbx5AR0/s25grG
rhXD0FCTYf1+XCbcdICrPrw1nn8nRMoRjS3Mlgzy0dT8PpyZsSiNSu2wHOLXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhP7t7n0xB6Y3gE4Qxa6Pe8w5oZ4wHwYDVR0j
BBgwFoAUuNUFW5mE4RnAUt7bPzsRubZX8pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGpkeXFrMmR5eXRLR2ZQNGVpMUprUnZBcnV6d1pXb2tLRFpTdkYzNTFQ
OFcvMC9COEQ1MDU1Qjk5ODRFMTE5QzA1MkRFREIzRjNCMTFCOUI2NTdGMjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4RDUwNTVCOTk4NEUxMTlD
MDUyREVEQjNGM0IxMUI5QjY1N0YyOTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhqZHlxazJkeXl0S0dmUDRlaTFKa1J2QXJ1endaV29rS0RaU3ZGMzUxUDhXLzAv
MzIzMDMwMmUzNjJlMzkzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDM0
MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMgGXjANBgkqhkiG9w0BAQsFAAOCAQEAR8lefpkKVQP3
yRtf7v/OqjY7NfRbRjJvHQdP9zd3bI7NE+EyCfCVOVXcDgKCzM+cjnApW4jRZdBA
3dXgzcaaBU9R+zwf+HUccv3GTw6y92T9Lq6OY9D5boA9yitubbayeJGDtqijNJxz
Le+URQ2O7olfynuBNXE6WUL1oCcxPdYzKvKD6xwRgZq9fLD8RJpk4VM6TOwv3J+B
3zxE0j4zMqh+qwG9u7WLW5hCqjEEV3b4qs9voPA6IkwvWnnUOdjENrez1w6irOxT
OXeJdQLUh9BDBxzjnmas2IBUIsz5HWyo5K1DPvigQegI0UzkauK0VqZD82MQTMms
S2OUfzHmFw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:45 2025 by rpki-client