Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa
File:                     3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          1ceQlFfYzaUcquJfkz+xLy1RyHI9jMDJqI4KyJ/bZac=
Subject key identifier:   26:71:45:E2:66:A5:CE:1E:B0:06:9B:04:8E:D3:EB:19:CC:25:35:30
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       45695BA2E417D3ECC1A2DD0E25A830843AB0382C
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa
Signing time:             Thu 31 Oct 2024 17:14:11 +0000
ROA not before:           Thu 31 Oct 2024 17:09:11 +0000
ROA not after:            Thu 30 Oct 2025 17:14:11 +0000
asID:                     262659
IP address blocks:        201.33.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:69:5b:a2:e4:17:d3:ec:c1:a2:dd:0e:25:a8:30:84:3a:b0:38:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:09:11 2024 GMT
            Not After : Oct 30 17:14:11 2025 GMT
        Subject: CN=267145E266A5CE1EB0069B048ED3EB19CC253530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:da:f2:5b:f5:37:3b:6d:96:16:12:28:40:49:
                    a1:aa:f1:4c:12:5d:66:49:07:88:3d:d5:0e:09:86:
                    b6:74:62:fd:fb:7f:9e:d6:f8:66:0f:e3:74:21:ed:
                    15:d6:cb:63:4b:22:1c:dc:46:2b:3b:33:98:bb:72:
                    3a:97:27:01:8e:50:21:ca:33:2a:fb:c1:d6:70:d6:
                    a9:6c:7a:97:68:8a:f9:75:23:77:91:a4:e6:e8:eb:
                    b5:a4:18:7b:82:06:56:44:ed:30:3d:6b:20:84:e9:
                    df:04:c7:66:3e:6f:8b:1a:41:42:24:5b:bd:63:44:
                    46:1c:35:ee:b4:41:d7:9e:77:b6:19:8c:2f:11:0d:
                    66:5f:59:bb:f0:1e:cf:d7:69:61:8e:95:3a:68:74:
                    c9:58:d4:9d:6e:27:1e:79:4e:ec:04:32:47:69:d6:
                    cf:8a:8e:0d:c8:61:01:c4:e1:5b:12:52:1b:62:ce:
                    ff:fe:73:e9:ab:f9:38:ff:59:02:49:dc:98:a6:10:
                    93:cd:ec:ec:56:6c:26:6c:9c:7f:35:33:30:03:d1:
                    d0:59:24:86:87:e4:5d:64:63:5f:13:c9:79:93:e8:
                    94:1b:7c:e3:db:a2:17:fb:a5:e2:ef:9c:12:60:c6:
                    a3:63:4e:84:ff:f7:c7:24:91:64:58:1a:97:04:84:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:71:45:E2:66:A5:CE:1E:B0:06:9B:04:8E:D3:EB:19:CC:25:35:30
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:ff:42:f0:79:78:a6:1c:08:e2:8b:25:0e:9c:71:2e:2e:9b:
         d6:e5:10:33:44:a1:c5:8b:1e:61:d6:48:a0:0b:76:f1:76:23:
         42:37:26:64:95:56:55:f8:8d:5c:b2:65:6a:4b:7b:ea:2c:d2:
         58:ea:1c:69:d5:c3:61:19:e1:4e:18:45:5a:f5:a3:9a:1c:a0:
         89:05:9e:32:04:45:4c:34:5e:d1:8c:4a:06:37:78:7f:f7:05:
         61:f0:0c:e6:af:55:d2:1a:6f:2d:1f:f6:56:71:a6:f6:40:61:
         03:93:cb:72:78:de:d9:1c:1f:ff:09:4c:13:c0:77:7c:96:6f:
         22:4c:fe:3f:b1:71:0f:f4:99:af:87:c2:6f:04:7d:45:6e:16:
         1e:60:e8:bd:82:db:51:a2:23:58:23:7e:05:58:15:d5:ce:2c:
         4f:27:ed:bc:55:7d:90:e1:b0:ca:2c:78:6d:f8:59:f3:f1:f7:
         6a:e4:ba:f3:4d:ce:f4:0c:c4:f3:f7:f3:18:50:f3:ea:5f:3d:
         a3:d4:69:92:b7:ca:6c:d2:06:93:50:cb:e7:8f:31:14:3e:72:
         e5:d0:f1:9d:27:87:bf:60:03:ae:2d:80:03:12:b0:3e:91:1a:
         92:e5:22:7e:6f:b3:8d:50:eb:15:25:c5:76:7c:5c:b0:e3:10:
         01:65:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:28:46 2025 by rpki-client