Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa
File:                     3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          vYhxEkrH1P65QfPhkQoiTbl7lPHcXrdqM+mvQqkn1EQ=
Subject key identifier:   F0:D3:4A:1F:DD:D4:43:FA:FC:7F:19:10:28:BE:1D:BD:A3:AD:A7:37
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       2F68FF5A124B9ED4201BACA18D7B39477B441AC5
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:05:53 +0000
ROA not before:           Fri 07 Mar 2025 19:00:53 +0000
ROA not after:            Fri 06 Mar 2026 19:05:53 +0000
asID:                     22381
IP address blocks:        200.150.168.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:68:ff:5a:12:4b:9e:d4:20:1b:ac:a1:8d:7b:39:47:7b:44:1a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:00:53 2025 GMT
            Not After : Mar  6 19:05:53 2026 GMT
        Subject: CN=F0D34A1FDDD443FAFC7F191028BE1DBDA3ADA737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:69:fc:9e:7e:1f:ea:9f:9c:67:41:58:ee:
                    54:ed:52:a9:43:28:dc:1a:29:54:9e:59:78:86:67:
                    97:8e:e5:58:15:ee:f3:a5:63:67:33:63:50:6c:e7:
                    53:73:a3:d3:a3:cd:ef:a8:41:b2:ae:a7:0a:7b:aa:
                    b2:4e:7d:7a:26:d2:e9:fe:8e:36:3c:03:40:a4:f5:
                    1b:c5:9c:2c:6a:1b:49:28:58:1f:ac:4c:2b:76:09:
                    f5:24:34:82:39:b3:01:a8:b9:3e:73:85:67:67:8d:
                    56:f0:01:99:10:b7:f1:d5:4d:d0:e9:44:07:f5:6d:
                    ef:c5:e9:d0:22:f4:85:b1:7f:68:65:81:78:4f:b3:
                    63:11:10:b6:7b:41:13:43:9a:8d:7d:8b:09:3d:82:
                    78:e5:7a:23:45:8e:fa:f1:8f:d3:41:c1:cb:ff:e9:
                    f6:be:22:7f:6e:28:20:84:92:5c:75:e5:89:64:71:
                    ea:b6:65:83:71:b2:78:4a:c9:a4:f7:ef:b9:18:c7:
                    d7:23:f3:1b:53:8c:19:a8:95:fa:de:59:8c:ac:46:
                    36:13:0b:ec:db:81:17:cf:be:e4:42:d0:59:86:a2:
                    1f:4f:9e:0e:d8:5c:ad:4d:55:64:39:66:0a:d1:da:
                    6b:70:f6:91:00:0b:3c:a4:cd:35:0e:4c:ba:c8:d9:
                    fe:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D3:4A:1F:DD:D4:43:FA:FC:7F:19:10:28:BE:1D:BD:A3:AD:A7:37
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:ab:3a:af:1e:ed:60:35:15:4a:c1:79:51:72:e1:d9:00:
         f4:e6:71:89:f9:45:e6:72:f0:e6:17:5a:1e:ae:7c:8c:86:7d:
         28:3c:39:2d:be:35:13:fb:2e:fe:ea:41:d2:a2:7f:8c:20:58:
         9b:0a:40:97:73:d2:6f:c9:c2:d8:87:29:82:2f:b4:c5:2b:b7:
         d4:84:02:fc:03:27:9f:ca:5e:ba:ca:29:80:7d:c2:2e:21:46:
         4c:1f:d2:74:60:82:9a:ca:05:c6:36:0d:03:84:bc:fd:10:be:
         e8:27:16:b1:ed:93:52:4d:a6:d5:cd:86:ea:39:86:c7:48:21:
         f4:ed:0c:45:de:a9:42:4e:72:05:f7:31:92:55:22:0e:b1:21:
         32:26:1b:55:93:46:b4:01:6a:72:63:77:27:58:46:0e:82:e4:
         64:66:ca:60:21:2c:11:52:1c:6f:45:ac:b2:36:d9:cb:3e:d3:
         a6:7e:31:19:59:8c:3c:78:0b:d2:9d:e0:a1:d6:3f:35:de:fd:
         93:17:74:36:da:9d:8e:78:d4:ab:9e:bd:e8:b2:6e:a0:2f:17:
         cc:e8:a8:da:aa:f5:4d:72:fa:72:73:4f:24:0c:91:80:6e:ac:
         36:26:f2:81:f7:f8:d4:fd:2d:b0:be:07:83:35:3e:97:61:7e:
         6c:ab:f3:34
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL2j/WhJLntQgG6yhjXs5R3tEGsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkzNDMyMTY3RDdDQkFGQTRFNURERTA0MDE5QThFNTdE
RUZFMEFBQzAeFw0yNTAzMDcxOTAwNTNaFw0yNjAzMDYxOTA1NTNaMDMxMTAvBgNV
BAMTKEYwRDM0QTFGRERENDQzRkFGQzdGMTkxMDI4QkUxREJEQTNBREE3MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNU2n8nn4f6p+cZ0FY7lTtUqlD
KNwaKVSeWXiGZ5eO5VgV7vOlY2czY1Bs51Nzo9Ojze+oQbKupwp7qrJOfXom0un+
jjY8A0Ck9RvFnCxqG0koWB+sTCt2CfUkNII5swGouT5zhWdnjVbwAZkQt/HVTdDp
RAf1be/F6dAi9IWxf2hlgXhPs2MRELZ7QRNDmo19iwk9gnjleiNFjvrxj9NBwcv/
6fa+In9uKCCEklx15Ylkceq2ZYNxsnhKyaT377kYx9cj8xtTjBmolfreWYysRjYT
C+zbgRfPvuRC0FmGoh9Png7YXK1NVWQ5ZgrR2mtw9pEACzykzTUOTLrI2f41AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8NNKH93UQ/r8fxkQKL4dvaOtpzcwHwYDVR0j
BBgwFoAUGTQyFn18uvpOXd4EAZqOV97+CqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMC8xOTM0MzIxNjdEN0NCQUZBNEU1RERFMDQwMTlBOEU1N0RFRkUwQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MzQzMjE2N0Q3Q0JBRkE0
RTVEREUwNDAxOUE4RTU3REVGRTBBQUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzAv
MzIzMDMwMmUzMTM1MzAyZTMxMzYzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzIzMzM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIlqgwDQYJKoZIhvcNAQELBQADggEBAAKjqzqv
Hu1gNRVKwXlRcuHZAPTmcYn5ReZy8OYXWh6ufIyGfSg8OS2+NRP7Lv7qQdKif4wg
WJsKQJdz0m/JwtiHKYIvtMUrt9SEAvwDJ5/KXrrKKYB9wi4hRkwf0nRggprKBcY2
DQOEvP0QvugnFrHtk1JNptXNhuo5hsdIIfTtDEXeqUJOcgX3MZJVIg6xITImG1WT
RrQBanJjdydYRg6C5GRmymAhLBFSHG9FrLI22cs+06Z+MRlZjDx4C9Kd4KHWPzXe
/ZMXdDbanY541KueveiybqAvF8zoqNqq9U1y+nJzTyQMkYBurDYm8oH3+NT9LbC+
B4M1Ppdhfmyr8zQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:43:13 2025 by rpki-client