Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3234203d3e20323730383034.roa
File:                     3230302e3231392e36302e302f32322d3234203d3e20323730383034.roa (raw, json)
Hash identifier:          kotQ+F3GFb0CczPvk+nTX4kE7kUzEtCs+6y09VcV4Uo=
Subject key identifier:   22:D0:9A:C9:92:DC:B2:E1:63:A9:F2:B2:05:49:AC:69:DC:14:6A:C3
Certificate issuer:       /CN=2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060
Certificate serial:       5EE81C42248FB59FA3FA34C5D43B6296F8AF8E52
Authority key identifier: 2E:2E:DC:BC:8E:8A:B4:AB:73:02:5D:D0:0A:EC:CD:06:42:B9:00:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3234203d3e20323730383034.roa
Signing time:             Tue 25 Mar 2025 14:34:30 +0000
ROA not before:           Tue 25 Mar 2025 14:29:30 +0000
ROA not after:            Tue 24 Mar 2026 14:34:30 +0000
asID:                     270804
IP address blocks:        200.219.60.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e8:1c:42:24:8f:b5:9f:a3:fa:34:c5:d4:3b:62:96:f8:af:8e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060
        Validity
            Not Before: Mar 25 14:29:30 2025 GMT
            Not After : Mar 24 14:34:30 2026 GMT
        Subject: CN=22D09AC992DCB2E163A9F2B20549AC69DC146AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:72:2f:d6:fe:8a:2d:2f:d4:7c:53:48:58:
                    b9:33:3b:e1:95:8d:14:1d:48:e3:e3:05:20:24:12:
                    14:9e:fb:58:74:4e:19:8e:4b:5e:fd:70:b4:a5:e6:
                    f2:6a:5b:60:49:7b:c6:15:07:89:87:ac:80:c6:d3:
                    11:68:6e:93:eb:aa:54:cc:12:3a:0d:6c:e8:21:7a:
                    49:ce:2f:98:6e:b6:9a:b1:3e:e8:23:b2:4d:53:b3:
                    81:9f:b7:ce:a2:6b:d4:62:41:5c:a4:5f:bb:12:29:
                    2f:8e:17:2b:a9:8e:db:29:be:e3:4f:ab:05:52:fa:
                    21:a9:4c:9a:19:82:9c:8f:18:93:70:7c:b9:ef:7a:
                    bf:f1:a4:99:4f:8d:fe:e5:09:00:48:3e:71:ca:ff:
                    c9:18:2c:f3:d9:7d:d4:be:90:2f:d8:fc:93:20:78:
                    66:6d:c8:1d:77:dd:a0:21:a1:6a:5b:df:48:e8:a6:
                    b9:b5:44:44:91:98:8e:82:24:0f:65:0a:ae:db:5e:
                    3e:0a:02:7f:bb:4b:d9:73:58:e3:aa:b3:78:3f:e5:
                    ce:25:a9:0d:7f:ab:65:f0:5d:0c:6f:3d:f5:22:0c:
                    11:25:92:47:ce:ee:c1:62:19:45:99:92:b9:e6:ab:
                    83:49:65:d3:4b:85:2f:12:4b:5c:dc:9d:45:70:40:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D0:9A:C9:92:DC:B2:E1:63:A9:F2:B2:05:49:AC:69:DC:14:6A:C3
            X509v3 Authority Key Identifier:
                keyid:2E:2E:DC:BC:8E:8A:B4:AB:73:02:5D:D0:0A:EC:CD:06:42:B9:00:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3234203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:50:01:20:93:45:64:68:0d:fc:be:9a:ba:a5:af:0d:f5:be:
         1a:b8:8a:41:e3:34:04:da:83:1a:3e:91:aa:5d:dd:13:4a:bf:
         e3:bc:33:70:49:49:f2:52:3c:c9:41:8c:96:1e:19:47:2d:77:
         11:92:40:2e:3c:78:c2:b9:72:36:6f:fa:e8:42:50:17:a0:1a:
         09:61:94:2e:2d:ef:95:1b:ed:e6:f4:35:95:66:3a:a1:58:5b:
         39:a3:92:7b:74:a3:0e:ec:e6:b7:d4:44:1e:90:31:81:8e:07:
         3f:98:70:23:33:9f:8a:09:59:ba:86:a0:60:d2:9e:5e:58:51:
         45:ec:87:3a:c2:0d:c0:1f:cb:ce:1c:8b:ea:b8:f2:03:d2:96:
         09:ae:4e:a5:dd:fa:c7:04:45:f4:59:0b:e2:64:68:7e:2f:ee:
         0b:05:97:7f:a2:d8:d7:3c:64:db:3d:be:cc:89:21:df:ba:f4:
         62:45:b3:ae:d2:a4:f0:bc:2f:1e:93:cf:b9:06:09:2e:2c:9e:
         e3:0d:86:61:38:7c:e8:65:15:64:3e:95:16:4d:76:ba:a1:10:
         ad:c4:03:f2:37:1d:c7:c2:3b:15:73:dd:7b:bd:16:20:21:56:
         81:9b:75:5c:8c:de:f2:16:25:16:b0:02:13:2f:c7:b7:82:47:
         15:f8:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:12 2025 by rpki-client