Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/3230302e35332e38302e302f32322d3234203d3e20323731333635.roa
File:                     3230302e35332e38302e302f32322d3234203d3e20323731333635.roa (raw, json)
Hash identifier:          CDlDMUf9zvx1S0+p98TPrnCle/PM3EyffSMRvZy3ZTc=
Subject key identifier:   3F:7E:BD:7C:41:74:03:05:80:63:1F:04:8D:1C:D6:B1:A5:03:FB:81
Certificate issuer:       /CN=EB893FC2324141C841B4E9613837252F8D6564D8
Certificate serial:       3A426FD0876858DF2AF4CFFA794E1E5F00DBEE47
Authority key identifier: EB:89:3F:C2:32:41:41:C8:41:B4:E9:61:38:37:25:2F:8D:65:64:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB893FC2324141C841B4E9613837252F8D6564D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/3230302e35332e38302e302f32322d3234203d3e20323731333635.roa
Signing time:             Fri 26 Jan 2024 19:19:32 +0000
ROA not before:           Fri 26 Jan 2024 19:14:32 +0000
ROA not after:            Fri 24 Jan 2025 19:19:32 +0000
asID:                     271365
IP address blocks:        200.53.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:42:6f:d0:87:68:58:df:2a:f4:cf:fa:79:4e:1e:5f:00:db:ee:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB893FC2324141C841B4E9613837252F8D6564D8
        Validity
            Not Before: Jan 26 19:14:32 2024 GMT
            Not After : Jan 24 19:19:32 2025 GMT
        Subject: CN=3F7EBD7C4174030580631F048D1CD6B1A503FB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a4:03:54:4b:7c:c7:f5:8f:3d:3c:69:7b:38:
                    b8:f2:11:97:4e:12:eb:7d:10:5f:34:b2:7a:67:92:
                    d8:d1:63:b2:d0:88:85:2c:8e:a2:71:06:28:20:2d:
                    07:5c:c4:cc:dd:a3:66:b3:61:98:3e:fd:07:b4:d1:
                    91:f8:23:e2:be:39:96:43:9f:aa:16:4b:52:32:80:
                    58:bc:07:72:c8:3c:e2:4e:fb:f9:6e:0d:9b:8f:97:
                    1b:ff:27:f0:61:81:ae:e9:02:9c:9f:79:be:12:1e:
                    b4:dd:ee:88:91:2b:f0:37:6c:93:66:70:1f:fe:74:
                    33:31:5e:21:e1:19:86:46:2d:75:38:9a:05:e2:6f:
                    b0:26:ab:fc:f3:21:d8:51:59:fc:de:12:4a:92:e0:
                    b4:e5:9f:2b:cc:ec:e0:6f:06:f2:ff:e8:16:fa:6a:
                    4d:f0:48:7d:8d:75:52:c5:e5:d1:4e:f7:e5:94:21:
                    16:c7:65:c8:79:48:8d:d5:08:a3:15:ed:f2:ee:31:
                    f2:04:22:76:c2:05:a0:4e:f3:57:71:5d:d0:35:eb:
                    fc:f7:98:b1:ce:c5:cf:71:6f:db:76:0f:0c:28:30:
                    46:f3:59:f6:3d:94:dd:1a:24:f1:e5:1b:9c:ed:ab:
                    a0:7b:f3:5a:3b:85:28:5f:8d:c7:d4:db:96:0d:ef:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7E:BD:7C:41:74:03:05:80:63:1F:04:8D:1C:D6:B1:A5:03:FB:81
            X509v3 Authority Key Identifier:
                keyid:EB:89:3F:C2:32:41:41:C8:41:B4:E9:61:38:37:25:2F:8D:65:64:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/EB893FC2324141C841B4E9613837252F8D6564D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB893FC2324141C841B4E9613837252F8D6564D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/3230302e35332e38302e302f32322d3234203d3e20323731333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:ba:b9:e9:50:67:7a:4a:c2:10:b7:2a:1d:9d:3b:91:36:90:
         b9:6d:4a:f0:fb:31:ca:6e:1c:b5:38:62:1d:88:20:50:6b:33:
         db:dc:94:65:1b:65:ba:ee:0e:86:c5:62:8f:b6:4c:d3:c9:66:
         5e:b7:78:43:68:07:ba:38:3d:33:f1:48:6f:ac:15:76:17:eb:
         c3:d2:d3:f3:0d:81:b4:bb:98:0a:7b:38:b7:12:f9:a8:66:d2:
         d5:47:c1:d2:50:3f:c1:b7:ae:6d:9f:cb:1b:f2:30:23:a9:9a:
         53:14:7c:52:15:61:7d:cb:f9:0e:60:9d:de:53:fa:90:53:95:
         51:91:56:31:bc:79:29:17:d1:df:87:88:98:c1:20:cd:a3:d9:
         30:82:70:ac:59:4f:48:84:d5:a3:38:ac:42:bf:57:8f:60:0d:
         b2:b0:6d:54:cb:8d:43:6e:4d:be:13:8f:bc:72:22:3f:a5:b5:
         f2:09:f4:38:8f:35:47:19:71:a6:87:47:72:36:41:15:e5:8d:
         34:06:6d:b6:fa:87:88:cc:a5:ac:43:0d:fb:ea:39:48:20:8c:
         c5:eb:b6:9e:85:b8:95:e7:56:bf:b7:62:7d:48:92:6d:a7:a3:
         84:89:5c:ca:fa:1a:2c:11:e5:2c:ba:d0:9b:54:75:d6:ca:79:
         07:4c:c4:ad
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOkJv0IdoWN8q9M/6eU4eXwDb7kcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4OTNGQzIzMjQxNDFDODQxQjRFOTYxMzgzNzI1MkY4
RDY1NjREODAeFw0yNDAxMjYxOTE0MzJaFw0yNTAxMjQxOTE5MzJaMDMxMTAvBgNV
BAMTKDNGN0VCRDdDNDE3NDAzMDU4MDYzMUYwNDhEMUNENkIxQTUwM0ZCODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjpANUS3zH9Y89PGl7OLjyEZdO
Eut9EF80snpnktjRY7LQiIUsjqJxBiggLQdcxMzdo2azYZg+/Qe00ZH4I+K+OZZD
n6oWS1IygFi8B3LIPOJO+/luDZuPlxv/J/Bhga7pApyfeb4SHrTd7oiRK/A3bJNm
cB/+dDMxXiHhGYZGLXU4mgXib7Amq/zzIdhRWfzeEkqS4LTlnyvM7OBvBvL/6Bb6
ak3wSH2NdVLF5dFO9+WUIRbHZch5SI3VCKMV7fLuMfIEInbCBaBO81dxXdA16/z3
mLHOxc9xb9t2DwwoMEbzWfY9lN0aJPHlG5ztq6B781o7hShfjcfU25YN77tpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUP369fEF0AwWAYx8EjRzWsaUD+4EwHwYDVR0j
BBgwFoAU64k/wjJBQchBtOlhODclL41lZNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTJrVkx1Z3JSdVU3NGpYbVY3OVlSYUFEV0NodXFjd3Jmd1Q3Tk1QMW9N
ankvMC9FQjg5M0ZDMjMyNDE0MUM4NDFCNEU5NjEzODM3MjUyRjhENjU2NEQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VCODkzRkMyMzI0MTQxQzg0
MUI0RTk2MTM4MzcyNTJGOEQ2NTY0RDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Eya1ZMdWdyUnVVNzRqWG1WNzlZUmFBRFdDaHVxY3dyZndUN05NUDFvTWp5LzAv
MzIzMDMwMmUzNTMzMmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzMzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyDVQMA0GCSqGSIb3DQEBCwUAA4IBAQAyurnpUGd6
SsIQtyodnTuRNpC5bUrw+zHKbhy1OGIdiCBQazPb3JRlG2W67g6GxWKPtkzTyWZe
t3hDaAe6OD0z8UhvrBV2F+vD0tPzDYG0u5gKezi3EvmoZtLVR8HSUD/Bt65tn8sb
8jAjqZpTFHxSFWF9y/kOYJ3eU/qQU5VRkVYxvHkpF9Hfh4iYwSDNo9kwgnCsWU9I
hNWjOKxCv1ePYA2ysG1Uy41Dbk2+E4+8ciI/pbXyCfQ4jzVHGXGmh0dyNkEV5Y00
Bm22+oeIzKWsQw376jlIIIzF67aehbiV51a/t2J9SJJtp6OEiVzK+hosEeUsutCb
VHXWynkHTMSt
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:52 2025 by rpki-client