Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e31302e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          Ig18cdFGYlScoSNJgnzV2N7UTcaboM509gutZUl8sGg=
Subject key identifier:   46:02:B0:9B:FB:A0:A5:58:36:A9:6A:81:EB:C3:E0:99:54:E7:6C:30
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       0A5B47D919E27E6C5D587CE972FC8CB215C22831
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     52977
IP address blocks:        200.53.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5b:47:d9:19:e2:7e:6c:5d:58:7c:e9:72:fc:8c:b2:15:c2:28:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject: CN=4602B09BFBA0A55836A96A81EBC3E09954E76C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:6c:1d:a0:49:ee:1d:f3:66:d7:ea:1e:d8:
                    43:76:69:d5:ae:f8:2b:11:01:46:98:05:89:8c:39:
                    46:6d:fb:2a:e9:12:02:9a:4a:88:bf:75:8e:a4:ff:
                    e7:aa:73:00:33:10:98:4c:e1:31:7c:4e:32:f4:70:
                    2f:f8:76:e9:d0:41:94:e5:c1:ec:12:a6:d2:a3:ec:
                    6c:3e:1d:fd:49:33:05:e7:0e:7b:d1:a3:87:4d:f7:
                    48:a9:c0:34:93:5d:51:b6:49:ad:b9:9b:a4:81:e7:
                    b8:ea:cc:b7:d7:fb:cc:3d:bf:09:40:c3:07:63:ad:
                    0e:17:a1:e4:e6:96:c9:89:61:1c:43:cb:8d:5f:86:
                    d6:6b:1c:81:e7:be:83:67:10:4e:26:fd:e5:ef:28:
                    2f:0c:1b:35:47:91:ee:6b:76:5b:26:ab:1f:12:b3:
                    dc:b6:5e:8e:e8:86:a3:a9:de:5a:b9:8b:3c:83:f1:
                    f5:1b:ea:2b:74:30:b2:63:58:ae:6f:5d:7b:e3:85:
                    24:3d:56:de:04:8d:c5:f8:bd:84:0e:87:44:d9:ec:
                    84:ae:80:33:30:9b:1d:4f:5f:a4:90:8f:84:fd:c2:
                    64:86:57:16:73:27:05:3f:4c:ec:30:3e:5c:6e:c8:
                    27:46:7a:90:6d:e3:85:2b:64:e9:19:c6:65:58:c9:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:02:B0:9B:FB:A0:A5:58:36:A9:6A:81:EB:C3:E0:99:54:E7:6C:30
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:56:80:f5:f2:e1:c4:fd:1e:bd:4b:0b:6d:6b:d0:fe:8a:4e:
         ec:e8:4c:62:2d:b6:80:55:64:a2:78:fc:38:54:e5:fe:1c:26:
         b4:54:e5:40:3e:4e:0b:4e:db:af:ef:6e:1c:13:29:82:ab:72:
         20:8b:9e:59:e9:4a:c5:f8:b3:59:d1:2d:50:c9:b0:45:82:69:
         12:9a:65:6d:b2:3a:c3:b7:ce:76:2d:5f:71:04:1f:9e:51:b1:
         28:00:cb:be:60:5b:cf:b5:1e:88:01:69:f0:f0:66:d4:1e:ee:
         f7:69:16:f2:9a:e5:a2:97:14:d3:fb:e1:e2:49:18:2a:34:03:
         f2:7c:24:50:79:88:6f:dd:41:c4:92:2a:14:de:1c:aa:07:cc:
         7e:96:52:bb:e6:68:35:90:64:17:fd:9f:d8:03:90:25:d6:e4:
         b9:b1:97:c1:13:a6:69:5a:dc:3e:fe:b8:10:68:33:15:88:52:
         f5:d5:51:1c:9e:60:b8:08:8d:f1:1d:49:c1:e3:b3:51:a2:e5:
         db:bf:cb:e8:c3:32:e2:1d:26:fc:3a:bd:85:7b:78:a2:2c:cc:
         6d:72:91:74:c6:e9:aa:0f:aa:fc:f7:30:96:2f:46:16:ec:66:
         59:3f:6f:c5:05:62:9e:96:16:c8:8b:0b:5e:79:bf:81:e7:b7:
         67:ad:d4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:19 2025 by rpki-client