Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32312d3231203d3e203532393737.roa
File:                     3230302e35332e382e302f32312d3231203d3e203532393737.roa (raw, json)
Hash identifier:          4LNGV0yhl+0Ux/JZvvEAmgGFb/g9QXMO4j+ubrUlUaM=
Subject key identifier:   2F:9B:DC:35:CF:41:EE:6D:7D:25:A6:7A:9C:CF:5B:32:3A:8A:AF:AC
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       7376658003EBDF501DF16BF8C2D5670D4026BA32
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32312d3231203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     52977
IP address blocks:        200.53.8.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:76:65:80:03:eb:df:50:1d:f1:6b:f8:c2:d5:67:0d:40:26:ba:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=2F9BDC35CF41EE6D7D25A67A9CCF5B323A8AAFAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:fc:25:6c:2a:3f:b8:30:2c:d5:52:72:20:
                    06:86:f8:b4:23:91:f3:97:c2:91:c0:24:f7:98:b4:
                    ec:8e:9c:9d:e7:02:5c:a9:87:d2:d0:40:e6:bd:2d:
                    55:75:0e:54:ea:44:d4:98:c2:0d:1e:61:57:3f:7d:
                    c5:3e:9c:df:e1:a2:ee:55:62:2a:47:3d:eb:20:f5:
                    6e:fe:98:e8:b8:d0:97:49:e3:34:15:63:ff:bd:c9:
                    13:3d:3b:06:f1:a7:68:28:e4:9f:ce:32:57:d2:09:
                    d0:8b:ea:59:a5:7b:29:ca:57:3e:71:fa:30:ca:5c:
                    45:5e:a2:50:c4:62:8e:a8:be:be:e3:e0:ba:e1:c0:
                    38:7a:d6:83:0e:81:b5:2b:26:ea:2c:0f:6f:04:6e:
                    ff:5f:d0:d2:56:17:57:94:f6:80:f9:e9:4c:1e:8f:
                    9c:73:c4:31:b7:9a:d1:1a:85:0f:12:0b:69:f2:4e:
                    87:c7:bb:7f:49:58:4c:72:dc:71:4f:f7:77:7d:92:
                    f3:a8:0e:e4:30:c7:18:b6:1b:ee:e5:a9:43:03:44:
                    01:84:da:08:c7:76:8e:8e:52:be:ab:ea:be:11:23:
                    a6:69:81:c5:2e:b2:0f:24:12:32:32:dd:1a:f5:b1:
                    a1:d3:d2:1f:97:ef:df:12:4b:9e:2a:f9:b2:b4:5d:
                    8e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9B:DC:35:CF:41:EE:6D:7D:25:A6:7A:9C:CF:5B:32:3A:8A:AF:AC
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32312d3231203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:86:e4:b2:28:0d:43:b2:b8:5a:98:ff:0f:36:60:5c:27:e8:
         29:86:42:28:ed:e9:0c:f5:21:80:7d:c1:8e:48:74:5e:5e:25:
         d3:32:b8:55:a6:a3:ea:b1:e9:57:a9:79:91:3a:70:a4:52:b7:
         5b:b9:6c:81:3b:12:d4:0c:6a:98:c5:78:f8:55:e4:5d:18:8a:
         84:e8:6a:cf:3d:0a:5e:66:92:e7:c4:6a:51:49:d0:63:c3:8b:
         4d:ef:da:99:fc:7e:45:28:70:b9:3a:11:4a:7f:38:5c:d9:4f:
         48:c3:7e:3d:89:01:89:81:bd:ec:9a:f1:d7:ca:4f:2c:f9:c5:
         66:bf:2c:73:dc:42:46:3d:9a:ab:cd:5c:23:14:e7:ca:41:b7:
         4a:d9:97:b3:7e:a3:fc:eb:61:03:83:d0:46:78:2a:d2:3c:0a:
         ca:c7:38:88:85:fd:68:c9:23:24:92:78:0f:9c:9c:dc:d3:92:
         09:ff:4f:e3:72:4b:ef:77:76:ad:e1:da:d4:c0:39:30:8a:c2:
         4e:15:95:fb:97:87:35:12:1a:0e:94:46:06:b9:89:e0:71:c2:
         c0:d3:44:d5:6d:e3:45:6f:7c:e5:a5:e7:51:b6:7f:7a:e4:18:
         b1:a4:ad:f6:06:63:3b:9b:bb:eb:ee:39:db:97:73:93:53:e8:
         82:ca:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:15 2025 by rpki-client