Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e392e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e392e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          e4y8Yzs/isVUDwUQ7Hs2gpziAakly/o1ZWJC/W8o+s0=
Subject key identifier:   F1:41:25:37:1A:12:98:6B:83:39:57:48:DE:E6:04:AF:6B:7E:46:C0
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       5349A5D0C50560C9D6590E4D27EAB71DC1A9098A
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e392e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     52977
IP address blocks:        200.53.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:49:a5:d0:c5:05:60:c9:d6:59:0e:4d:27:ea:b7:1d:c1:a9:09:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=F14125371A12986B83395748DEE604AF6B7E46C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:c1:bc:68:2b:c9:24:4d:7b:a6:04:de:ee:
                    7e:00:d6:58:6d:c6:56:06:d2:db:33:39:fc:99:32:
                    1f:23:02:67:de:cb:6b:0d:64:9d:31:13:a3:d2:a6:
                    f2:65:1a:39:94:92:36:c9:32:ad:cb:d5:a5:39:32:
                    af:d8:2d:7a:33:5d:71:69:0e:2f:9d:04:a8:30:32:
                    70:ca:4b:1a:09:c5:91:a0:76:f4:95:8b:49:4a:86:
                    1a:44:4c:29:64:f8:b4:5a:e1:5d:6b:ef:21:3a:b9:
                    14:2d:3e:b7:21:3d:f8:4b:29:94:0c:34:e1:45:3b:
                    a4:7a:75:b5:53:06:a3:29:ec:b0:00:a3:3a:e6:71:
                    07:19:3e:36:f8:b1:e2:69:99:fb:ae:73:f8:6a:56:
                    3c:3b:8f:b9:13:0b:93:84:59:73:ed:44:5b:48:61:
                    af:05:22:87:01:e1:66:9b:bd:df:18:24:f2:45:76:
                    6d:1e:10:ac:2c:28:2a:59:58:6e:03:cb:9d:04:f2:
                    ce:38:1d:78:19:8b:26:b5:7e:ce:b2:40:b2:98:c6:
                    e7:05:b5:20:db:bc:ff:98:87:39:56:63:da:88:39:
                    f3:87:2a:82:01:53:94:8a:77:bd:35:5d:13:e3:29:
                    0e:30:17:12:d9:a6:84:ee:99:68:ba:d6:c4:1b:e1:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:41:25:37:1A:12:98:6B:83:39:57:48:DE:E6:04:AF:6B:7E:46:C0
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e392e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:aa:d0:17:54:03:77:4d:4d:0e:46:07:93:ee:5b:44:94:80:
         71:75:f9:6e:5e:f7:8f:c1:33:3b:4e:33:0b:71:c1:f1:63:8c:
         68:29:09:3b:7a:d5:82:1a:93:0a:c9:92:5c:d9:76:b2:53:50:
         d6:b2:83:cd:24:70:a8:30:c1:89:29:71:da:19:94:f4:8c:11:
         3d:8f:8f:c9:b2:e6:d3:9d:86:2d:fb:7d:43:f9:2b:e2:72:63:
         4e:1e:9b:75:3c:ec:9b:16:d9:b7:7a:23:97:a2:47:34:1e:ee:
         ff:9e:7c:4e:8d:e4:f8:27:da:31:d2:a0:d5:6c:90:b0:a7:f1:
         c5:14:5c:b0:57:2a:7f:25:b7:9e:09:9f:ed:ea:ad:54:37:aa:
         83:1f:df:30:b6:56:18:b7:05:ad:06:5e:34:b9:3a:9b:fd:9f:
         7d:85:05:2a:51:2d:fb:73:ac:93:52:12:7e:3f:aa:37:48:19:
         de:5b:90:10:83:be:05:32:26:74:9e:d1:e8:51:a9:1a:94:b3:
         cb:04:d7:2f:df:dd:e7:cd:57:1a:3e:80:9a:d8:83:e2:1c:c2:
         f1:af:e9:c7:28:f3:56:27:7d:06:a2:c2:b6:b8:a3:03:6a:94:
         2b:cc:96:1a:c3:bf:59:f4:2f:eb:c0:f9:18:60:f4:48:d5:30:
         19:a2:de:f3
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUU0ml0MUFYMnWWQ5NJ+q3HcGpCYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMDMxMTAvBgNV
BAMTKEYxNDEyNTM3MUExMjk4NkI4MzM5NTc0OERFRTYwNEFGNkI3RTQ2QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmlMG8aCvJJE17pgTe7n4A1lht
xlYG0tszOfyZMh8jAmfey2sNZJ0xE6PSpvJlGjmUkjbJMq3L1aU5Mq/YLXozXXFp
Di+dBKgwMnDKSxoJxZGgdvSVi0lKhhpETClk+LRa4V1r7yE6uRQtPrchPfhLKZQM
NOFFO6R6dbVTBqMp7LAAozrmcQcZPjb4seJpmfuuc/hqVjw7j7kTC5OEWXPtRFtI
Ya8FIocB4Wabvd8YJPJFdm0eEKwsKCpZWG4Dy50E8s44HXgZiya1fs6yQLKYxucF
tSDbvP+YhzlWY9qIOfOHKoIBU5SKd701XRPjKQ4wFxLZpoTumWi61sQb4ar3AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU8UElNxoSmGuDOVdI3uYEr2t+RsAwHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzIzMDMwMmUzNTMzMmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzOTM3
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADINQkwDQYJKoZIhvcNAQELBQADggEBAG+q0BdUA3dNTQ5G
B5PuW0SUgHF1+W5e94/BMztOMwtxwfFjjGgpCTt61YIakwrJklzZdrJTUNayg80k
cKgwwYkpcdoZlPSMET2Pj8my5tOdhi37fUP5K+JyY04em3U87JsW2bd6I5eiRzQe
7v+efE6N5Pgn2jHSoNVskLCn8cUUXLBXKn8lt54Jn+3qrVQ3qoMf3zC2Vhi3Ba0G
XjS5Opv9n32FBSpRLftzrJNSEn4/qjdIGd5bkBCDvgUyJnSe0ehRqRqUs8sE1y/f
3efNVxo+gJrYg+IcwvGv6cco81YnfQaiwra4owNqlCvMlhrDv1n0L+vA+Rhg9EjV
MBmi3vM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:21 2025 by rpki-client