Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130342e302f32322d3234203d3e20323730363834.roa
File:                     3230302e3138372e3130342e302f32322d3234203d3e20323730363834.roa (raw, json)
Hash identifier:          ZFIOBHt5tq/rMFM7YK9Xawv7ap17Tnd4GdnCncczHXY=
Subject key identifier:   40:EA:42:13:36:54:35:C5:F8:B2:B7:3C:AC:53:CC:36:17:4D:06:36
Certificate issuer:       /CN=F365DB0174F24492BBABCEFE755F363C309D4654
Certificate serial:       2BF16608C1F1E80B85E2F305F6ED9053569FE645
Authority key identifier: F3:65:DB:01:74:F2:44:92:BB:AB:CE:FE:75:5F:36:3C:30:9D:46:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F365DB0174F24492BBABCEFE755F363C309D4654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130342e302f32322d3234203d3e20323730363834.roa
Signing time:             Thu 13 Feb 2025 21:04:17 +0000
ROA not before:           Thu 13 Feb 2025 20:59:17 +0000
ROA not after:            Thu 12 Feb 2026 21:04:17 +0000
asID:                     270684
IP address blocks:        200.187.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f1:66:08:c1:f1:e8:0b:85:e2:f3:05:f6:ed:90:53:56:9f:e6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365DB0174F24492BBABCEFE755F363C309D4654
        Validity
            Not Before: Feb 13 20:59:17 2025 GMT
            Not After : Feb 12 21:04:17 2026 GMT
        Subject: CN=40EA4213365435C5F8B2B73CAC53CC36174D0636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:69:23:ef:e1:25:ed:47:15:8d:4c:34:de:
                    56:93:7c:49:a8:80:ec:9e:a0:2a:70:f0:08:91:8a:
                    25:ed:38:16:b4:d0:65:03:65:35:b4:ce:68:af:cd:
                    0e:a7:54:f6:91:ca:cc:dc:41:66:92:43:8b:3c:09:
                    25:59:92:57:5e:32:0f:77:a4:9c:8c:de:f6:7b:16:
                    d4:ee:85:17:5b:d7:5a:e0:84:3a:0a:29:70:8e:4c:
                    88:3f:76:03:6f:9c:b0:e3:51:4c:db:cb:98:fc:80:
                    1c:60:44:c7:74:2d:e7:a1:57:f0:ee:f7:ff:bc:33:
                    ec:a2:b8:48:9d:d1:0c:3e:bc:2e:30:1e:ce:e2:1d:
                    3a:66:c8:b4:a4:46:f8:c9:77:e2:fe:1a:8d:1c:7b:
                    d6:90:da:5e:c4:55:d8:79:cd:03:78:15:cc:21:f8:
                    67:b9:a3:2b:ec:18:b4:df:78:64:90:cd:4f:7a:0c:
                    8a:ac:5a:82:d7:e5:31:e2:43:b9:e2:8c:b3:56:6e:
                    ea:93:d2:74:d2:83:e4:5e:b9:39:3a:c9:4e:4b:6a:
                    f4:a9:61:d4:8e:6e:86:c9:d0:bf:9e:2e:50:32:1a:
                    dd:01:09:13:98:64:f1:f2:a4:ec:45:09:3e:82:c0:
                    1a:25:f2:35:3a:00:14:ee:52:38:11:7e:0f:2a:0d:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EA:42:13:36:54:35:C5:F8:B2:B7:3C:AC:53:CC:36:17:4D:06:36
            X509v3 Authority Key Identifier:
                keyid:F3:65:DB:01:74:F2:44:92:BB:AB:CE:FE:75:5F:36:3C:30:9D:46:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/F365DB0174F24492BBABCEFE755F363C309D4654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F365DB0174F24492BBABCEFE755F363C309D4654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130342e302f32322d3234203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:70:c3:ae:52:91:af:8a:b9:08:b4:ce:91:b0:ff:9e:62:6f:
         89:a4:67:d2:a6:ba:7e:a7:5a:82:d0:f4:dc:a2:14:e7:cd:e1:
         b0:a3:9a:ca:33:ba:e8:d9:c7:f8:b5:5a:84:2e:d0:ab:db:1c:
         75:07:bb:2d:c2:ee:a6:7c:37:e1:31:e0:dc:50:67:74:3e:fd:
         c3:80:93:44:89:61:32:ed:38:65:46:1c:32:81:08:01:16:10:
         4e:d5:be:1e:ed:4c:af:72:eb:5c:50:e2:4b:3b:d2:ee:80:72:
         0e:53:da:ca:a2:62:96:ac:e4:93:72:0f:f9:98:40:74:1f:e6:
         38:9b:4b:98:f2:e9:3e:44:36:0c:9e:78:2c:c8:94:11:b2:86:
         55:26:b5:1d:1c:b9:43:0e:18:3e:7b:e9:b6:fd:36:0a:5f:9f:
         23:4e:57:53:3c:47:ca:c7:19:e8:1f:ec:90:21:11:eb:dd:a0:
         06:a1:5e:e0:04:15:b9:58:28:d4:5e:3a:25:c2:95:4d:3b:68:
         93:9a:b8:d6:43:52:ff:12:dc:5c:8a:24:86:ce:ea:14:1b:d2:
         2c:2f:da:7a:e5:a4:97:58:98:a9:02:62:62:72:63:00:c7:9d:
         7a:62:06:47:b3:c8:7d:b6:63:be:8f:e0:6a:f6:d8:13:46:d7:
         59:20:66:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:19:22 2025 by rpki-client