Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32322d3332203d3e20323730323439.roa
File:                     3230302e3130372e3131322e302f32322d3332203d3e20323730323439.roa (raw, json)
Hash identifier:          ptwYWMzVJRDMIyxEJK4m2cPN2VurZuLhDycsa/6dHpc=
Subject key identifier:   4A:1B:3B:6D:6F:74:3C:9D:62:4C:35:5F:B1:79:8C:97:B2:AE:8A:C9
Certificate issuer:       /CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
Certificate serial:       446119E8A026909F8F99B4128EF3FB7BDA9C9BFA
Authority key identifier: F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32322d3332203d3e20323730323439.roa
Signing time:             Wed 10 May 2023 20:20:06 +0000
ROA not before:           Wed 10 May 2023 20:15:06 +0000
ROA not after:            Wed 08 May 2024 20:20:06 +0000
asID:                     270249
IP address blocks:        200.107.112.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:61:19:e8:a0:26:90:9f:8f:99:b4:12:8e:f3:fb:7b:da:9c:9b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
        Validity
            Not Before: May 10 20:15:06 2023 GMT
            Not After : May  8 20:20:06 2024 GMT
        Subject: CN=4A1B3B6D6F743C9D624C355FB1798C97B2AE8AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d7:b6:9b:39:e9:5a:b8:fe:79:04:da:3a:69:
                    be:4e:a5:e1:14:04:7f:f6:b3:33:b6:ac:13:ae:87:
                    c4:cb:59:82:f3:12:86:6a:1d:ba:a2:17:a8:8e:02:
                    44:2e:e7:53:aa:b7:8b:05:74:52:b2:46:b9:eb:1b:
                    2e:dc:aa:91:71:1d:d0:0f:0d:ad:8b:0b:db:ab:68:
                    43:c9:4d:64:26:51:74:e3:73:5c:16:4a:a5:37:05:
                    e5:59:7f:29:04:ac:65:c8:89:db:ef:00:e2:1b:da:
                    8d:32:5b:5b:ea:cf:88:ff:28:4f:29:4c:2d:81:67:
                    b1:fc:90:94:9e:dc:32:c0:a7:78:95:f1:63:c7:07:
                    59:70:58:f6:b0:5c:09:d5:58:8f:aa:74:ba:4c:b4:
                    b7:67:a5:09:6e:7a:01:bd:42:bb:de:3c:33:a5:fa:
                    c1:33:9d:d4:99:ac:7a:8c:d4:cd:33:90:e4:2d:3a:
                    3e:33:87:d2:f3:5c:34:25:c6:58:ab:13:ff:b1:34:
                    a6:9b:18:3c:af:ec:ee:47:27:5e:51:0e:e6:ec:26:
                    60:02:75:3b:d9:4d:82:00:2f:ea:77:5d:a3:61:12:
                    9e:dd:3e:5f:28:3b:a5:62:7a:d0:ae:8f:d1:46:d3:
                    41:b4:4d:c5:36:ec:ef:87:eb:7d:c3:6f:f9:b4:05:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1B:3B:6D:6F:74:3C:9D:62:4C:35:5F:B1:79:8C:97:B2:AE:8A:C9
            X509v3 Authority Key Identifier:
                keyid:F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131322e302f32322d3332203d3e20323730323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:28:3e:46:b0:58:8d:56:ff:a5:b7:94:08:46:cc:fb:82:af:
         ef:00:62:f3:c2:f6:ec:5d:c5:c6:42:65:73:13:b6:45:71:ec:
         64:77:c5:b6:37:37:1f:cb:f7:dc:33:ab:c4:55:f8:e0:36:be:
         77:83:9a:9e:9e:cb:54:11:6a:0b:06:53:66:16:8f:77:7a:1b:
         e3:0d:2b:cf:f1:54:b3:94:35:b6:dc:ed:1a:0f:66:5b:8e:6d:
         77:f6:14:86:5f:62:41:7b:71:f9:be:c0:70:7a:d7:01:de:67:
         ca:f3:b5:4d:ba:aa:3e:d4:52:07:d9:4a:7d:85:a5:33:68:8e:
         fd:dc:f4:e4:36:fe:ad:44:92:3c:ee:c2:1c:3f:c9:f2:ed:8d:
         2b:0f:11:8d:52:28:81:13:fb:ec:be:00:b4:ab:1c:06:2d:30:
         08:e6:81:b4:90:09:c3:cd:c6:7d:b2:d4:72:d3:24:cf:6d:1a:
         94:d6:24:09:bc:50:18:63:eb:52:d8:5a:4f:83:97:28:94:c7:
         d4:65:5a:7e:d5:1d:5d:c3:89:fa:4a:4a:2e:3e:4d:bb:b0:6a:
         82:ab:f7:b2:68:78:17:5f:f0:44:00:9e:c3:0e:cf:d3:de:85:
         91:8e:e9:ea:4f:cf:5b:b3:61:4c:e4:97:fa:e7:45:d0:00:01:
         fb:e1:09:85
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURGEZ6KAmkJ+PmbQSjvP7e9qcm/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIyMEFDMjZFRjkyMEQ5MEYyRkRBRDhDOEY0MzU4N0FB
NjE0MkIwOTAeFw0yMzA1MTAyMDE1MDZaFw0yNDA1MDgyMDIwMDZaMDMxMTAvBgNV
BAMTKDRBMUIzQjZENkY3NDNDOUQ2MjRDMzU1RkIxNzk4Qzk3QjJBRThBQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ17abOelauP55BNo6ab5OpeEU
BH/2szO2rBOuh8TLWYLzEoZqHbqiF6iOAkQu51Oqt4sFdFKyRrnrGy7cqpFxHdAP
Da2LC9uraEPJTWQmUXTjc1wWSqU3BeVZfykErGXIidvvAOIb2o0yW1vqz4j/KE8p
TC2BZ7H8kJSe3DLAp3iV8WPHB1lwWPawXAnVWI+qdLpMtLdnpQluegG9QrvePDOl
+sEzndSZrHqM1M0zkOQtOj4zh9LzXDQlxlirE/+xNKabGDyv7O5HJ15RDubsJmAC
dTvZTYIAL+p3XaNhEp7dPl8oO6VietCuj9FG00G0TcU27O+H633Db/m0BWClAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUShs7bW90PJ1iTDVfsXmMl7KuiskwHwYDVR0j
BBgwFoAU8iCsJu+SDZDy/a2Mj0NYeqYUKwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9BZ3NvVktORm16clBzUFZXQnRpTVpERXM1d1BreUVhU3IxQzh3ZmNV
elAvMC9GMjIwQUMyNkVGOTIwRDkwRjJGREFEOEM4RjQzNTg3QUE2MTQyQjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyMjBBQzI2RUY5MjBEOTBG
MkZEQUQ4QzhGNDM1ODdBQTYxNDJCMDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FvQWdzb1ZLTkZtenJQc1BWV0J0aU1aREVzNXdQa3lFYVNyMUM4d2ZjVXpQLzAv
MzIzMDMwMmUzMTMwMzcyZTMxMzEzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMDMyMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshrcDANBgkqhkiG9w0BAQsFAAOCAQEAiCg+
RrBYjVb/pbeUCEbM+4Kv7wBi88L27F3FxkJlcxO2RXHsZHfFtjc3H8v33DOrxFX4
4Da+d4Oanp7LVBFqCwZTZhaPd3ob4w0rz/FUs5Q1ttztGg9mW45td/YUhl9iQXtx
+b7AcHrXAd5nyvO1TbqqPtRSB9lKfYWlM2iO/dz05Db+rUSSPO7CHD/J8u2NKw8R
jVIogRP77L4AtKscBi0wCOaBtJAJw83GfbLUctMkz20alNYkCbxQGGPrUthaT4OX
KJTH1GVaftUdXcOJ+kpKLj5Nu7Bqgqv3smh4F1/wRACeww7P096FkY7p6k/PW7Nh
TOSX+udF0AAB++EJhQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:52 2025 by rpki-client