Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e39302e302f32332d3233203d3e20323730323735.roa
File:                     3230302e3132342e39302e302f32332d3233203d3e20323730323735.roa (raw, json)
Hash identifier:          u5wz1ljRo/wJ2OcFyjzwIwFUE7JN4O65kFtLpswpSQI=
Subject key identifier:   29:9A:DE:3D:2F:E1:D4:02:AD:86:FF:E7:9B:6F:DB:EC:A4:43:58:48
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       290C9769B375C01935518229729670968E2411C1
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e39302e302f32332d3233203d3e20323730323735.roa
Signing time:             Thu 06 Mar 2025 06:25:50 +0000
ROA not before:           Thu 06 Mar 2025 06:20:50 +0000
ROA not after:            Thu 05 Mar 2026 06:25:50 +0000
asID:                     270275
IP address blocks:        200.124.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0c:97:69:b3:75:c0:19:35:51:82:29:72:96:70:96:8e:24:11:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Mar  6 06:20:50 2025 GMT
            Not After : Mar  5 06:25:50 2026 GMT
        Subject: CN=299ADE3D2FE1D402AD86FFE79B6FDBECA4435848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:04:27:8c:cc:3f:47:a9:93:d5:ce:cb:40:
                    d8:99:f0:fb:15:90:8f:ca:49:aa:85:8d:4e:b3:dd:
                    fb:23:70:db:6e:1e:c9:0c:a6:84:bf:12:73:01:a2:
                    88:41:ba:d0:cb:43:2f:93:9f:0a:e7:ee:d3:bf:f9:
                    9f:1a:55:8c:8c:74:8a:6b:02:c2:f0:9d:dd:d7:11:
                    48:b2:68:4c:71:71:2f:74:b4:6b:fb:f6:c9:a6:37:
                    64:01:64:07:ff:67:13:70:24:6a:5a:ed:f2:8d:c3:
                    13:01:61:55:a4:44:a4:d7:3a:d8:d2:de:5b:17:25:
                    30:f3:10:a2:96:b2:fc:1e:91:25:7b:dd:6d:de:23:
                    d6:35:8e:2e:28:a3:8b:dd:5b:5e:21:62:30:59:6e:
                    63:45:da:49:cf:dd:5f:41:36:43:ab:8b:94:84:cb:
                    7b:88:03:a2:73:45:e6:08:36:cd:4c:1a:41:13:6a:
                    e3:15:61:b5:a8:1f:f3:95:44:1f:c3:66:5f:0f:34:
                    f7:d5:50:71:fe:73:6c:6b:b7:f7:5d:a9:5a:79:c1:
                    27:14:42:01:fd:d0:b0:7a:f3:e4:b7:02:1a:73:c8:
                    3e:c5:c7:2f:62:c7:be:2e:0f:e5:87:16:d0:de:6d:
                    ad:c5:0a:2e:a7:df:79:83:38:60:00:a7:26:57:34:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9A:DE:3D:2F:E1:D4:02:AD:86:FF:E7:9B:6F:DB:EC:A4:43:58:48
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e39302e302f32332d3233203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:e0:1a:04:16:02:f3:bd:00:1f:4c:61:ce:7a:ad:68:ef:
         c7:5e:a2:dc:fd:ce:4f:98:3b:0d:f3:d9:1d:27:7f:a0:97:91:
         8d:d6:d2:0d:2a:c4:49:e0:d1:65:c4:6d:0a:f0:5e:da:8a:ca:
         8d:e4:99:a9:17:56:70:e3:18:c3:30:c1:4a:ee:1d:b2:a0:ef:
         df:3b:37:85:86:48:ef:e9:ef:aa:ef:ce:f0:c1:46:f6:37:ca:
         2f:b5:25:dc:cb:43:25:39:63:49:1d:7e:bc:cf:4b:d7:04:9a:
         86:25:b6:cd:e6:78:5d:34:83:72:e7:a5:99:24:27:d2:60:5a:
         bf:32:7a:d6:fb:69:23:fa:75:4c:cc:e2:7b:e6:2b:e9:1c:68:
         3a:a6:ed:65:03:db:e0:d5:c4:46:60:1b:c6:d2:84:74:c0:80:
         b2:6b:30:e5:21:15:eb:89:78:0b:c4:51:67:22:29:6f:fe:de:
         47:53:85:6f:e4:1b:b5:93:dd:a9:5f:1e:61:9d:ea:07:d7:b1:
         f4:1d:48:a9:f4:64:fd:56:ee:a3:5a:40:4b:38:ed:72:17:10:
         5c:25:8f:d8:ec:1c:c2:03:91:03:24:72:62:60:94:fb:ba:2c:
         23:05:b2:fa:4f:81:1b:7d:24:8d:95:b0:1f:51:76:bf:5c:fc:
         e8:96:27:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:44:33 2025 by rpki-client