Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231362e302f32322d3232203d3e20323731333637.roa
File:                     3230302e33362e3231362e302f32322d3232203d3e20323731333637.roa (raw, json)
Hash identifier:          qI0n5s2gW4mOHwz1ZFJId++CJze+EEIiHC7xj6bPxdE=
Subject key identifier:   88:F7:15:1C:8D:68:3F:2A:44:DA:57:F4:51:76:6D:87:A3:05:9B:DE
Certificate issuer:       /CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
Certificate serial:       6D1958E0BDC7E6FBDC96594C3EE5CF9916BFCBCC
Authority key identifier: 8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231362e302f32322d3232203d3e20323731333637.roa
Signing time:             Sat 15 Apr 2023 01:19:43 +0000
ROA not before:           Sat 15 Apr 2023 01:14:43 +0000
ROA not after:            Sat 13 Apr 2024 01:19:43 +0000
asID:                     271367
IP address blocks:        200.36.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:19:58:e0:bd:c7:e6:fb:dc:96:59:4c:3e:e5:cf:99:16:bf:cb:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
        Validity
            Not Before: Apr 15 01:14:43 2023 GMT
            Not After : Apr 13 01:19:43 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:39:2f:ea:75:ce:a6:64:91:97:49:68:9a:
                    23:27:28:de:7d:4e:95:94:e0:be:2e:42:6b:bf:c4:
                    fb:d4:21:f0:77:04:73:40:59:37:1c:b2:b9:53:d9:
                    36:2a:b2:d8:13:ec:04:0a:f2:23:fe:7f:aa:e0:6e:
                    6a:72:55:fa:ef:7c:65:fd:38:ed:ac:75:fe:79:b2:
                    bd:3f:a0:47:8c:82:37:04:11:a7:1b:21:7c:d4:9b:
                    f4:df:26:d8:e2:c3:e3:43:4f:33:7a:16:cc:64:68:
                    f7:86:1c:16:ab:94:df:c5:b2:13:14:95:08:7c:5d:
                    0f:62:69:ee:59:55:eb:47:e6:bf:e8:44:96:8a:e4:
                    91:3a:02:2d:98:f8:26:29:6e:01:31:e5:4a:83:58:
                    83:8b:fb:ab:9a:da:e7:50:ca:cd:53:fe:af:28:b1:
                    e9:e4:ed:df:b0:e5:cb:4d:83:b6:d8:52:72:9f:a9:
                    b4:5e:c9:d1:6b:f0:1a:a2:14:32:6e:fb:35:c9:15:
                    d9:98:f9:f9:45:e3:13:07:54:af:69:df:ff:2c:95:
                    64:7e:e9:5c:99:59:8b:7d:f2:1e:e9:de:9c:5e:3a:
                    59:b9:15:0b:7b:f8:36:64:8d:61:32:6f:6e:8e:54:
                    b8:ff:ea:0f:76:9e:22:de:93:28:26:65:2b:fa:f2:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F7:15:1C:8D:68:3F:2A:44:DA:57:F4:51:76:6D:87:A3:05:9B:DE
            X509v3 Authority Key Identifier:
                keyid:8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231362e302f32322d3232203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:86:6c:65:90:fb:b2:3b:06:ec:d1:4d:75:38:ae:9a:2a:16:
         70:7a:66:b7:5e:55:51:ef:f8:88:f2:f8:cb:2e:60:3b:76:45:
         11:44:68:22:ef:00:75:ad:59:8e:c8:66:04:b4:c7:d4:96:14:
         64:a6:d4:97:f9:ef:25:06:1b:0b:e7:f7:e8:53:fa:5c:48:3e:
         01:c5:e1:d6:fa:15:88:a8:20:67:7b:fc:21:c2:6a:91:be:78:
         db:e6:e8:f5:46:6b:b4:0f:16:d1:e1:17:02:6f:02:a5:94:29:
         c0:f8:f5:07:28:0f:8b:e6:14:bc:65:c1:f1:4c:ca:cc:78:f1:
         e9:9b:8e:b0:da:27:f1:37:64:41:51:ff:7f:b6:34:f2:b6:6b:
         df:4e:1d:e4:16:73:aa:29:ea:9e:fa:02:6e:44:7b:c1:39:82:
         f4:7c:34:63:08:7c:65:2b:0b:0c:4b:a6:17:7c:06:54:39:f6:
         24:1f:c8:99:58:fd:cc:aa:5d:c6:3a:9f:6c:ec:8f:53:17:22:
         38:02:1b:b8:0d:b8:4b:60:28:35:5e:a3:71:0f:e8:25:4f:b1:
         cd:e4:bb:39:4a:55:27:e5:4c:4d:51:0f:18:00:76:3b:69:8a:
         34:ee:9f:3e:0c:b0:ca:d9:58:47:0d:c5:c5:23:43:38:76:da:
         eb:45:dd:29
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUbRlY4L3H5vvclllMPuXPmRa/y8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE2QTAyNENFNDU5MDRDOUZCMTRGNDZGMEYyNzI1QTc4
MzY0M0MwQTAeFw0yMzA0MTUwMTE0NDNaFw0yNDA0MTMwMTE5NDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzdBNDM5MkZFQTc1Q0VBNjY0
OTE5NzQ5Njg5QTIzMjcyOERFN0Q0RTk1OTRFMEJFMkU0MjZCQkZDNEZCRDQyMUYw
NzcwNDczNDA1OTM3MUNCMkI5NTNEOTM2MkFCMkQ4MTNFQzA0MEFGMjIzRkU3RkFB
RTA2RTZBNzI1NUZBRUY3QzY1RkQzOEVEQUM3NUZFNzlCMkJEM0ZBMDQ3OEM4MjM3
MDQxMUE3MUIyMTdDRDQ5QkY0REYyNkQ4RTJDM0UzNDM0RjMzN0ExNkNDNjQ2OEY3
ODYxQzE2QUI5NERGQzVCMjEzMTQ5NTA4N0M1RDBGNjI2OUVFNTk1NUVCNDdFNkJG
RTg0NDk2OEFFNDkxM0EwMjJEOThGODI2Mjk2RTAxMzFFNTRBODM1ODgzOEJGQkFC
OUFEQUU3NTBDQUNENTNGRUFGMjhCMUU5RTRFRERGQjBFNUNCNEQ4M0I2RDg1Mjcy
OUZBOUI0NUVDOUQxNkJGMDFBQTIxNDMyNkVGQjM1QzkxNUQ5OThGOUY5NDVFMzEz
MDc1NEFGNjlERkZGMkM5NTY0N0VFOTVDOTk1OThCN0RGMjFFRTlERTlDNUUzQTU5
QjkxNTBCN0JGODM2NjQ4RDYxMzI2RjZFOEU1NEI4RkZFQTBGNzY5RTIyREU5MzI4
MjY2NTJCRkFGMkUzOUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx6Q5L+p1zqZkkZdJaJojJyjefU6VlOC+LkJrv8T71CHwdwRzQFk3
HLK5U9k2KrLYE+wECvIj/n+q4G5qclX673xl/TjtrHX+ebK9P6BHjII3BBGnGyF8
1Jv03ybY4sPjQ08zehbMZGj3hhwWq5TfxbITFJUIfF0PYmnuWVXrR+a/6ESWiuSR
OgItmPgmKW4BMeVKg1iDi/urmtrnUMrNU/6vKLHp5O3fsOXLTYO22FJyn6m0XsnR
a/AaohQybvs1yRXZmPn5ReMTB1Svad//LJVkfulcmVmLffIe6d6cXjpZuRULe/g2
ZI1hMm9ujlS4/+oPdp4i3pMoJmUr+vLjnQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FIj3FRyNaD8qRNpX9FF2bYejBZveMB8GA1UdIwQYMBaAFIpqAkzkWQTJ+xT0bw8n
JaeDZDwKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JGWUh5M3BCa1lSUXRy
QjhNNmp3Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzAvOEE2QTAyNENFNDU5MDRD
OUZCMTRGNDZGMEYyNzI1QTc4MzY0M0MwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84QTZBMDI0Q0U0NTkwNEM5RkIxNEY0NkYwRjI3MjVBNzgzNjQz
QzBBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CRllIeTNwQmtZUlF0ckI4TTZq
d0pNYWp5VzRkZnprRW1SWVRzRnR3dXNnci8wLzMyMzAzMDJlMzMzNjJlMzIzMTM2
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMxMzMzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
yCTYMA0GCSqGSIb3DQEBCwUAA4IBAQAShmxlkPuyOwbs0U11OK6aKhZwema3XlVR
7/iI8vjLLmA7dkURRGgi7wB1rVmOyGYEtMfUlhRkptSX+e8lBhsL5/foU/pcSD4B
xeHW+hWIqCBne/whwmqRvnjb5uj1Rmu0DxbR4RcCbwKllCnA+PUHKA+L5hS8ZcHx
TMrMePHpm46w2ifxN2RBUf9/tjTytmvfTh3kFnOqKeqe+gJuRHvBOYL0fDRjCHxl
KwsMS6YXfAZUOfYkH8iZWP3Mql3GOp9s7I9TFyI4Ahu4DbhLYCg1XqNxD+glT7HN
5Ls5SlUn5UxNUQ8YAHY7aYo07p8+DLDK2VhHDcXFI0M4dtrrRd0p
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:42:10 2025 by rpki-client