Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231302e302f32332d3233203d3e203631373738.roa
File:                     3230302e3232392e3231302e302f32332d3233203d3e203631373738.roa (raw, json)
Hash identifier:          gy65kvCPROh1N4uiu222Sb8l745TwKL8/rf+DcNgCMs=
Subject key identifier:   F1:18:AE:81:7E:C2:37:8F:91:41:34:20:92:DF:84:54:E3:A5:11:15
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       2CCAB6B889654318108A11CDE90432DA04D71B6F
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231302e302f32332d3233203d3e203631373738.roa
Signing time:             Wed 11 Jun 2025 17:00:01 +0000
ROA not before:           Wed 11 Jun 2025 16:55:01 +0000
ROA not after:            Wed 10 Jun 2026 17:00:01 +0000
asID:                     61778
IP address blocks:        200.229.210.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ca:b6:b8:89:65:43:18:10:8a:11:cd:e9:04:32:da:04:d7:1b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: Jun 11 16:55:01 2025 GMT
            Not After : Jun 10 17:00:01 2026 GMT
        Subject: CN=F118AE817EC2378F9141342092DF8454E3A51115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:c6:18:ee:00:db:f2:9f:af:bc:72:e1:b8:
                    4d:e1:4e:a7:32:41:b6:3b:f1:29:b0:7b:2d:6d:ae:
                    a4:02:67:e4:02:23:6e:87:94:3c:18:c2:99:a5:d8:
                    72:59:fe:ec:c2:a8:c4:7d:46:23:95:cd:2d:6a:9d:
                    46:1c:30:18:f7:55:0d:5e:d3:62:23:d7:fe:f3:0d:
                    b3:0d:b5:46:5f:cc:b9:4b:fd:91:55:a7:ee:b9:73:
                    c2:2a:4d:f0:fb:ef:20:66:e6:60:8b:bf:7f:bf:3a:
                    b4:ad:d7:aa:40:fb:c2:fe:a0:3a:2c:89:d5:91:5f:
                    f1:63:8d:7a:eb:58:0e:37:8e:b5:3d:2f:c9:d5:92:
                    2e:29:bd:91:a8:e8:81:c6:f0:8e:55:5d:78:64:67:
                    cd:4b:c1:2e:1b:35:46:6a:99:ac:60:2e:2e:2f:f1:
                    33:0d:1a:8f:2d:24:cc:cc:9e:8b:83:9d:bc:95:ee:
                    0c:93:59:b4:f6:5c:71:7f:d6:8a:8f:5c:22:3f:42:
                    1a:80:48:5b:a7:84:03:5d:e7:ef:1e:71:ed:5b:66:
                    f6:fd:48:03:67:6a:3d:6d:d5:c1:42:46:0e:81:a9:
                    ae:f1:50:a7:73:6d:fa:18:4a:d0:5a:a5:13:54:3e:
                    58:f7:43:5e:ee:2c:e5:a3:33:c1:b4:10:03:1b:55:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:18:AE:81:7E:C2:37:8F:91:41:34:20:92:DF:84:54:E3:A5:11:15
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231302e302f32332d3233203d3e203631373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:07:9b:d0:e8:9f:17:58:ac:97:45:de:4f:82:3d:97:33:
         6c:41:43:5b:a3:28:7d:11:dc:1e:17:27:ec:2b:da:39:0f:7b:
         b6:34:99:d6:d2:f3:e8:99:4f:bc:6a:0f:b8:22:48:f7:f4:e5:
         e4:e2:a3:c0:0b:59:52:7e:ba:00:e9:37:49:15:2a:f6:c1:11:
         70:c5:16:15:81:a8:51:ac:d4:cb:ad:8b:94:4f:bf:8a:53:63:
         3d:a7:15:cf:d8:1f:b9:94:84:c6:1b:ac:f6:f1:0e:cf:fe:a4:
         6f:64:bb:58:56:68:77:23:83:ef:2b:ef:27:73:36:31:2b:11:
         ef:79:5d:2b:e8:c3:d0:22:16:86:8d:d8:28:43:16:de:ec:da:
         d2:91:97:06:43:ee:04:50:73:54:cb:56:50:da:26:c8:cd:9b:
         5a:34:57:05:40:98:ce:ff:e0:32:2b:8e:13:d2:57:c3:17:17:
         67:67:8e:ac:67:9d:19:15:f6:c0:db:aa:9d:45:5a:60:97:40:
         62:39:a3:b7:26:a9:69:98:ba:d9:a8:91:e9:73:54:cc:a0:62:
         c3:dc:60:11:9f:2d:50:de:3d:8a:90:12:21:0e:25:87:e1:dd:
         e1:6b:4b:09:05:0a:76:45:aa:cc:d8:3a:2b:e1:55:76:c1:3b:
         7d:01:a3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:53:50 2025 by rpki-client