Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35362e302f32322d3232203d3e20323730343431.roa
File:                     3230302e31342e35362e302f32322d3232203d3e20323730343431.roa (raw, json)
Hash identifier:          2f/CrupAj8WxehUkFFhUYAyvRuZLqXm0jw0ZKgTM1zA=
Subject key identifier:   6E:FD:0F:18:75:1E:F6:A7:68:FD:30:8A:DE:0D:83:36:A4:32:DA:9A
Certificate issuer:       /CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Certificate serial:       15D10D3F8A49C4B9C888ACFB16B2C6FD9E8A418C
Authority key identifier: B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35362e302f32322d3232203d3e20323730343431.roa
Signing time:             Tue 03 Dec 2024 14:13:49 +0000
ROA not before:           Tue 03 Dec 2024 14:08:49 +0000
ROA not after:            Tue 02 Dec 2025 14:13:49 +0000
asID:                     270441
IP address blocks:        200.14.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d1:0d:3f:8a:49:c4:b9:c8:88:ac:fb:16:b2:c6:fd:9e:8a:41:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
        Validity
            Not Before: Dec  3 14:08:49 2024 GMT
            Not After : Dec  2 14:13:49 2025 GMT
        Subject: CN=6EFD0F18751EF6A768FD308ADE0D8336A432DA9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:3a:a5:87:77:40:a1:2a:4d:8f:a9:6b:1b:
                    95:ea:1c:97:49:cd:bf:30:e3:09:d9:c5:1a:87:97:
                    52:55:ab:dd:f1:29:83:1b:28:30:09:9a:9f:e1:78:
                    96:3e:75:81:e6:b7:8b:7f:d2:34:c1:29:cc:ba:9e:
                    3e:04:50:2a:05:5c:2d:ef:1b:0c:9d:d5:5e:e6:fb:
                    09:33:77:35:ab:86:f5:b2:30:d3:64:62:4f:ac:44:
                    5b:32:e7:f6:5a:28:f4:69:92:41:39:61:38:ef:20:
                    31:d1:cb:5f:2a:7e:15:4f:2a:55:f8:11:a3:68:6e:
                    19:f7:f4:90:26:ec:f4:68:e8:a4:15:a6:b1:23:4c:
                    bc:88:ab:a4:3a:ac:ac:89:9f:37:7d:e5:27:b9:34:
                    c7:38:15:06:17:60:c8:bd:92:65:d1:dd:25:f6:ba:
                    38:c0:d7:79:e9:c0:85:e6:9d:72:d0:aa:04:d5:05:
                    8e:fe:37:d9:cb:62:58:72:9e:a4:d1:9e:bd:64:cd:
                    bb:51:00:b7:77:4d:27:71:03:b0:d0:3f:1c:8e:85:
                    ae:c7:d4:aa:0d:e9:e2:81:08:d2:e7:45:a6:c1:8e:
                    42:c1:9f:31:72:f0:ab:17:b0:60:bb:32:ac:13:4b:
                    77:d3:24:20:62:12:5e:e3:c2:b4:3b:04:36:2e:62:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FD:0F:18:75:1E:F6:A7:68:FD:30:8A:DE:0D:83:36:A4:32:DA:9A
            X509v3 Authority Key Identifier:
                keyid:B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35362e302f32322d3232203d3e20323730343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:8f:bc:68:f0:2e:c3:bd:5b:86:99:d9:c6:e2:c8:0d:d4:8c:
         e6:f9:df:19:42:43:42:6c:a1:d4:39:b2:16:60:ac:3c:a0:3f:
         4e:1a:2e:71:53:bf:45:b9:0c:e5:88:1e:c8:6b:fa:6d:6a:33:
         c4:19:66:7b:63:f3:06:60:cb:1a:26:b3:f4:fe:97:8c:b0:8e:
         74:d0:60:1c:7c:ae:4f:7c:4f:32:12:31:bc:be:06:e8:c5:3e:
         9f:01:08:77:e3:bc:89:55:38:27:d1:82:e1:8f:27:4b:d0:dc:
         74:59:e5:6d:4d:31:0c:78:60:f4:7c:8f:65:b5:76:15:d5:f1:
         a9:32:08:3b:bd:6e:7f:3b:c7:0c:17:d7:bb:09:fb:3e:47:ed:
         e6:cd:e2:bc:19:ce:80:ca:ef:67:5f:ff:29:09:61:10:28:bf:
         3c:d9:a9:4f:b2:16:c6:64:0a:0b:07:35:ed:2d:39:a0:56:72:
         d0:4e:ea:1b:45:20:9a:58:ce:36:f9:06:5e:87:68:59:cc:b2:
         d7:67:61:2f:90:c9:d3:20:7e:fc:ec:cc:75:a1:ee:50:73:10:
         b8:13:a0:88:80:bd:22:71:e5:c4:df:aa:ed:07:1c:fd:52:66:
         88:a1:52:1e:b0:e1:36:33:20:0c:dd:aa:28:35:b0:ab:8d:52:
         2f:b5:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:20:40 2025 by rpki-client