Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35372e302f32342d3234203d3e20323730343431.roa
File:                     3230302e31342e35372e302f32342d3234203d3e20323730343431.roa (raw, json)
Hash identifier:          2CEIScxi0QLw3UkQlUKe+eHoQWSqc05MPaUupBj2+rs=
Subject key identifier:   B8:9C:84:BC:31:8C:CD:44:EE:2C:30:A4:92:C1:25:A6:E4:7B:23:44
Certificate issuer:       /CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Certificate serial:       4A42F160E366C481A43DC6B863848875F4F4EFCD
Authority key identifier: B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35372e302f32342d3234203d3e20323730343431.roa
Signing time:             Tue 03 Dec 2024 14:13:50 +0000
ROA not before:           Tue 03 Dec 2024 14:08:50 +0000
ROA not after:            Tue 02 Dec 2025 14:13:50 +0000
asID:                     270441
IP address blocks:        200.14.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:42:f1:60:e3:66:c4:81:a4:3d:c6:b8:63:84:88:75:f4:f4:ef:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
        Validity
            Not Before: Dec  3 14:08:50 2024 GMT
            Not After : Dec  2 14:13:50 2025 GMT
        Subject: CN=B89C84BC318CCD44EE2C30A492C125A6E47B2344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:21:25:c2:c4:fe:10:87:55:aa:9d:91:d4:
                    49:5c:8d:9d:a0:56:31:6e:43:36:35:32:6f:38:6e:
                    01:2a:1a:e0:3f:1a:fd:7a:22:8d:25:94:c2:fd:70:
                    4b:04:cb:a8:01:92:ee:63:16:6d:21:c6:08:fa:34:
                    3c:de:a8:ed:04:a0:a2:86:04:0e:a8:13:5a:dc:56:
                    c0:c9:fd:04:d8:5c:28:44:70:c7:33:71:d6:e2:7d:
                    a4:c2:c7:53:96:4d:23:3c:de:c3:83:8f:e6:fc:ff:
                    65:85:ba:54:c9:3b:8a:49:8d:a9:52:f3:4c:d1:ac:
                    3c:ce:b5:2e:41:e1:aa:83:ab:b0:5f:0f:9c:c4:1a:
                    0b:e9:ea:84:7f:4f:02:0e:74:52:cf:d4:9f:42:76:
                    f1:02:a5:4b:e8:1d:f9:2b:ee:5c:20:69:45:b2:1e:
                    96:ed:d7:0d:0a:9b:98:5b:5b:cd:ed:07:ed:03:e9:
                    64:59:81:55:d0:b0:90:cb:73:11:2f:2d:e5:ab:86:
                    db:f5:e2:19:c3:06:44:ed:ae:d9:cc:2c:ed:04:02:
                    ac:5d:ad:63:25:84:12:c9:8f:91:e4:04:7d:ce:1c:
                    0a:14:bf:f3:60:90:33:0b:9d:19:fd:92:8c:d4:b6:
                    98:cb:6a:54:45:35:5d:a9:b0:55:86:1e:f6:a1:96:
                    8d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9C:84:BC:31:8C:CD:44:EE:2C:30:A4:92:C1:25:A6:E4:7B:23:44
            X509v3 Authority Key Identifier:
                keyid:B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35372e302f32342d3234203d3e20323730343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:91:8e:a9:e2:79:15:a5:d9:32:42:0f:2d:be:ee:4a:c9:12:
         94:3f:cb:c6:a8:a2:1b:ff:f7:8c:c7:57:79:1c:01:fe:f9:c2:
         8c:8f:50:3c:b5:87:b6:b8:e5:cc:a9:8f:dd:77:56:c7:ea:c0:
         8c:39:81:e3:6b:d1:f8:e6:98:61:08:36:e1:99:63:56:fd:62:
         a5:b7:25:12:cd:af:71:4b:b2:8e:e3:5d:d7:04:8b:0b:4a:58:
         d3:0a:e3:31:81:ec:c5:44:1b:c1:20:e5:75:93:2b:fd:36:2e:
         5a:db:ef:f4:b4:06:d7:ba:04:ef:aa:f9:a2:0f:5b:be:7e:4c:
         67:92:54:89:50:7e:ed:d7:a2:cc:b4:96:b5:aa:71:ac:4f:0b:
         42:85:21:60:ea:68:d8:5f:16:76:66:69:ab:50:82:a6:5a:1f:
         6e:5a:87:2f:f9:ef:45:46:51:1c:b8:fc:ba:c8:64:f9:af:48:
         d9:dc:73:f4:73:63:e9:d9:2b:24:cb:52:17:d1:5a:e6:42:ce:
         50:2b:39:32:d5:ff:60:1c:a0:56:aa:a2:c0:3a:11:8e:c8:c0:
         94:00:09:9c:1d:5b:13:03:50:28:82:fc:35:db:43:41:98:89:
         ee:d7:7e:d8:e9:14:55:c0:58:34:0d:3c:65:ad:15:8c:d3:dc:
         13:9f:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:30:09 2025 by rpki-client