Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35392e302f32342d3234203d3e20323730343431.roa
File:                     3230302e31342e35392e302f32342d3234203d3e20323730343431.roa (raw, json)
Hash identifier:          3PEh2nR6TVEaPxZ1ZEc8rucy0urTfnNdYkv8dg7BNpE=
Subject key identifier:   24:D5:91:82:28:F8:41:81:33:0C:0A:FD:86:8D:A2:8E:37:A2:2B:4A
Certificate issuer:       /CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Certificate serial:       0F557108C53449C706950E9656DFEF649ADD51C9
Authority key identifier: B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35392e302f32342d3234203d3e20323730343431.roa
Signing time:             Tue 03 Dec 2024 14:13:51 +0000
ROA not before:           Tue 03 Dec 2024 14:08:51 +0000
ROA not after:            Tue 02 Dec 2025 14:13:51 +0000
asID:                     270441
IP address blocks:        200.14.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:55:71:08:c5:34:49:c7:06:95:0e:96:56:df:ef:64:9a:dd:51:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
        Validity
            Not Before: Dec  3 14:08:51 2024 GMT
            Not After : Dec  2 14:13:51 2025 GMT
        Subject: CN=24D5918228F84181330C0AFD868DA28E37A22B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:42:b6:7d:13:ca:aa:91:79:af:17:77:1b:
                    f2:11:cd:ac:07:24:74:45:c2:53:57:96:94:5d:21:
                    cf:10:69:80:c2:49:d9:47:00:31:be:49:05:55:d3:
                    7e:1a:3e:97:45:54:92:4e:6f:00:5f:3e:ca:b1:a2:
                    3f:58:86:04:18:0a:d5:07:62:e2:dd:8a:37:98:d3:
                    44:e9:c9:38:4c:40:fb:d7:5d:de:04:0e:4f:40:37:
                    80:54:66:f9:6c:aa:59:68:08:ca:bb:0b:38:4f:95:
                    79:14:3e:88:26:bd:ca:06:38:22:80:e5:67:81:fa:
                    48:ea:1f:87:ab:bf:ba:85:f5:11:dc:23:70:69:dd:
                    3e:4c:59:db:e2:39:da:b8:47:e0:01:8f:55:cf:b2:
                    5b:12:49:22:ef:80:fc:fd:8a:67:d7:ce:af:34:f9:
                    11:5d:d1:d9:01:56:fc:f3:80:fb:9d:0b:25:51:cf:
                    b1:ff:b8:0d:ce:77:f7:67:5f:2b:ec:e4:47:75:dd:
                    03:a4:04:5a:cf:5b:83:ef:3c:61:7c:13:e2:e9:cd:
                    cc:2a:61:8f:46:99:eb:2b:ad:0f:aa:62:8e:c8:51:
                    63:ba:b5:f2:3d:8a:4f:b1:e7:10:87:c8:93:1d:86:
                    72:56:6d:a7:e7:af:e0:40:0e:c5:16:af:3f:1e:7e:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D5:91:82:28:F8:41:81:33:0C:0A:FD:86:8D:A2:8E:37:A2:2B:4A
            X509v3 Authority Key Identifier:
                keyid:B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/3230302e31342e35392e302f32342d3234203d3e20323730343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:33:cb:f8:80:dc:f4:b7:52:d0:b7:32:b5:3e:08:2d:f0:89:
         d2:e9:b5:5f:25:21:a1:87:16:73:a2:ee:d5:fb:a9:61:e4:e6:
         58:b1:7e:a2:6c:72:cf:af:b0:d0:6a:19:9d:e5:76:7f:95:85:
         19:13:a7:82:28:48:01:ee:fb:1a:f4:94:0f:41:a2:2f:6b:09:
         39:5a:bb:bb:c1:00:b7:6d:a7:c5:68:ab:ff:bc:1a:c5:0b:a0:
         f2:1e:d3:4e:19:d9:04:00:78:df:3b:8b:9e:ec:dc:d0:f5:a4:
         ef:eb:48:a0:aa:d1:38:9c:c5:20:c8:c1:3e:83:3d:4d:a0:01:
         77:f9:d2:77:0d:c1:1d:c0:92:da:74:4c:54:b8:ca:3c:93:41:
         09:45:d5:25:e1:e7:da:d0:92:bc:f3:7f:48:69:f2:f8:e8:02:
         79:94:64:b4:42:24:86:c8:ee:79:8d:0a:d0:29:3f:03:3c:d3:
         bb:51:30:3b:74:a4:93:d6:6d:21:30:b4:6e:d6:28:e1:44:03:
         91:69:64:7c:0b:4a:ee:3f:09:a8:9a:b0:80:e5:c7:e2:10:aa:
         f7:25:5b:9f:ab:9e:e9:cd:93:2e:f2:53:dc:7c:b3:ed:d7:81:
         c4:69:48:ca:10:58:5e:9a:9f:79:79:2f:87:0f:3c:eb:45:f6:
         39:84:28:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD1VxCMU0SccGlQ6WVt/vZJrdUckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdBNDdCOTU0RDhBRDg5MjNBN0E4RkFEQ0RCODI3ODdD
MzFGQjE2QTAeFw0yNDEyMDMxNDA4NTFaFw0yNTEyMDIxNDEzNTFaMDMxMTAvBgNV
BAMTKDI0RDU5MTgyMjhGODQxODEzMzBDMEFGRDg2OERBMjhFMzdBMjJCNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AEK2fRPKqpF5rxd3G/IRzawH
JHRFwlNXlpRdIc8QaYDCSdlHADG+SQVV034aPpdFVJJObwBfPsqxoj9YhgQYCtUH
YuLdijeY00TpyThMQPvXXd4EDk9AN4BUZvlsqlloCMq7CzhPlXkUPogmvcoGOCKA
5WeB+kjqH4erv7qF9RHcI3Bp3T5MWdviOdq4R+ABj1XPslsSSSLvgPz9imfXzq80
+RFd0dkBVvzzgPudCyVRz7H/uA3Od/dnXyvs5Ed13QOkBFrPW4PvPGF8E+Lpzcwq
YY9GmesrrQ+qYo7IUWO6tfI9ik+x5xCHyJMdhnJWbafnr+BADsUWrz8efmxRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJNWRgij4QYEzDAr9ho2ijjeiK0owHwYDVR0j
BBgwFoAUt6R7lU2K2JI6eo+tzbgnh8MfsWowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2Q3NDVkU0NqTmtDWHdKdWlFWDhyUXdqN1ZYdFl5TjI4d2doSmJCNUpC
eE0vMC9CN0E0N0I5NTREOEFEODkyM0E3QThGQURDREI4Mjc4N0MzMUZCMTZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3QTQ3Qjk1NEQ4QUQ4OTIz
QTdBOEZBRENEQjgyNzg3QzMxRkIxNkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NkNzQ1ZFNDak5rQ1h3SnVpRVg4clF3ajdWWHRZeU4yOHdnaEpiQjVKQnhNLzAv
MzIzMDMwMmUzMTM0MmUzNTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzQzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyA47MA0GCSqGSIb3DQEBCwUAA4IBAQCUM8v4gNz0
t1LQtzK1Pggt8InS6bVfJSGhhxZzou7V+6lh5OZYsX6ibHLPr7DQahmd5XZ/lYUZ
E6eCKEgB7vsa9JQPQaIvawk5Wru7wQC3bafFaKv/vBrFC6DyHtNOGdkEAHjfO4ue
7NzQ9aTv60igqtE4nMUgyME+gz1NoAF3+dJ3DcEdwJLadExUuMo8k0EJRdUl4efa
0JK8839IafL46AJ5lGS0QiSGyO55jQrQKT8DPNO7UTA7dKST1m0hMLRu1ijhRAOR
aWR8C0ruPwmomrCA5cfiEKr3JVufq57pzZMu8lPcfLPt14HEaUjKEFhemp95eS+H
DzzrRfY5hChH
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:06:15 2025 by rpki-client