Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/3230312e37362e3230382e302f32302d3234203d3e203238363533.roa
File:                     3230312e37362e3230382e302f32302d3234203d3e203238363533.roa (raw, json)
Hash identifier:          S7FIx65MOYvwNWASAb73py/WiD+6IdVIR/zI0rZHBj4=
Subject key identifier:   E0:79:1F:19:4E:9C:25:78:E8:5A:C8:29:5D:17:82:04:46:D2:09:1C
Certificate issuer:       /CN=ECC3A2FA75716FA5208D65EF79B557641DFD7D18
Certificate serial:       73A539173388A2D9C724DD728FD808AED1809460
Authority key identifier: EC:C3:A2:FA:75:71:6F:A5:20:8D:65:EF:79:B5:57:64:1D:FD:7D:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECC3A2FA75716FA5208D65EF79B557641DFD7D18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/3230312e37362e3230382e302f32302d3234203d3e203238363533.roa
Signing time:             Sun 23 Feb 2025 04:32:16 +0000
ROA not before:           Sun 23 Feb 2025 04:27:16 +0000
ROA not after:            Sun 22 Feb 2026 04:32:16 +0000
asID:                     28653
IP address blocks:        201.76.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a5:39:17:33:88:a2:d9:c7:24:dd:72:8f:d8:08:ae:d1:80:94:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC3A2FA75716FA5208D65EF79B557641DFD7D18
        Validity
            Not Before: Feb 23 04:27:16 2025 GMT
            Not After : Feb 22 04:32:16 2026 GMT
        Subject: CN=E0791F194E9C2578E85AC8295D17820446D2091C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0a:34:3a:32:33:36:62:66:4b:e5:c0:c0:4e:
                    69:bd:b4:f4:17:08:51:90:1d:03:bb:6b:9b:12:b8:
                    a1:c4:27:ef:09:94:fa:b4:69:4d:c4:79:98:98:a3:
                    fe:06:03:ba:a7:f6:64:46:e4:88:65:c8:fd:7a:bb:
                    63:77:2f:d8:ec:0a:51:f8:04:3f:b8:27:f8:d8:6f:
                    d5:c9:c8:53:a5:48:f0:81:99:30:b1:bf:42:1b:01:
                    49:6d:dd:1c:e3:54:a6:72:54:74:70:a3:6b:d0:f4:
                    ac:d1:eb:fc:26:ef:e7:2c:54:2e:29:1d:c0:9a:87:
                    54:2c:36:ff:f5:c2:f1:d6:b4:4e:f2:32:00:6e:80:
                    56:17:aa:1b:aa:5d:a8:5f:36:a6:7b:06:02:fc:cd:
                    9f:8b:bc:94:ab:ba:6b:6c:11:a0:dc:e4:1f:40:e9:
                    36:44:b8:05:5c:2e:91:5f:b3:02:41:61:9b:fb:46:
                    aa:83:10:26:f9:78:46:15:74:db:43:a4:01:65:a7:
                    6f:34:95:f1:2b:9d:9c:07:5a:23:b1:0f:75:d6:92:
                    06:17:9d:20:68:69:42:cd:3e:13:dc:0e:94:43:08:
                    35:0f:8d:ec:09:f9:a6:aa:88:4c:4c:30:2c:01:70:
                    44:fc:9e:ac:c0:77:a6:0f:f5:d6:60:25:25:9b:ed:
                    b1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:79:1F:19:4E:9C:25:78:E8:5A:C8:29:5D:17:82:04:46:D2:09:1C
            X509v3 Authority Key Identifier:
                keyid:EC:C3:A2:FA:75:71:6F:A5:20:8D:65:EF:79:B5:57:64:1D:FD:7D:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/ECC3A2FA75716FA5208D65EF79B557641DFD7D18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECC3A2FA75716FA5208D65EF79B557641DFD7D18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/3230312e37362e3230382e302f32302d3234203d3e203238363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:12:d9:63:f5:e3:95:81:e0:7d:0a:ef:86:04:d1:cd:3c:9d:
         79:90:07:8b:77:79:d8:24:1a:db:37:8d:6d:35:a0:11:1a:b1:
         95:ef:b5:fa:e7:96:53:d7:1a:cb:4a:52:c3:c1:d3:24:12:4e:
         21:4e:bc:6c:5b:41:41:f6:aa:40:12:80:17:0f:f0:ae:fc:42:
         5a:73:b6:5c:54:12:c7:c5:d4:7c:e8:ba:39:f3:91:e2:c2:cf:
         16:46:04:28:18:94:ed:61:24:dc:35:1a:3c:24:c4:70:14:dc:
         59:36:b5:88:ee:2b:ce:61:84:1f:c7:e6:19:66:c8:bd:28:1b:
         70:cd:a6:34:41:81:77:d8:84:c1:29:33:3a:d3:8a:88:2e:f5:
         91:93:82:0f:40:9d:5f:01:c1:c3:78:ad:90:69:89:48:d7:b3:
         f1:cf:6e:eb:90:9c:be:36:be:83:7f:aa:3f:3e:dd:49:60:51:
         b5:a0:69:24:35:f6:59:c7:b6:08:ad:b1:1b:a5:9c:e2:a2:96:
         e6:c3:53:df:7d:80:dd:d9:b2:b6:8d:b9:16:d2:3f:3a:12:ef:
         73:67:bc:c5:92:0f:0b:19:98:b7:a0:2a:cd:62:9a:23:ac:6b:
         76:ae:3d:48:e3:89:87:28:16:a6:88:10:c0:22:be:fd:f4:7d:
         c1:b1:64:45
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc6U5FzOIotnHJN1yj9gIrtGAlGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNDM0EyRkE3NTcxNkZBNTIwOEQ2NUVGNzlCNTU3NjQx
REZEN0QxODAeFw0yNTAyMjMwNDI3MTZaFw0yNjAyMjIwNDMyMTZaMDMxMTAvBgNV
BAMTKEUwNzkxRjE5NEU5QzI1NzhFODVBQzgyOTVEMTc4MjA0NDZEMjA5MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWCjQ6MjM2YmZL5cDATmm9tPQX
CFGQHQO7a5sSuKHEJ+8JlPq0aU3EeZiYo/4GA7qn9mRG5IhlyP16u2N3L9jsClH4
BD+4J/jYb9XJyFOlSPCBmTCxv0IbAUlt3RzjVKZyVHRwo2vQ9KzR6/wm7+csVC4p
HcCah1QsNv/1wvHWtE7yMgBugFYXqhuqXahfNqZ7BgL8zZ+LvJSrumtsEaDc5B9A
6TZEuAVcLpFfswJBYZv7RqqDECb5eEYVdNtDpAFlp280lfErnZwHWiOxD3XWkgYX
nSBoaULNPhPcDpRDCDUPjewJ+aaqiExMMCwBcET8nqzAd6YP9dZgJSWb7bE7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4HkfGU6cJXjoWsgpXReCBEbSCRwwHwYDVR0j
BBgwFoAU7MOi+nVxb6UgjWXvebVXZB39fRgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uQ2JwOHY3aURNdXJnVnRBRHJNMTd3Z1RKdUZpb3pTa2tzb3h2NTRB
alAvMC9FQ0MzQTJGQTc1NzE2RkE1MjA4RDY1RUY3OUI1NTc2NDFERkQ3RDE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDQzNBMkZBNzU3MTZGQTUy
MDhENjVFRjc5QjU1NzY0MURGRDdEMTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkNicDh2N2lETXVyZ1Z0QURyTTE3d2dUSnVGaW96U2trc294djU0QWpQLzAv
MzIzMDMxMmUzNzM2MmUzMjMwMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyUzQMA0GCSqGSIb3DQEBCwUAA4IBAQA9Etlj9eOV
geB9Cu+GBNHNPJ15kAeLd3nYJBrbN41tNaARGrGV77X655ZT1xrLSlLDwdMkEk4h
TrxsW0FB9qpAEoAXD/Cu/EJac7ZcVBLHxdR86Lo585Hiws8WRgQoGJTtYSTcNRo8
JMRwFNxZNrWI7ivOYYQfx+YZZsi9KBtwzaY0QYF32ITBKTM604qILvWRk4IPQJ1f
AcHDeK2QaYlI17Pxz27rkJy+Nr6Df6o/Pt1JYFG1oGkkNfZZx7YIrbEbpZziopbm
w1PffYDd2bK2jbkW0j86Eu9zZ7zFkg8LGZi3oCrNYpojrGt2rj1I44mHKBamiBDA
Ir799H3BsWRF
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:10 2025 by rpki-client