Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/3230302e3135322e38302e302f32302d3234203d3e203232373036.roa
File:                     3230302e3135322e38302e302f32302d3234203d3e203232373036.roa (raw, json)
Hash identifier:          EE+YBQ5qJfSuyEJoaKadl+hVki7I0LoGQdynSR1UvzI=
Subject key identifier:   4F:41:75:B3:31:6A:A6:3A:F3:7D:C5:9D:27:1B:3C:7D:6E:F5:F4:16
Certificate issuer:       /CN=9BAE48B608C127AF7D05ED6CEBDB68E70461DADD
Certificate serial:       3FF628568B7EA60CAC4A91CDF5C949527CFD9C19
Authority key identifier: 9B:AE:48:B6:08:C1:27:AF:7D:05:ED:6C:EB:DB:68:E7:04:61:DA:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/3230302e3135322e38302e302f32302d3234203d3e203232373036.roa
Signing time:             Mon 22 Jul 2024 17:50:49 +0000
ROA not before:           Mon 22 Jul 2024 17:45:49 +0000
ROA not after:            Mon 21 Jul 2025 17:50:49 +0000
asID:                     22706
IP address blocks:        200.152.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f6:28:56:8b:7e:a6:0c:ac:4a:91:cd:f5:c9:49:52:7c:fd:9c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BAE48B608C127AF7D05ED6CEBDB68E70461DADD
        Validity
            Not Before: Jul 22 17:45:49 2024 GMT
            Not After : Jul 21 17:50:49 2025 GMT
        Subject: CN=4F4175B3316AA63AF37DC59D271B3C7D6EF5F416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:84:e5:19:65:2f:4f:eb:5e:95:71:7f:23:
                    c3:71:ab:10:03:68:09:7a:b6:6f:16:06:ac:6b:71:
                    1a:5a:34:f4:d9:86:11:1f:e8:a8:59:db:38:90:69:
                    26:82:a2:34:0c:80:8a:23:fd:3b:89:c0:e0:3c:3a:
                    96:fb:ca:4a:97:83:2d:a3:d3:13:16:31:d6:31:2d:
                    0e:90:d8:bf:45:c3:2e:e6:97:71:76:7a:88:0a:83:
                    cc:30:81:8f:18:dc:c6:2f:24:10:e0:3a:c4:6a:54:
                    5b:ea:ec:c8:87:60:ca:31:ab:49:d0:9d:5a:62:ab:
                    f8:5f:e4:0c:73:2f:60:b1:a4:37:86:5e:61:c1:d7:
                    66:ca:0e:04:5c:f2:c1:af:9d:94:4c:fe:93:11:76:
                    19:3e:30:e3:f9:53:02:5e:f3:94:7c:65:51:dc:2d:
                    2e:31:44:7f:f6:f7:a0:08:e1:b5:64:33:64:b3:e3:
                    0b:8c:62:81:94:c4:97:4d:83:6f:2c:42:8d:29:1a:
                    a2:6f:48:3a:f1:4a:e5:20:7c:6b:32:95:20:83:51:
                    eb:5f:d8:b0:34:ff:06:11:1a:5c:2b:f7:da:a5:2e:
                    ed:a0:a4:4d:ad:24:0c:1f:7f:b9:48:c4:f8:a8:87:
                    d3:13:7a:51:2b:34:a1:6c:e2:fc:7d:98:51:96:36:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:41:75:B3:31:6A:A6:3A:F3:7D:C5:9D:27:1B:3C:7D:6E:F5:F4:16
            X509v3 Authority Key Identifier:
                keyid:9B:AE:48:B6:08:C1:27:AF:7D:05:ED:6C:EB:DB:68:E7:04:61:DA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/3230302e3135322e38302e302f32302d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:d0:cf:07:38:5f:4c:10:e9:59:41:2b:23:ec:45:7f:5a:75:
         3d:a1:c7:6e:98:09:ea:9a:72:ef:6b:35:3b:a4:c1:6a:e2:8a:
         de:6e:d3:66:30:4f:1e:e9:00:0c:36:f7:9d:f9:37:b9:80:3a:
         87:56:89:a8:3b:d7:d8:3e:c2:f9:05:d7:f7:55:0f:c3:be:86:
         ab:39:e5:7c:59:71:69:7c:e6:5f:b4:59:50:fa:6a:d4:a8:56:
         87:d2:dd:ac:ce:d5:67:4e:66:d7:6e:b0:6e:0a:f9:39:9e:c3:
         80:17:2b:da:f0:3e:6c:9c:e6:1c:89:0a:2d:c8:77:5c:da:15:
         e1:02:5e:b3:cd:01:9a:f6:3a:a2:b5:2d:a2:18:38:9b:ca:2e:
         f7:c5:2d:ac:cc:2f:f0:c2:d1:d2:3e:41:c4:c4:9c:ea:34:91:
         58:db:73:be:dc:ca:ce:20:d9:9f:2e:71:62:b4:a7:0c:73:76:
         54:90:91:eb:cb:40:ef:aa:f3:60:62:ca:d3:b6:53:5a:5a:8e:
         04:cd:5f:57:07:2a:c2:cb:c0:2a:4f:59:9f:ce:de:51:d1:46:
         71:a9:b1:2f:a6:5c:1a:72:33:ab:c6:5a:31:09:c4:06:db:69:
         8e:88:6f:f2:f8:a5:08:b8:40:37:ab:1c:f5:f9:96:ec:75:32:
         6c:2a:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:13 2025 by rpki-client