Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233362e33322e302f31392d3139203d3e2032373136.roa
File:                     3230302e3233362e33322e302f31392d3139203d3e2032373136.roa (raw, json)
Hash identifier:          bjShw49TZ685idiZwGu3KstXyt67DK4mrKTBjFFnoyg=
Subject key identifier:   6F:94:4B:D5:2B:C8:0A:57:95:74:D7:38:19:2F:9D:98:0D:8F:B1:1E
Certificate issuer:       /CN=FE00A0246E047910F52B97F063352EE5D22A71CC
Certificate serial:       3B219DFD48319BDE5BFC3C1E03474D16FE43A2A5
Authority key identifier: FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233362e33322e302f31392d3139203d3e2032373136.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     2716
IP address blocks:        200.236.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:21:9d:fd:48:31:9b:de:5b:fc:3c:1e:03:47:4d:16:fe:43:a2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE00A0246E047910F52B97F063352EE5D22A71CC
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:83:24:87:a8:b6:c4:f1:65:8e:97:37:7e:
                    f9:23:c7:42:7a:52:a3:9c:eb:d1:e5:d5:48:47:cc:
                    3c:c0:8d:0f:7a:1a:57:da:25:1b:7c:9f:68:22:7a:
                    3e:9e:b7:a3:cc:f7:23:f2:da:37:91:fa:d2:21:73:
                    9b:c0:d4:e5:14:a3:b7:61:d9:87:2d:ad:88:76:04:
                    2a:ac:da:f3:c0:75:15:23:c1:f7:d6:d2:85:e5:75:
                    4c:97:31:2f:f3:45:c9:d2:d0:54:f5:1c:2e:70:fa:
                    91:52:47:d2:56:f5:b3:f3:6a:9c:4c:5e:4f:18:4c:
                    27:e8:30:dc:1c:d5:30:9e:ab:6d:d8:c9:8f:8b:84:
                    27:d8:ba:5c:31:a8:25:b8:87:2f:70:4a:f2:4b:17:
                    de:0f:ff:79:59:35:c7:32:76:70:d5:2f:b6:77:10:
                    4e:f4:4b:3b:b6:20:72:6e:c5:90:7d:e3:2c:e6:77:
                    01:56:75:c1:bf:59:e3:48:84:cd:8d:65:11:9a:a3:
                    a4:ee:1a:ee:6c:b2:ea:80:06:0c:7a:83:8f:32:d9:
                    b2:2f:5e:3a:ac:4f:b4:12:58:23:77:51:43:b5:bf:
                    b6:19:22:0f:5c:2c:b5:4e:80:c1:46:22:5d:b6:f4:
                    0c:a2:3f:2c:d0:3b:be:48:9f:4d:e7:57:c8:ed:4a:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:94:4B:D5:2B:C8:0A:57:95:74:D7:38:19:2F:9D:98:0D:8F:B1:1E
            X509v3 Authority Key Identifier:
                keyid:FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233362e33322e302f31392d3139203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.236.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a5:af:14:04:e2:62:28:6e:fb:24:7e:f9:cb:04:d2:4a:7f:f8:
         a5:a6:91:30:f1:33:9a:90:61:b0:cf:de:e1:d6:45:ee:86:a4:
         91:bd:cd:dc:5c:46:5e:44:1f:90:cb:7b:12:3f:26:e6:1f:1d:
         7f:04:75:cf:4d:6a:2e:a7:11:c4:1b:b3:95:8f:c3:fa:c6:19:
         b5:6c:b3:df:c7:c9:60:1a:1f:10:10:07:c1:ea:d4:5a:69:b4:
         bc:3f:30:c4:d2:86:c7:f8:61:7b:e4:c4:6e:18:ab:02:a9:cc:
         b1:85:73:21:ae:bc:c9:a3:ac:e8:56:10:b0:04:b5:87:bb:c6:
         be:dc:e3:41:55:ac:5b:42:58:51:02:db:dc:f8:d9:aa:3d:87:
         df:cd:8e:55:c6:58:e7:be:16:1d:c4:1b:d8:54:09:74:23:16:
         c8:44:37:4d:a7:97:66:44:ea:3c:49:ee:e9:69:3a:d3:8e:74:
         2b:66:78:ee:02:88:6c:fc:dd:32:67:0d:86:33:61:c6:90:bd:
         fa:81:2b:14:db:fa:aa:c7:e4:88:c5:dd:b5:4a:4b:ef:e7:ea:
         b6:13:13:04:1f:af:22:ae:2a:be:1b:b9:95:7e:83:fe:a7:af:
         f1:5b:93:5d:20:75:b2:5f:85:3d:f4:94:70:d1:a9:07:b2:d1:
         40:55:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:24:45 2025 by rpki-client