Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3230312e372e3136342e302f32342d3234203d3e20323633323930.roa
File:                     3230312e372e3136342e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier:          sgA8LqcheVm40OD+DvwzEc7T37SyNqJFUa4KEDaT4c0=
Subject key identifier:   4F:5F:60:96:28:58:1B:ED:8E:62:29:A2:FD:E6:C7:45:5B:DC:67:8B
Certificate issuer:       /CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Certificate serial:       2B6A0782D85D4E5C04F31FEAF17F5B79863F50BC
Authority key identifier: A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3230312e372e3136342e302f32342d3234203d3e20323633323930.roa
Signing time:             Mon 02 Jun 2025 20:51:10 +0000
ROA not before:           Mon 02 Jun 2025 20:46:10 +0000
ROA not after:            Mon 01 Jun 2026 20:51:10 +0000
asID:                     263290
IP address blocks:        201.7.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6a:07:82:d8:5d:4e:5c:04:f3:1f:ea:f1:7f:5b:79:86:3f:50:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
        Validity
            Not Before: Jun  2 20:46:10 2025 GMT
            Not After : Jun  1 20:51:10 2026 GMT
        Subject: CN=4F5F609628581BED8E6229A2FDE6C7455BDC678B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:d0:df:44:c9:1e:3c:03:e2:d8:31:17:4a:
                    3b:82:4f:5a:b1:6e:35:39:bd:e3:6a:25:b9:b8:bc:
                    90:88:94:ba:d6:5b:69:f2:0a:00:35:eb:ef:1c:ec:
                    34:ae:08:57:e1:90:6c:e1:69:fb:62:41:f7:d0:75:
                    0d:e7:94:75:2f:ba:ec:d1:e5:d6:8b:1b:3b:3f:ba:
                    b7:e4:bf:01:9a:7c:fe:7f:7c:11:fe:d4:76:f2:5a:
                    06:10:61:31:4c:fd:19:22:ab:79:32:de:c8:ba:04:
                    f0:ea:4f:25:e4:ad:fa:ba:f5:77:19:bf:dc:7e:d8:
                    a5:f0:19:6f:cf:b8:0a:2e:d7:b4:70:7b:50:55:5a:
                    72:da:5e:70:01:d5:b9:88:b6:0f:1f:00:c7:6b:b8:
                    46:c1:f5:19:cb:34:75:70:4b:3c:0f:a1:55:e9:20:
                    02:aa:a1:b8:04:95:45:ea:af:9a:5d:2e:28:8d:8e:
                    08:29:53:4c:d2:73:81:8b:1c:6f:e6:4f:3d:1c:61:
                    23:c6:5a:20:37:c3:06:36:da:77:fb:af:47:58:ec:
                    cc:08:dc:2f:11:ac:f2:be:f4:4a:2d:a3:4f:f6:c3:
                    53:ec:e8:48:1b:71:5f:0f:bb:f5:47:d9:d2:25:da:
                    3a:c8:fd:e9:7a:bd:e9:f7:69:26:06:b4:fc:85:84:
                    2f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5F:60:96:28:58:1B:ED:8E:62:29:A2:FD:E6:C7:45:5B:DC:67:8B
            X509v3 Authority Key Identifier:
                keyid:A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3230312e372e3136342e302f32342d3234203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:28:87:88:90:e3:a5:88:24:19:53:b4:92:c1:45:f0:6b:d0:
         4e:76:44:cf:53:5c:e4:00:c9:a1:07:2b:79:da:38:31:a2:09:
         93:ea:86:ae:f1:6a:b1:4b:28:80:ae:a5:79:2a:fc:6a:94:43:
         2a:77:ec:cd:8a:ee:82:44:dd:17:23:45:3f:82:af:4f:96:91:
         7d:c3:08:89:1c:01:0e:2e:e2:4e:ba:71:08:0a:20:07:35:c9:
         5e:c2:a6:b0:ca:c6:09:73:30:92:5a:a3:5c:5a:10:fa:54:05:
         85:1d:50:7e:c8:d9:ca:26:56:12:0b:7d:c9:55:be:3f:55:2e:
         36:05:fc:c1:f8:fd:99:33:c0:a9:ca:af:ba:a7:9e:4b:95:90:
         f3:57:c5:db:d0:75:79:7d:c6:a4:a2:10:5e:b5:71:44:b8:de:
         20:b7:da:62:05:b5:13:a7:42:ac:3a:b4:2b:bb:47:bb:47:77:
         8b:62:59:05:c0:82:20:71:36:1f:65:7a:35:b2:36:88:d0:46:
         33:d6:ac:4a:12:55:ba:2e:c1:4e:b5:1c:bb:51:f7:5c:a8:9d:
         26:a1:8f:c3:55:f4:74:75:86:f9:02:fd:53:e0:28:3d:f1:d0:
         07:b3:a2:ad:5d:3f:cd:8f:cb:8f:1d:af:51:ae:93:ac:e3:f1:
         d6:97:3b:a2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK2oHgthdTlwE8x/q8X9beYY/ULwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI3QzcxM0VFQzNFNEU1RjMxOUU2NzY4NEVDRkM5NkJF
QjU0Rjk3MzAeFw0yNTA2MDIyMDQ2MTBaFw0yNjA2MDEyMDUxMTBaMDMxMTAvBgNV
BAMTKDRGNUY2MDk2Mjg1ODFCRUQ4RTYyMjlBMkZERTZDNzQ1NUJEQzY3OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVdDfRMkePAPi2DEXSjuCT1qx
bjU5veNqJbm4vJCIlLrWW2nyCgA16+8c7DSuCFfhkGzhaftiQffQdQ3nlHUvuuzR
5daLGzs/urfkvwGafP5/fBH+1HbyWgYQYTFM/Rkiq3ky3si6BPDqTyXkrfq69XcZ
v9x+2KXwGW/PuAou17Rwe1BVWnLaXnAB1bmItg8fAMdruEbB9RnLNHVwSzwPoVXp
IAKqobgElUXqr5pdLiiNjggpU0zSc4GLHG/mTz0cYSPGWiA3wwY22nf7r0dY7MwI
3C8RrPK+9Eoto0/2w1Ps6EgbcV8Pu/VH2dIl2jrI/el6ven3aSYGtPyFhC/lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUT19glihYG+2OYimi/ebHRVvcZ4swHwYDVR0j
BBgwFoAUonxxPuw+Tl8xnmdoTs/Ja+tU+XMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGc0QkI5Q2paZ1lEeVJ6WkZWc1hqWXhjOENpbnpVQTZRamd0UHk0TDdm
ckEvMS9BMjdDNzEzRUVDM0U0RTVGMzE5RTY3Njg0RUNGQzk2QkVCNTRGOTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyN0M3MTNFRUMzRTRFNUYz
MTlFNjc2ODRFQ0ZDOTZCRUI1NEY5NzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RnNEJCOUNqWmdZRHlSelpGVnNYall4YzhDaW56VUE2UWpndFB5NEw3ZnJBLzEv
MzIzMDMxMmUzNzJlMzEzNjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzIzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyQekMA0GCSqGSIb3DQEBCwUAA4IBAQDMKIeIkOOl
iCQZU7SSwUXwa9BOdkTPU1zkAMmhByt52jgxogmT6oau8WqxSyiArqV5KvxqlEMq
d+zNiu6CRN0XI0U/gq9PlpF9wwiJHAEOLuJOunEICiAHNclewqawysYJczCSWqNc
WhD6VAWFHVB+yNnKJlYSC33JVb4/VS42BfzB+P2ZM8Cpyq+6p55LlZDzV8Xb0HV5
fcakohBetXFEuN4gt9piBbUTp0KsOrQru0e7R3eLYlkFwIIgcTYfZXo1sjaI0EYz
1qxKElW6LsFOtRy7UfdcqJ0moY/DVfR0dYb5Av1T4Cg98dAHs6KtXT/Nj8uPHa9R
rpOs4/HWlzui
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:32:58 2025 by rpki-client