Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32322e302f32342d3234203d3e20323636313930.roa
File:                     3230302e392e32322e302f32342d3234203d3e20323636313930.roa (raw, json)
Hash identifier:          kBMa7OaowpfdMy8ZIgt/O7OYptNPMujAi3y9tO6OReg=
Subject key identifier:   27:7E:85:96:A8:7A:54:A7:D6:0D:60:32:DC:6C:02:C9:E8:ED:ED:A3
Certificate issuer:       /CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
Certificate serial:       3DBF44F45F335DAA7C97AE679BF6292CC74C064A
Authority key identifier: 44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32322e302f32342d3234203d3e20323636313930.roa
Signing time:             Thu 21 Sep 2023 21:30:11 +0000
ROA not before:           Thu 21 Sep 2023 21:25:11 +0000
ROA not after:            Thu 19 Sep 2024 21:30:11 +0000
asID:                     266190
IP address blocks:        200.9.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:bf:44:f4:5f:33:5d:aa:7c:97:ae:67:9b:f6:29:2c:c7:4c:06:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
        Validity
            Not Before: Sep 21 21:25:11 2023 GMT
            Not After : Sep 19 21:30:11 2024 GMT
        Subject: CN=277E8596A87A54A7D60D6032DC6C02C9E8EDEDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:49:75:80:bb:f6:39:79:20:1a:7e:cb:2f:
                    39:08:86:e4:16:ea:0b:22:c1:3c:95:da:cb:83:c6:
                    97:b9:cc:fb:99:e7:74:ec:f2:65:37:2e:86:b4:42:
                    5a:c3:e7:11:6b:ff:a9:64:b6:a5:60:05:ba:6b:d4:
                    30:21:c1:a8:3f:34:49:d9:bf:a6:22:cd:91:6d:2c:
                    5c:a5:59:e6:32:81:b0:df:e0:30:05:53:30:01:fb:
                    ab:38:e6:bc:df:bb:7d:f4:08:1e:c2:31:01:77:95:
                    8e:84:e7:c3:41:f3:0e:52:f1:e4:a4:c3:79:73:45:
                    29:e7:b5:af:01:ae:05:0b:75:4c:54:a7:74:c1:55:
                    9a:8f:fe:4c:95:5f:ef:36:9b:0a:57:55:5e:b5:c8:
                    c4:38:78:8b:9f:9e:00:2c:9d:09:54:29:9a:34:05:
                    76:d1:70:2d:34:24:17:89:5a:ad:6c:47:8a:60:81:
                    ca:ae:03:68:24:bd:ab:70:21:44:45:35:a1:11:64:
                    02:78:3c:d8:05:69:1b:d1:6f:5f:1d:cd:20:ff:c1:
                    47:c3:74:57:fa:6c:df:8c:bd:24:25:47:77:fc:1f:
                    40:02:16:0a:60:96:64:77:ce:7f:99:12:b1:90:51:
                    09:b6:ae:bf:65:3a:e7:a5:e9:c3:d7:60:e1:ce:ac:
                    2a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7E:85:96:A8:7A:54:A7:D6:0D:60:32:DC:6C:02:C9:E8:ED:ED:A3
            X509v3 Authority Key Identifier:
                keyid:44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32322e302f32342d3234203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:6c:e0:fe:4d:e9:ce:b0:2d:c2:4f:2f:92:1b:10:f5:48:dc:
         30:fc:15:b5:ee:67:f4:da:0d:3f:97:73:7b:1d:d4:c1:84:c7:
         9e:6f:b8:90:4e:e2:90:a5:3b:76:58:97:7d:f4:13:c1:4c:05:
         c5:ff:8d:8e:8c:23:65:f4:d2:9a:87:60:cf:b6:15:8b:00:cf:
         c2:2a:77:4d:cf:e6:54:ec:5d:87:a0:99:f4:5f:70:1f:f6:d0:
         9e:8f:18:ea:81:a7:d9:75:d3:5e:79:3f:77:f7:a3:4d:1e:86:
         37:a7:16:6e:4e:ac:c3:95:03:77:ec:58:d1:3d:1e:76:6e:ec:
         c5:4d:f1:ed:19:eb:20:bb:dd:5e:56:e2:be:54:42:e9:a2:32:
         94:bd:ba:0f:03:d9:72:3f:e7:7f:ca:f6:29:35:06:e0:15:ec:
         d9:d3:9c:dc:01:69:5c:5f:d3:95:4f:19:b3:29:32:af:d7:15:
         d0:39:45:65:5a:5d:e7:e1:a5:75:21:d4:84:d8:12:a0:d5:42:
         23:26:9e:84:95:96:bf:ff:b9:d0:69:11:19:41:9c:e0:ed:f2:
         1e:6b:22:74:93:a0:90:02:19:7e:66:52:39:37:54:3d:54:76:
         fa:c0:55:86:e1:79:89:96:af:d9:42:61:c7:81:4c:b9:ce:a5:
         f1:75:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:39 2025 by rpki-client