Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa
File:                     3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa (raw, json)
Hash identifier:          EzVTxufRnErPKPeMWacatUNbTqVESl7UE7561Pj0TgU=
Subject key identifier:   4C:CB:B0:E3:42:CD:20:F0:B9:93:05:EF:F3:C4:60:AF:47:9A:DC:9D
Certificate issuer:       /CN=9BEA1CF5115139C1B81530020BACBC97FF588226
Certificate serial:       0DB5C0248F32A6C3362000B38F92D0BD3876BF0C
Authority key identifier: 9B:EA:1C:F5:11:51:39:C1:B8:15:30:02:0B:AC:BC:97:FF:58:82:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BEA1CF5115139C1B81530020BACBC97FF588226.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa
Signing time:             Sat 15 Mar 2025 15:04:16 +0000
ROA not before:           Sat 15 Mar 2025 14:59:16 +0000
ROA not after:            Sat 14 Mar 2026 15:04:16 +0000
asID:                     271335
IP address blocks:        207.248.20.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b5:c0:24:8f:32:a6:c3:36:20:00:b3:8f:92:d0:bd:38:76:bf:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BEA1CF5115139C1B81530020BACBC97FF588226
        Validity
            Not Before: Mar 15 14:59:16 2025 GMT
            Not After : Mar 14 15:04:16 2026 GMT
        Subject: CN=4CCBB0E342CD20F0B99305EFF3C460AF479ADC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8e:c8:cd:e8:11:5d:d0:81:cc:97:81:18:40:
                    30:ef:d9:a4:8b:28:88:af:0f:26:69:cf:27:d3:84:
                    2d:6e:b0:47:50:82:02:56:d1:e0:5a:38:a0:2a:f8:
                    66:5c:c8:14:dc:13:50:25:0c:07:c9:98:ae:c5:8c:
                    43:e4:7f:2a:ae:56:87:a2:8e:92:b4:35:3b:76:c0:
                    bb:3c:29:86:2b:96:34:25:f2:60:ac:21:87:f5:32:
                    9e:0f:a9:55:0f:c3:87:2f:eb:f7:32:b3:f3:7d:78:
                    23:2f:79:95:8e:1c:b6:95:cb:0f:4c:78:1f:2a:e7:
                    f9:1f:7c:e8:be:15:1e:f8:29:39:71:23:36:61:80:
                    bc:7e:21:5e:15:d2:c6:e8:c2:a4:a0:c0:fe:e3:68:
                    d6:0f:46:47:94:42:7c:04:f4:35:4d:1f:6e:e8:f9:
                    13:13:54:cd:49:3c:9f:bb:27:53:d7:e8:c0:c5:65:
                    d3:50:01:48:50:a4:a8:66:af:7e:ef:b7:dd:21:73:
                    a8:f2:57:c2:b2:c1:17:82:29:b5:c4:fc:b6:0b:68:
                    37:df:d5:d6:1a:6a:f3:22:af:69:52:36:c8:50:0d:
                    33:53:ef:9c:86:9a:a1:38:2c:d2:33:69:6c:8e:df:
                    44:78:6e:a9:bb:45:9c:7d:e1:d7:13:2a:d3:be:04:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CB:B0:E3:42:CD:20:F0:B9:93:05:EF:F3:C4:60:AF:47:9A:DC:9D
            X509v3 Authority Key Identifier:
                keyid:9B:EA:1C:F5:11:51:39:C1:B8:15:30:02:0B:AC:BC:97:FF:58:82:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/9BEA1CF5115139C1B81530020BACBC97FF588226.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BEA1CF5115139C1B81530020BACBC97FF588226.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:a9:4c:fe:67:b6:76:6b:b5:3e:54:98:34:66:90:f6:a1:c3:
         c5:47:00:93:f4:a7:87:15:f3:38:0e:b6:c5:50:09:cd:a7:f0:
         bf:61:72:68:1e:52:a0:b9:ba:d1:cd:be:e1:01:70:49:56:60:
         93:3a:12:b2:5b:e6:5f:f5:03:be:98:57:e4:12:d4:39:b5:72:
         eb:63:30:db:2f:5c:ff:ea:4d:a2:7f:6c:85:d1:4b:41:17:97:
         7a:cd:8b:4b:6d:c6:c4:4f:75:b9:89:82:c2:fa:30:3f:aa:19:
         39:0d:c2:f2:51:95:46:ed:c5:c9:a9:17:f7:3f:88:0a:c0:2f:
         b8:db:93:77:87:9d:94:6c:0a:57:ff:5e:b7:e3:e1:54:68:86:
         64:11:ea:13:0f:51:db:5d:e9:6e:13:de:4d:32:a3:99:83:65:
         82:d3:15:5d:7e:4f:ed:50:b4:da:65:7a:ed:c0:b5:f1:af:af:
         72:8a:4c:05:6b:cb:ae:db:46:3d:bf:75:fd:c1:39:8e:18:6a:
         81:d7:ec:3d:b6:e4:f2:9e:14:32:a6:55:7e:8f:8a:ef:5c:e4:
         c9:1f:96:e2:79:ca:32:31:8d:f9:be:ad:98:12:2a:72:58:78:
         d0:3d:82:f1:37:90:fd:3e:5e:97:90:b9:8a:9e:d5:79:e9:b1:
         0c:03:5c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:50:09 2025 by rpki-client