Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/3230312e3138322e3131392e302f32342d3234203d3e20323637353132.roa
File:                     3230312e3138322e3131392e302f32342d3234203d3e20323637353132.roa (raw, json)
Hash identifier:          d3K2hYma6wmE35eRMkmrKq6grdTI2vlcFrmYn+T2rsQ=
Subject key identifier:   62:2D:3C:46:4E:A1:69:E1:6A:BE:85:09:5C:5A:45:F4:12:09:6F:AA
Certificate issuer:       /CN=ECB433183132CC4AB44E4E77CB4AD589FFC36B64
Certificate serial:       0F771895DE2EF8CE464DDA8863130038BEAA2611
Authority key identifier: EC:B4:33:18:31:32:CC:4A:B4:4E:4E:77:CB:4A:D5:89:FF:C3:6B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/3230312e3138322e3131392e302f32342d3234203d3e20323637353132.roa
Signing time:             Tue 25 Mar 2025 13:25:55 +0000
ROA not before:           Tue 25 Mar 2025 13:20:55 +0000
ROA not after:            Tue 24 Mar 2026 13:25:55 +0000
asID:                     267512
IP address blocks:        201.182.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:77:18:95:de:2e:f8:ce:46:4d:da:88:63:13:00:38:be:aa:26:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECB433183132CC4AB44E4E77CB4AD589FFC36B64
        Validity
            Not Before: Mar 25 13:20:55 2025 GMT
            Not After : Mar 24 13:25:55 2026 GMT
        Subject: CN=622D3C464EA169E16ABE85095C5A45F412096FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:e6:19:24:d0:a2:aa:2d:28:21:42:3e:60:
                    0e:61:18:58:54:f8:f9:8f:8c:5e:3b:bd:69:22:d8:
                    fd:84:3a:f8:52:a3:1c:c8:e6:c6:a2:a0:cb:1d:c1:
                    86:08:7d:eb:48:e2:7e:72:42:be:53:a6:59:c2:17:
                    fe:bf:25:6d:7b:e2:b5:9f:c6:09:fa:4a:53:b5:ec:
                    7c:25:f8:43:11:75:db:e0:87:a8:0a:d3:25:f2:89:
                    f1:8d:c6:95:f7:47:d0:fa:9f:69:7d:d5:43:23:a9:
                    79:3c:10:56:03:83:15:c4:3f:f3:a5:4e:2f:e8:6b:
                    a0:4a:7a:fc:3a:fa:6d:e7:ab:58:e9:59:05:33:88:
                    9f:5c:a5:e1:62:55:0b:e3:dc:0f:8c:47:8a:ef:af:
                    c2:f4:2c:2c:cc:ee:4f:10:4d:f8:20:c9:d7:47:32:
                    75:13:81:73:9b:05:13:24:43:72:ec:a2:c5:23:ea:
                    6f:9c:00:ac:cc:4b:ff:98:d8:0a:94:ce:76:02:bf:
                    e8:ed:8e:0d:94:67:d6:9b:ac:c6:cb:9c:91:13:d9:
                    82:93:73:b0:0e:4f:ed:23:3c:9c:14:5c:4b:b4:03:
                    76:9a:c0:bd:4d:fb:42:99:51:ec:03:d0:ca:03:3d:
                    ea:35:de:a5:9e:28:b0:8b:9b:35:ce:23:35:06:cb:
                    56:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2D:3C:46:4E:A1:69:E1:6A:BE:85:09:5C:5A:45:F4:12:09:6F:AA
            X509v3 Authority Key Identifier:
                keyid:EC:B4:33:18:31:32:CC:4A:B4:4E:4E:77:CB:4A:D5:89:FF:C3:6B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/3230312e3138322e3131392e302f32342d3234203d3e20323637353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:e3:88:d6:59:d1:49:f3:6e:e1:bc:a3:03:71:b8:a3:a0:fd:
         25:c4:99:28:dc:5c:0d:54:33:0e:27:52:19:d6:f1:06:13:b8:
         c1:81:11:2c:41:68:b0:42:dd:a3:ad:c1:da:c6:ed:bd:30:f7:
         2e:03:2e:63:da:16:20:9d:e8:10:a5:27:3c:37:66:46:3c:08:
         6e:7d:92:49:c9:a2:9e:b8:e6:3a:58:77:5c:24:65:4c:0c:25:
         bf:0f:d9:02:6b:33:7c:fa:e1:f2:93:4f:15:77:c9:17:d5:0d:
         9b:3c:72:f0:db:b7:3a:d2:8d:cf:e4:ca:0c:1d:9b:2e:42:08:
         81:c8:7f:db:98:68:04:0f:e4:c5:07:9e:e1:42:8c:38:e8:25:
         ad:a1:bc:a9:fa:c6:ef:6c:aa:99:e1:e5:44:b2:75:19:c3:6d:
         b4:4a:b5:e9:83:13:93:f0:fc:29:61:de:90:95:2b:f0:2d:51:
         93:99:c5:18:d7:1f:d7:1d:ac:24:c3:c5:6e:2d:ed:0b:52:71:
         6e:31:9e:7f:92:ed:3e:91:20:54:84:03:bd:9b:3e:b1:ae:35:
         99:2c:8f:1c:82:08:39:c4:80:0b:dd:12:9f:b0:98:50:3a:7b:
         8b:62:58:c7:b7:ad:f3:a9:c1:7a:4d:91:75:e9:bd:39:1c:18:
         f2:f6:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:02:09 2025 by rpki-client