Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e302e3137392e302f32342d3234203d3e20323731353733.roa
File:                     3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (raw, json)
Hash identifier:          aglHitQCJNgIY3C7Tlxv80IWetc3uLwgBi5NAsxzjh8=
Subject key identifier:   10:6A:BF:AD:32:65:9C:18:C5:97:E8:ED:23:9A:7D:4F:87:96:F1:2E
Certificate issuer:       /CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
Certificate serial:       4B288F0BCB809E9DD3AE5B7EAAC81CDEE8EB5096
Authority key identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e302e3137392e302f32342d3234203d3e20323731353733.roa
Signing time:             Fri 21 Mar 2025 18:33:45 +0000
ROA not before:           Fri 21 Mar 2025 18:28:45 +0000
ROA not after:            Fri 20 Mar 2026 18:33:45 +0000
asID:                     271573
IP address blocks:        200.0.179.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:28:8f:0b:cb:80:9e:9d:d3:ae:5b:7e:aa:c8:1c:de:e8:eb:50:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
        Validity
            Not Before: Mar 21 18:28:45 2025 GMT
            Not After : Mar 20 18:33:45 2026 GMT
        Subject: CN=106ABFAD32659C18C597E8ED239A7D4F8796F12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:2f:7d:35:d0:95:b1:d1:e7:13:6e:af:3e:
                    70:db:61:84:3c:b2:12:91:18:2f:02:64:78:56:18:
                    b7:0a:cb:2c:93:70:30:63:8e:4c:42:26:a4:8c:d0:
                    c1:07:5e:78:fc:83:2e:42:ec:1b:1a:7d:30:b5:d2:
                    2c:fe:bb:92:75:7c:5f:0d:8e:ba:03:7b:e5:22:74:
                    34:2f:9e:89:3c:94:57:10:94:8c:54:7f:51:a0:fd:
                    1e:93:15:ec:c8:e0:37:66:cb:d2:06:92:ed:42:2e:
                    88:58:49:0a:d2:30:35:2b:14:d2:00:75:62:f0:fb:
                    35:46:1a:84:42:ef:2d:a0:8c:9f:bc:60:5a:0f:dd:
                    82:2d:87:9e:68:02:01:a3:1f:df:a4:94:4b:15:24:
                    7e:22:43:8f:dd:33:9a:30:51:41:18:e8:47:b6:d1:
                    c7:70:83:cf:05:b5:b4:c8:01:9b:68:c0:28:37:f0:
                    a2:b9:fc:f8:28:0c:6f:58:72:c8:e9:e5:26:d1:9e:
                    51:21:38:51:a6:ce:59:24:64:00:28:47:7c:06:91:
                    a3:e7:10:5f:c8:30:5e:c6:bc:8f:4b:48:07:2c:30:
                    45:28:f8:98:8d:84:41:5a:c6:e6:f9:5d:14:79:4a:
                    31:3b:1b:00:19:68:cd:ab:0f:5b:7d:b9:41:f3:2c:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6A:BF:AD:32:65:9C:18:C5:97:E8:ED:23:9A:7D:4F:87:96:F1:2E
            X509v3 Authority Key Identifier:
                keyid:EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e302e3137392e302f32342d3234203d3e20323731353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:c4:fd:24:fc:52:1d:f6:6a:6a:90:59:8e:c6:a2:45:db:99:
         58:ae:0f:10:e1:f7:e4:e1:28:0c:ab:7d:b8:c3:21:51:78:f7:
         90:40:d8:d6:83:26:a2:75:31:de:ea:28:a5:2f:4e:dd:04:88:
         c6:36:bf:2c:ef:18:9b:58:a7:b9:1e:0f:c0:0d:52:65:c0:62:
         04:c7:e4:da:61:cc:08:03:d9:7d:5e:37:ea:ad:ea:2e:24:5b:
         8e:ff:01:3e:c1:45:f7:e3:53:00:b5:5b:37:b5:6d:05:b4:22:
         fb:d7:44:1b:ab:a7:50:0a:e9:6c:5a:47:00:e4:6d:81:21:ec:
         75:b4:c3:cb:91:4b:64:fc:92:7a:85:11:5f:12:cd:7e:61:68:
         20:79:c8:4b:47:8c:c5:77:aa:d3:a8:d9:f3:95:e9:5e:12:42:
         31:5e:17:74:5f:58:4a:a3:66:c5:18:e0:0d:9a:e7:ab:02:b7:
         8b:fd:6a:ce:32:72:3c:9b:cf:b2:a7:b8:62:cd:e8:f5:1f:56:
         99:06:6b:ab:09:77:c0:40:b5:d6:3b:28:15:9a:0e:37:d4:f6:
         17:e8:53:19:ec:57:25:24:f9:c5:2d:e8:a9:fb:33:9f:a8:48:
         44:92:34:89:a5:90:3a:37:f3:7c:95:eb:37:14:b6:2c:58:7f:
         79:f1:6a:54
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSyiPC8uAnp3Trlt+qsgc3ujrUJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMzQTlCNkMxRjZBNjk0NDlDQTIxRkQ3ODBGNEY4MDFG
NkNFNkIwNjAeFw0yNTAzMjExODI4NDVaFw0yNjAzMjAxODMzNDVaMDMxMTAvBgNV
BAMTKDEwNkFCRkFEMzI2NTlDMThDNTk3RThFRDIzOUE3RDRGODc5NkYxMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVoy99NdCVsdHnE26vPnDbYYQ8
shKRGC8CZHhWGLcKyyyTcDBjjkxCJqSM0MEHXnj8gy5C7BsafTC10iz+u5J1fF8N
jroDe+UidDQvnok8lFcQlIxUf1Gg/R6TFezI4Ddmy9IGku1CLohYSQrSMDUrFNIA
dWLw+zVGGoRC7y2gjJ+8YFoP3YIth55oAgGjH9+klEsVJH4iQ4/dM5owUUEY6Ee2
0cdwg88FtbTIAZtowCg38KK5/PgoDG9Ycsjp5SbRnlEhOFGmzlkkZAAoR3wGkaPn
EF/IMF7GvI9LSAcsMEUo+JiNhEFaxub5XRR5SjE7GwAZaM2rD1t9uUHzLA4NAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEGq/rTJlnBjFl+jtI5p9T4eW8S4wHwYDVR0j
BBgwFoAU7DqbbB9qaUScoh/XgPT4AfbOawYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmhCc3FVVEtVN1ZLemtCY0pRUnBETkNpZ3JUZ2NiVlhacHZXek4zbmE1
M3AvMC9FQzNBOUI2QzFGNkE2OTQ0OUNBMjFGRDc4MEY0RjgwMUY2Q0U2QjA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDM0E5QjZDMUY2QTY5NDQ5
Q0EyMUZENzgwRjRGODAxRjZDRTZCMDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZoQnNxVVRLVTdWS3prQmNKUVJwRE5DaWdyVGdjYlZYWnB2V3pOM25hNTNwLzAv
MzIzMDMwMmUzMDJlMzEzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyACzMA0GCSqGSIb3DQEBCwUAA4IBAQBLxP0k/FId
9mpqkFmOxqJF25lYrg8Q4ffk4SgMq324wyFRePeQQNjWgyaidTHe6iilL07dBIjG
Nr8s7xibWKe5Hg/ADVJlwGIEx+TaYcwIA9l9XjfqreouJFuO/wE+wUX341MAtVs3
tW0FtCL710Qbq6dQCulsWkcA5G2BIex1tMPLkUtk/JJ6hRFfEs1+YWggechLR4zF
d6rTqNnzleleEkIxXhd0X1hKo2bFGOANmuerAreL/WrOMnI8m8+yp7hizej1H1aZ
BmurCXfAQLXWOygVmg431PYX6FMZ7FclJPnFLeip+zOfqEhEkjSJpZA6N/N8les3
FLYsWH958WpU
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:16 2025 by rpki-client