Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136392e302f32342d3234203d3e203631333137.roa
File:                     3230302e3232302e3136392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          qLxgC1ByuNHaHS74RSUY3bYePmFjimrc3mHJPqOct1A=
Subject key identifier:   98:44:E2:1C:26:BE:2F:20:47:98:7C:99:09:F4:B0:F5:C2:B6:BE:6A
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       46F00873B59869795EE76D233207A6372A8D0557
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136392e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 06 Mar 2025 14:53:41 +0000
ROA not before:           Thu 06 Mar 2025 14:48:41 +0000
ROA not after:            Thu 05 Mar 2026 14:53:41 +0000
asID:                     61317
IP address blocks:        200.220.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f0:08:73:b5:98:69:79:5e:e7:6d:23:32:07:a6:37:2a:8d:05:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Mar  6 14:48:41 2025 GMT
            Not After : Mar  5 14:53:41 2026 GMT
        Subject: CN=9844E21C26BE2F2047987C9909F4B0F5C2B6BE6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:79:47:ea:e1:66:87:ce:af:7f:6c:81:a4:
                    55:ea:a5:18:7e:53:b3:8f:e0:e2:5c:a5:a8:cd:ce:
                    95:d8:15:75:0d:26:53:14:bf:a9:6b:00:cf:aa:cb:
                    aa:49:e9:1c:68:26:70:7e:bc:04:f3:47:9e:e5:79:
                    84:c1:70:e2:72:c0:95:0b:1b:21:8f:56:8f:a4:3f:
                    f7:7b:2c:32:62:b8:43:ef:b7:03:8c:89:a9:2d:a2:
                    9c:6e:d1:3c:aa:a0:26:04:c4:a1:71:21:74:6a:a8:
                    1d:98:f8:ce:f5:73:e0:28:9b:e6:8e:27:71:42:03:
                    64:c1:07:b3:41:af:29:79:d0:7f:53:66:04:98:77:
                    54:8f:df:05:cf:e2:53:9a:27:98:1f:58:e2:f8:ed:
                    ce:e2:22:dd:29:b2:e4:c4:18:b7:f4:8b:f2:61:d1:
                    47:ab:d1:40:8b:7d:39:f7:a0:f0:96:8c:2a:a3:06:
                    f7:8c:fe:45:08:45:52:1d:44:a9:79:eb:f0:f4:a0:
                    75:04:54:8a:f4:d1:df:c9:c7:77:38:2d:ed:cb:59:
                    cc:99:b4:27:b7:4b:3d:49:19:15:f5:ad:4c:d9:22:
                    a6:03:e5:97:19:66:e6:86:ac:f4:f8:27:f2:14:7f:
                    ff:ba:70:2f:29:53:be:fd:cd:3f:dd:49:98:ed:60:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:44:E2:1C:26:BE:2F:20:47:98:7C:99:09:F4:B0:F5:C2:B6:BE:6A
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:53:f7:7a:fb:46:0d:4d:76:c2:76:d7:29:d8:a1:a6:9c:92:
         18:a7:5c:26:66:93:aa:0f:48:14:be:27:58:c8:75:7e:cf:4a:
         33:f9:de:b8:57:a1:5e:3a:c0:d9:44:50:c3:92:ab:36:7f:4e:
         20:88:65:38:b2:27:b3:4f:21:a9:e6:ed:63:dc:b3:f3:8e:42:
         84:9e:e1:d4:75:d2:56:73:c9:5e:44:14:f2:f0:06:9f:e0:8b:
         92:5e:97:86:17:61:36:0f:11:55:3d:57:29:a8:f2:76:04:c9:
         78:5d:7b:37:13:30:4c:e2:f3:8a:ef:49:5e:42:6e:4f:c5:ed:
         e4:ba:26:5f:e1:f3:2d:8e:a4:c5:68:13:2b:c8:52:5f:08:80:
         69:dc:e1:87:78:03:7b:93:76:0a:3f:e1:e3:b7:36:00:28:b3:
         52:1c:05:44:c5:e9:f2:9e:b7:f6:46:ef:0a:8d:96:4f:5a:82:
         d8:37:d4:03:ad:e4:25:72:a0:36:ef:44:d5:08:0a:59:fa:72:
         ba:f5:2a:50:59:e6:ce:5a:1d:97:c8:99:50:f3:69:4a:e6:e1:
         63:d2:86:8e:0d:81:b6:60:7a:00:5f:2e:3f:28:28:3c:bf:06:
         08:76:97:89:70:8e:fb:8d:be:62:6e:db:b5:fd:80:d6:a5:be:
         57:aa:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:39:00 2025 by rpki-client