Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/3230302e35302e3231322e302f32322d3232203d3e20323730343530.roa
File:                     3230302e35302e3231322e302f32322d3232203d3e20323730343530.roa (raw, json)
Hash identifier:          uC7gyBn6MrA0teVApvALmRd7+kSAwCC5Cj8dWNOTQO0=
Subject key identifier:   8A:DD:8C:A4:6A:58:23:D7:A7:BE:95:A8:B1:9F:1E:DF:1F:B8:BD:5B
Certificate issuer:       /CN=F841D9ED220521410FCC71327DC8CDC7BF9D8113
Certificate serial:       1349CCB9A11E42E812EF127A6C5FEE8AC04D7493
Authority key identifier: F8:41:D9:ED:22:05:21:41:0F:CC:71:32:7D:C8:CD:C7:BF:9D:81:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F841D9ED220521410FCC71327DC8CDC7BF9D8113.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/3230302e35302e3231322e302f32322d3232203d3e20323730343530.roa
Signing time:             Sat 14 Aug 2021 14:00:00 +0000
ROA not before:           Sat 14 Aug 2021 13:55:00 +0000
ROA not after:            Sun 14 Aug 2022 14:00:00 +0000
asID:                     270450
IP address blocks:        200.50.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:49:cc:b9:a1:1e:42:e8:12:ef:12:7a:6c:5f:ee:8a:c0:4d:74:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F841D9ED220521410FCC71327DC8CDC7BF9D8113
        Validity
            Not Before: Aug 14 13:55:00 2021 GMT
            Not After : Aug 14 14:00:00 2022 GMT
        Subject: CN=3082010A0282010100C2448199E93C1CA2C119F406F9B46EFAC4A72C05010FF3A1E87FD9794F16BF98FC0BB1279A31656401B4D5984642868D5812133E238BD6F7A47E99DFC369B77D648297776AF5721C366D992DD6FF3E65A5594B6D9D145912ED2A44F029B11C3DB9FF137DFF94E4C7057F0508DC174D142170A0E589AA34C0DD57BD9620E2F944CC828FAE44CE8105E0B4F5B3955A1D1FBC78A2DC2B355C6763DEF1D23BC86277B0B94CC86AA1A888BC2A5D050BD10737DF683B1FDAC4E5CE61B572CAFA8111FDD3AB543A7D160F87699ED1C02FBCC80E33D880B074B77D835B2FD49FDB696F532CD90D0FBB1BD34053F85E8109BF73904C08BF21CA879E29DD377E8905BB1B850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:81:99:e9:3c:1c:a2:c1:19:f4:06:f9:b4:
                    6e:fa:c4:a7:2c:05:01:0f:f3:a1:e8:7f:d9:79:4f:
                    16:bf:98:fc:0b:b1:27:9a:31:65:64:01:b4:d5:98:
                    46:42:86:8d:58:12:13:3e:23:8b:d6:f7:a4:7e:99:
                    df:c3:69:b7:7d:64:82:97:77:6a:f5:72:1c:36:6d:
                    99:2d:d6:ff:3e:65:a5:59:4b:6d:9d:14:59:12:ed:
                    2a:44:f0:29:b1:1c:3d:b9:ff:13:7d:ff:94:e4:c7:
                    05:7f:05:08:dc:17:4d:14:21:70:a0:e5:89:aa:34:
                    c0:dd:57:bd:96:20:e2:f9:44:cc:82:8f:ae:44:ce:
                    81:05:e0:b4:f5:b3:95:5a:1d:1f:bc:78:a2:dc:2b:
                    35:5c:67:63:de:f1:d2:3b:c8:62:77:b0:b9:4c:c8:
                    6a:a1:a8:88:bc:2a:5d:05:0b:d1:07:37:df:68:3b:
                    1f:da:c4:e5:ce:61:b5:72:ca:fa:81:11:fd:d3:ab:
                    54:3a:7d:16:0f:87:69:9e:d1:c0:2f:bc:c8:0e:33:
                    d8:80:b0:74:b7:7d:83:5b:2f:d4:9f:db:69:6f:53:
                    2c:d9:0d:0f:bb:1b:d3:40:53:f8:5e:81:09:bf:73:
                    90:4c:08:bf:21:ca:87:9e:29:dd:37:7e:89:05:bb:
                    1b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DD:8C:A4:6A:58:23:D7:A7:BE:95:A8:B1:9F:1E:DF:1F:B8:BD:5B
            X509v3 Authority Key Identifier:
                keyid:F8:41:D9:ED:22:05:21:41:0F:CC:71:32:7D:C8:CD:C7:BF:9D:81:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/F841D9ED220521410FCC71327DC8CDC7BF9D8113.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F841D9ED220521410FCC71327DC8CDC7BF9D8113.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/3230302e35302e3231322e302f32322d3232203d3e20323730343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:74:ad:40:9d:0b:e7:11:df:30:da:10:4d:f9:75:89:46:0d:
         55:cd:cd:fd:fe:ab:b6:fc:97:9d:b1:07:a6:28:62:4d:e9:80:
         ac:84:e0:dc:d0:13:4b:35:d7:33:19:ea:22:0c:88:13:b7:d6:
         bd:cd:4d:c2:b6:d8:0c:7d:0e:11:d8:d3:4c:ab:55:db:f1:e7:
         19:8d:c7:f7:bd:56:65:1d:29:d5:7e:35:31:05:e1:f7:b6:a4:
         f9:08:7d:df:5d:e0:22:df:7f:41:bc:e1:ca:6a:f5:73:90:06:
         ec:5b:cc:0a:0a:30:15:51:fd:d4:50:60:be:53:cd:08:60:c9:
         64:99:9d:72:ac:d2:0f:f5:96:e8:30:b0:a6:e0:3b:c2:c5:18:
         a5:86:b6:2e:b5:89:23:1f:28:70:55:44:de:f5:ab:00:f2:83:
         ac:ae:66:b5:3e:15:1b:d6:68:f7:41:6f:83:e9:78:c7:4a:5a:
         c8:97:a2:b8:89:56:6a:62:69:e9:ed:83:63:52:ec:c0:79:d1:
         03:53:12:4e:9a:cc:e7:4a:ce:45:b7:41:c8:01:aa:1b:2d:32:
         9f:aa:2a:2c:27:4c:1a:da:9a:6d:b3:b7:03:c4:8c:33:d6:fe:
         02:ca:c5:0f:d2:b1:fb:43:b0:78:6c:eb:c9:c4:25:65:13:6b:
         39:b1:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:35:56 2025 by rpki-client