Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa
File:                     3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa (raw, json)
Hash identifier:          LVCA/er9ePdbeMtOlvOiqjHhC8ZC16guOnxDWjn97mU=
Subject key identifier:   95:A0:45:EB:B3:3B:28:E9:D0:33:A4:86:DF:4F:7B:7C:F7:CF:90:87
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       1BBB599DA0801FE27BB9150CF46B8E64DB014F82
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa
Signing time:             Wed 05 Mar 2025 19:00:15 +0000
ROA not before:           Wed 05 Mar 2025 18:55:15 +0000
ROA not after:            Wed 04 Mar 2026 19:00:15 +0000
asID:                     27652
IP address blocks:        200.146.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bb:59:9d:a0:80:1f:e2:7b:b9:15:0c:f4:6b:8e:64:db:01:4f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Mar  5 18:55:15 2025 GMT
            Not After : Mar  4 19:00:15 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:e5:2b:7b:db:9e:4b:fc:a8:76:19:80:37:
                    4c:a7:76:6b:e3:3f:23:09:98:d2:ff:6f:e5:fd:59:
                    04:7c:57:cc:7a:08:87:ea:cd:f7:ce:0f:dd:db:b7:
                    82:76:a5:8f:86:43:f1:cc:ef:fe:b9:e6:6a:b2:7c:
                    87:74:f6:17:ae:9a:b6:15:de:6f:44:a8:53:0f:88:
                    cb:e0:9b:62:95:b4:87:da:80:88:ca:f1:27:e9:8a:
                    9a:f9:02:9e:bc:ec:c2:f0:f9:a6:45:7f:ab:ea:cd:
                    7d:db:ea:41:ac:ad:ca:fe:3a:a2:5d:e8:93:59:8c:
                    52:d5:de:9b:55:c6:e1:c9:9b:4b:0e:25:9f:35:d0:
                    a7:8c:20:bb:96:a1:74:b9:8b:b4:d0:2f:78:69:ee:
                    9e:6d:66:c7:0f:9e:24:ef:bf:56:76:71:74:32:f1:
                    13:9a:10:aa:5d:d8:20:42:d2:42:44:f0:fc:c6:aa:
                    92:72:dd:81:a2:d4:3b:6a:3a:cf:2b:23:c5:98:c6:
                    87:1e:6e:87:e4:d4:89:e3:88:ee:6a:0c:36:2d:04:
                    a8:91:55:99:21:f3:ef:c7:a7:4a:12:2a:c8:3d:75:
                    90:17:34:42:d6:ed:ee:ec:1d:30:ec:2d:0f:2b:da:
                    23:78:27:cf:1a:7a:96:89:0c:f7:22:31:e3:43:fa:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A0:45:EB:B3:3B:28:E9:D0:33:A4:86:DF:4F:7B:7C:F7:CF:90:87
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.146.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:66:93:6e:0e:25:53:f3:18:3d:bd:99:2e:f0:93:5f:71:5d:
         3f:a0:02:5c:77:a7:74:0e:52:1d:d4:1e:05:db:2c:0f:a4:98:
         4c:29:b4:72:4b:22:f7:13:d6:e4:67:a4:e1:d9:1c:55:8f:c1:
         c4:b4:d8:f7:ee:fe:83:d9:20:75:a6:4e:9e:eb:b3:1c:be:d7:
         84:5f:31:7a:13:99:b8:86:90:52:1f:0e:71:27:18:d9:38:85:
         9e:8f:72:7e:8c:7a:d2:f3:23:e4:1f:2c:75:37:21:c5:a9:ab:
         70:9d:15:0f:3c:e4:a0:e5:fa:b4:ab:0c:8c:75:5f:a4:07:fc:
         b8:fb:c8:e6:43:c8:8b:8d:5c:01:63:b4:55:33:34:5c:21:c3:
         88:d1:06:df:50:29:96:77:8b:14:48:f3:a5:6a:ec:bf:f5:60:
         0c:a9:22:fd:a5:02:ec:e0:47:14:6a:c4:96:04:02:57:97:0e:
         d4:3d:aa:85:cc:a1:1d:77:46:0f:ab:c0:39:b7:c3:84:22:10:
         c5:03:63:87:2f:cb:32:21:1e:a4:cc:b6:71:86:c9:98:39:e1:
         93:e1:d2:83:2a:7d:fd:74:43:2d:e6:3a:ad:57:7c:91:5f:a2:
         0c:9c:d6:ab:5a:be:24:29:04:8e:fa:f9:09:b4:50:b7:43:cc:
         22:af:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:57:41 2025 by rpki-client