Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/3230302e392e37362e302f32332d3234203d3e20323734373437.roa
File:                     3230302e392e37362e302f32332d3234203d3e20323734373437.roa (raw, json)
Hash identifier:          YNmQLkmwdlz3sES3smxRlK2TQpbTZj7xnTLT3HJoCxE=
Subject key identifier:   85:A3:80:A5:5B:D3:3C:DB:3F:B1:3F:43:02:37:A7:FA:4A:56:6D:0C
Certificate issuer:       /CN=766ACB10B74EBAD4A27B8E22CBB4166759F8466F
Certificate serial:       3EE086F5632526EF497BE26D57E72C9C1D386490
Authority key identifier: 76:6A:CB:10:B7:4E:BA:D4:A2:7B:8E:22:CB:B4:16:67:59:F8:46:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/766ACB10B74EBAD4A27B8E22CBB4166759F8466F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/3230302e392e37362e302f32332d3234203d3e20323734373437.roa
Signing time:             Mon 10 Mar 2025 20:26:09 +0000
ROA not before:           Mon 10 Mar 2025 20:21:09 +0000
ROA not after:            Mon 09 Mar 2026 20:26:09 +0000
asID:                     274747
IP address blocks:        200.9.76.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e0:86:f5:63:25:26:ef:49:7b:e2:6d:57:e7:2c:9c:1d:38:64:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766ACB10B74EBAD4A27B8E22CBB4166759F8466F
        Validity
            Not Before: Mar 10 20:21:09 2025 GMT
            Not After : Mar  9 20:26:09 2026 GMT
        Subject: CN=85A380A55BD33CDB3FB13F430237A7FA4A566D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:9c:3b:2f:a8:e8:77:49:ac:cb:ef:4f:1d:
                    ab:da:3b:f3:9d:c0:38:e5:dd:cb:a3:77:9e:33:d8:
                    54:94:99:24:ac:5f:10:94:b0:b3:e9:d0:a7:61:d2:
                    84:c0:7b:8e:da:4f:d7:cd:d1:32:dc:42:38:0c:de:
                    a5:62:cf:10:78:f4:6a:44:35:2e:89:b0:4a:6b:d1:
                    9f:1d:89:99:d6:45:79:d5:a6:5c:bb:96:47:8b:70:
                    3d:17:1a:d6:83:8c:36:02:9a:85:16:d6:e1:3b:57:
                    7d:71:56:fb:ce:0e:d2:ee:6c:79:de:b2:ce:ac:76:
                    b2:0d:8e:62:d5:05:3d:f3:a1:3c:76:ba:c3:2f:ab:
                    57:01:bb:7e:9e:5e:be:d2:f0:86:13:51:b3:65:82:
                    74:5d:d8:12:da:b5:cf:78:f5:78:96:4f:c0:f4:8c:
                    76:4a:c7:6e:3f:b3:e8:fd:66:b0:b8:0a:9c:91:01:
                    bf:5b:23:6a:d9:0a:47:f8:a0:b7:8a:fa:d0:ac:85:
                    28:2f:4e:58:1b:6b:24:da:58:de:84:a9:23:9d:cd:
                    ab:6a:59:b0:25:13:c9:48:ab:ee:41:e9:fb:14:d8:
                    45:c6:88:90:83:a1:be:82:25:da:b8:3f:c4:e4:26:
                    77:dc:0c:17:d4:41:33:a0:37:c1:48:3a:33:1f:e0:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A3:80:A5:5B:D3:3C:DB:3F:B1:3F:43:02:37:A7:FA:4A:56:6D:0C
            X509v3 Authority Key Identifier:
                keyid:76:6A:CB:10:B7:4E:BA:D4:A2:7B:8E:22:CB:B4:16:67:59:F8:46:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/766ACB10B74EBAD4A27B8E22CBB4166759F8466F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/766ACB10B74EBAD4A27B8E22CBB4166759F8466F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/3230302e392e37362e302f32332d3234203d3e20323734373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:48:9a:cf:a3:3c:19:bd:ad:48:70:90:80:ec:ce:68:92:02:
         b1:dd:28:43:35:5d:cc:df:ad:3c:f4:f7:e7:4f:56:d0:e2:61:
         12:d8:4e:81:90:3d:ba:5e:b3:a9:d2:0f:28:e4:2f:d8:e9:92:
         d3:d3:82:b5:44:b7:bb:2e:9c:ad:f5:7e:84:ff:f5:76:01:b9:
         37:e2:a3:a0:67:db:83:42:ef:92:65:9d:68:d5:3e:41:9a:bd:
         7e:a2:c9:12:9c:33:51:10:23:a6:d5:e2:0b:82:a0:09:5c:49:
         22:5f:32:bb:ab:10:2f:52:41:0e:ff:a4:b8:ef:f8:4b:3f:81:
         37:60:44:6f:78:8d:21:67:b5:87:37:82:f5:28:11:98:ba:7a:
         11:8d:7d:56:79:d6:3d:50:30:6c:26:46:9e:ce:e3:da:1a:da:
         e7:5f:3c:b9:76:e0:87:8e:82:04:50:de:c6:f4:c0:41:34:24:
         16:b6:48:9c:95:de:d6:0c:fc:9b:00:7a:4d:7d:1b:87:76:b5:
         65:d0:e1:d2:ab:2e:c7:ce:54:2a:54:be:fd:28:7e:75:28:08:
         59:48:41:d3:d9:e9:5a:3a:98:35:25:88:10:3d:21:b2:95:94:
         4d:77:9f:e5:86:b4:93:aa:0e:97:1c:8a:34:88:98:37:5e:6f:
         df:a1:d4:10
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPuCG9WMlJu9Je+JtV+csnB04ZJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY2QUNCMTBCNzRFQkFENEEyN0I4RTIyQ0JCNDE2Njc1
OUY4NDY2RjAeFw0yNTAzMTAyMDIxMDlaFw0yNjAzMDkyMDI2MDlaMDMxMTAvBgNV
BAMTKDg1QTM4MEE1NUJEMzNDREIzRkIxM0Y0MzAyMzdBN0ZBNEE1NjZEMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+x5w7L6jod0msy+9PHavaO/Od
wDjl3cujd54z2FSUmSSsXxCUsLPp0Kdh0oTAe47aT9fN0TLcQjgM3qVizxB49GpE
NS6JsEpr0Z8diZnWRXnVply7lkeLcD0XGtaDjDYCmoUW1uE7V31xVvvODtLubHne
ss6sdrINjmLVBT3zoTx2usMvq1cBu36eXr7S8IYTUbNlgnRd2BLatc949XiWT8D0
jHZKx24/s+j9ZrC4CpyRAb9bI2rZCkf4oLeK+tCshSgvTlgbayTaWN6EqSOdzatq
WbAlE8lIq+5B6fsU2EXGiJCDob6CJdq4P8TkJnfcDBfUQTOgN8FIOjMf4HGZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhaOApVvTPNs/sT9DAjen+kpWbQwwHwYDVR0j
BBgwFoAUdmrLELdOutSie44iy7QWZ1n4Rm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdSRm1mWkRIWENqcVBTdjV2N0txVVdvQ3JDbzRTUHNFalczdHdWSEQ0
OGsvMC83NjZBQ0IxMEI3NEVCQUQ0QTI3QjhFMjJDQkI0MTY2NzU5Rjg0NjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NkFDQjEwQjc0RUJBRDRB
MjdCOEUyMkNCQjQxNjY3NTlGODQ2NkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHUkZtZlpESFhDanFQU3Y1djdLcVVXb0NyQ280U1BzRWpXM3R3VkhENDhrLzAv
MzIzMDMwMmUzOTJlMzczNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzczNDM3
MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcgJTDANBgkqhkiG9w0BAQsFAAOCAQEAHkiaz6M8Gb2t
SHCQgOzOaJICsd0oQzVdzN+tPPT3509W0OJhEthOgZA9ul6zqdIPKOQv2OmS09OC
tUS3uy6crfV+hP/1dgG5N+KjoGfbg0LvkmWdaNU+QZq9fqLJEpwzURAjptXiC4Kg
CVxJIl8yu6sQL1JBDv+kuO/4Sz+BN2BEb3iNIWe1hzeC9SgRmLp6EY19VnnWPVAw
bCZGns7j2hra5188uXbgh46CBFDexvTAQTQkFrZInJXe1gz8mwB6TX0bh3a1ZdDh
0qsux85UKlS+/Sh+dSgIWUhB09npWjqYNSWIED0hspWUTXef5Ya0k6oOlxyKNIiY
N15v36HUEA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:49:27 2025 by rpki-client