Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa
File:                     3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa (raw, json)
Hash identifier:          B2rUjovnW005QYkM6LtAhTos82uZAwvFpONKwmQojHo=
Subject key identifier:   8C:E3:47:89:40:07:67:52:C7:6D:AA:BA:24:E0:04:04:5D:A6:04:FD
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       5FBC1247E7AD2BD7D651BA6BABBF5B5C1125E880
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa
Signing time:             Mon 10 Feb 2025 12:56:32 +0000
ROA not before:           Mon 10 Feb 2025 12:51:32 +0000
ROA not after:            Mon 09 Feb 2026 12:56:32 +0000
asID:                     270815
IP address blocks:        200.229.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bc:12:47:e7:ad:2b:d7:d6:51:ba:6b:ab:bf:5b:5c:11:25:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:32 2025 GMT
            Not After : Feb  9 12:56:32 2026 GMT
        Subject: CN=8CE3478940076752C76DAABA24E004045DA604FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:c2:48:83:52:fa:04:eb:ca:34:7b:2e:74:
                    36:a8:ca:5a:05:66:c3:1f:2e:29:ed:39:4d:bc:e0:
                    89:8d:4f:dc:0f:e7:98:d8:8a:53:1e:f8:a7:42:53:
                    c5:9d:05:b5:bd:73:92:4b:7d:06:d4:46:6d:28:83:
                    0e:32:32:95:69:1f:7c:42:3d:48:d2:48:20:ea:86:
                    40:e8:eb:9f:41:48:1a:8e:b8:28:83:ac:09:a0:d9:
                    65:90:27:e5:b1:37:b2:49:19:7f:99:02:9d:0d:7d:
                    43:78:73:c9:f2:e8:94:24:fd:59:54:fd:d4:ee:95:
                    84:51:c1:51:57:da:b0:0b:8d:50:97:47:cc:ea:76:
                    43:91:78:eb:4a:f2:e3:ac:ad:30:b2:5a:ac:cc:72:
                    16:3b:ba:0b:c6:b8:96:a5:a1:94:33:a3:24:35:47:
                    1a:ee:97:72:45:9a:17:96:07:63:e2:9c:b0:a3:95:
                    1b:76:de:98:b5:31:51:0d:51:e9:26:fe:fa:ad:88:
                    47:c8:67:ee:8a:0c:86:91:31:19:ed:5f:03:57:de:
                    79:40:c6:55:b2:33:16:d8:37:1f:ad:20:11:32:e2:
                    4e:e3:06:82:5f:65:29:19:93:81:d8:53:a6:17:a1:
                    d6:22:29:f7:bc:c2:05:60:0c:1d:28:90:ed:2b:1e:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E3:47:89:40:07:67:52:C7:6D:AA:BA:24:E0:04:04:5D:A6:04:FD
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:69:b3:b8:54:ce:89:32:8c:67:01:d9:60:aa:dc:40:d1:ee:
         6d:8a:2a:a0:f8:cd:0a:21:48:9c:f2:10:54:4e:0c:6f:6c:51:
         7e:91:cc:86:0c:fd:0b:ec:dc:d8:67:41:8d:b7:2d:26:a0:56:
         95:a2:55:5e:0e:c5:78:13:7d:56:2b:a3:2c:0d:67:5a:a3:df:
         60:7e:95:9f:25:dd:1a:eb:d1:04:c0:1d:53:9a:b6:16:46:8a:
         39:8e:38:46:ce:b6:a3:0f:b2:90:41:f3:82:af:b0:00:6b:e5:
         c2:cf:a0:a5:be:30:a9:21:81:93:70:25:3a:f0:de:28:43:b0:
         6b:f0:6d:26:89:e4:e4:69:b3:a6:4a:a1:f3:5a:73:f0:d0:c1:
         33:4e:dd:5d:4d:fc:94:8e:1e:ea:9d:b7:11:20:d7:ee:ec:4a:
         87:79:75:e2:17:67:da:e7:f8:e1:a6:af:d6:03:05:c9:ae:6a:
         84:ba:68:27:3d:7d:8f:2c:ef:33:2a:c2:08:95:4e:ce:88:29:
         5b:e9:56:69:db:ae:7e:5e:bd:77:b5:00:ab:f9:00:a7:19:15:
         b4:af:f7:44:29:b6:a4:42:93:b7:93:cc:fd:1c:89:f5:d3:f6:
         7e:0d:cd:f2:7b:b5:c3:0b:8b:f7:e7:2c:0e:e8:9e:44:4b:1f:
         3b:2e:e7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:51:06 2025 by rpki-client