Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e203532363331.roa
File:                     3230302e3232392e3234342e302f32322d3232203d3e203532363331.roa (raw, json)
Hash identifier:          lCEUsYt9w/hpGlgvnRrS0tepqXzMo23CD7HHSvtEfx8=
Subject key identifier:   29:DD:8B:F1:BE:FB:83:FA:19:45:4B:5A:55:D4:0C:D2:20:10:B3:7C
Certificate issuer:       /CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
Certificate serial:       58A697BC5878793F463786BC09511D7FA5DC8F03
Authority key identifier: BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e203532363331.roa
Signing time:             Mon 14 Oct 2024 14:24:21 +0000
ROA not before:           Mon 14 Oct 2024 14:19:21 +0000
ROA not after:            Mon 13 Oct 2025 14:24:21 +0000
asID:                     52631
IP address blocks:        200.229.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a6:97:bc:58:78:79:3f:46:37:86:bc:09:51:1d:7f:a5:dc:8f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
        Validity
            Not Before: Oct 14 14:19:21 2024 GMT
            Not After : Oct 13 14:24:21 2025 GMT
        Subject: CN=29DD8BF1BEFB83FA19454B5A55D40CD22010B37C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:e4:e8:83:fd:5c:25:4b:18:73:02:3d:65:
                    88:6c:1f:a9:39:5f:75:32:65:99:06:2d:09:17:15:
                    87:30:5d:7c:f1:5b:30:c9:ad:c2:c1:31:43:b5:77:
                    8d:ac:3f:b5:51:34:78:3b:18:95:ba:d8:d6:58:ea:
                    30:4c:2c:01:8b:fc:87:5f:09:ab:6e:ba:8e:bf:51:
                    f0:85:df:68:2c:d2:07:22:96:b0:20:5f:de:b0:8d:
                    ae:c8:80:39:ec:8d:52:bf:78:20:ff:9b:9d:88:08:
                    84:28:8e:de:cb:58:b1:ea:ff:68:1b:4e:dc:4b:77:
                    96:8c:2e:02:b7:19:f9:0c:bf:14:48:b1:0a:5b:33:
                    00:c9:4a:02:cf:3d:c0:da:fc:c3:67:25:67:36:7d:
                    96:ef:2a:ff:09:af:d4:c2:0e:36:d4:c8:f0:0c:38:
                    4c:a4:82:9d:15:36:90:5c:d6:a9:41:5e:7a:0d:05:
                    73:2c:c8:a7:83:66:93:b6:8f:46:06:20:a0:96:e6:
                    f4:65:6b:ed:76:94:c0:71:04:9a:60:53:a0:eb:3f:
                    aa:57:07:a1:b8:e1:97:5f:2a:6d:17:c6:9c:31:4f:
                    d1:e9:9d:36:ea:39:02:69:c0:18:7c:33:50:72:79:
                    28:6b:ec:01:67:3e:30:7a:dd:a5:70:dd:c5:92:7e:
                    fd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DD:8B:F1:BE:FB:83:FA:19:45:4B:5A:55:D4:0C:D2:20:10:B3:7C
            X509v3 Authority Key Identifier:
                keyid:BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:e9:39:ac:1b:70:82:c5:f4:1f:5d:eb:67:d8:39:19:30:
         4f:de:82:61:5e:bf:2b:84:cc:06:47:d8:0b:ab:c5:32:95:c9:
         2b:00:86:62:8b:7d:f2:05:fd:3c:f7:ab:51:9b:a9:18:c7:6a:
         af:33:28:3c:cc:ae:91:6f:22:3a:33:fe:18:9b:e6:a7:d7:c4:
         d8:68:8b:0f:4f:1b:48:4d:4d:36:33:d5:7b:4a:15:58:e6:6d:
         13:f6:45:32:a8:71:ea:05:d4:2f:0a:f8:c7:97:d6:2a:90:f1:
         f9:1a:04:35:c1:65:03:7f:60:89:25:48:73:de:f4:30:3c:bf:
         96:04:ef:59:6f:f6:db:4c:a7:49:1e:b2:fa:7d:65:9e:c5:2d:
         20:e0:14:a5:09:b6:9a:4c:44:58:59:b1:6d:14:b9:3c:0d:56:
         1b:9b:13:db:af:19:ec:60:27:b4:b1:c1:16:9b:95:04:77:b7:
         d9:36:50:f9:8f:ac:bd:55:27:e2:34:22:b0:09:0a:aa:7e:b2:
         a3:dc:75:30:05:02:1e:d3:31:ea:d0:d2:59:d4:41:d4:7d:df:
         a3:f3:5d:96:de:d2:7a:7a:fc:3c:99:51:41:85:e4:88:c0:65:
         86:cf:4c:dc:a0:99:cf:48:eb:90:66:70:68:67:ad:fd:24:6b:
         80:bc:15:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWKaXvFh4eT9GN4a8CVEdf6XcjwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU2M0JEMzA3NDA3MUFFQzBBNDQ1NzhDNjdCMkQxNzND
NUNEMUZGMTAeFw0yNDEwMTQxNDE5MjFaFw0yNTEwMTMxNDI0MjFaMDMxMTAvBgNV
BAMTKDI5REQ4QkYxQkVGQjgzRkExOTQ1NEI1QTU1RDQwQ0QyMjAxMEIzN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodOTog/1cJUsYcwI9ZYhsH6k5
X3UyZZkGLQkXFYcwXXzxWzDJrcLBMUO1d42sP7VRNHg7GJW62NZY6jBMLAGL/Idf
Catuuo6/UfCF32gs0gcilrAgX96wja7IgDnsjVK/eCD/m52ICIQojt7LWLHq/2gb
TtxLd5aMLgK3GfkMvxRIsQpbMwDJSgLPPcDa/MNnJWc2fZbvKv8Jr9TCDjbUyPAM
OEykgp0VNpBc1qlBXnoNBXMsyKeDZpO2j0YGIKCW5vRla+12lMBxBJpgU6DrP6pX
B6G44ZdfKm0XxpwxT9HpnTbqOQJpwBh8M1ByeShr7AFnPjB63aVw3cWSfv3hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKd2L8b77g/oZRUtaVdQM0iAQs3wwHwYDVR0j
BBgwFoAUvmO9MHQHGuwKRFeMZ7LRc8XNH/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC9CRTYzQkQzMDc0MDcxQUVDMEE0NDU3OEM2N0IyRDE3M0M1Q0QxRkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFNjNCRDMwNzQwNzFBRUMw
QTQ0NTc4QzY3QjJEMTczQzVDRDFGRjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNjMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI5fQwDQYJKoZIhvcNAQELBQADggEBABG76Tms
G3CCxfQfXetn2DkZME/egmFevyuEzAZH2AurxTKVySsAhmKLffIF/Tz3q1GbqRjH
aq8zKDzMrpFvIjoz/hib5qfXxNhoiw9PG0hNTTYz1XtKFVjmbRP2RTKoceoF1C8K
+MeX1iqQ8fkaBDXBZQN/YIklSHPe9DA8v5YE71lv9ttMp0kesvp9ZZ7FLSDgFKUJ
tppMRFhZsW0UuTwNVhubE9uvGexgJ7SxwRablQR3t9k2UPmPrL1VJ+I0IrAJCqp+
sqPcdTAFAh7TMerQ0lnUQdR936PzXZbe0np6/DyZUUGF5IjAZYbPTNygmc9I65Bm
cGhnrf0ka4C8FXE=
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:51:10 2025 by rpki-client