Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32332d3233203d3e20323730383135.roa
File:                     3230302e3232392e3234342e302f32332d3233203d3e20323730383135.roa (raw, json)
Hash identifier:          +3QMGwPLxwUN3YtAtNQDJPZk4efWzX7gB+Xn7V3D2sQ=
Subject key identifier:   6F:07:B8:67:EF:E0:A8:EF:AC:0A:5A:9C:27:EF:49:7D:47:3E:37:89
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       3052D3EAF62E38B08095F5C962B4DE7AFE16E0E3
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32332d3233203d3e20323730383135.roa
Signing time:             Mon 10 Feb 2025 12:56:37 +0000
ROA not before:           Mon 10 Feb 2025 12:51:37 +0000
ROA not after:            Mon 09 Feb 2026 12:56:37 +0000
asID:                     270815
IP address blocks:        200.229.244.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:52:d3:ea:f6:2e:38:b0:80:95:f5:c9:62:b4:de:7a:fe:16:e0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:37 2025 GMT
            Not After : Feb  9 12:56:37 2026 GMT
        Subject: CN=6F07B867EFE0A8EFAC0A5A9C27EF497D473E3789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:1e:17:75:00:86:53:e0:ba:71:60:9d:9c:
                    40:ae:3a:af:05:de:97:f2:80:c2:bf:e4:a9:af:30:
                    83:28:e8:42:ca:c8:e7:8d:33:e0:e9:ef:c7:02:d1:
                    01:a0:12:12:6d:71:ca:92:92:79:7c:2f:d7:bb:08:
                    e9:61:e9:5e:79:1c:b3:86:ae:9b:8f:85:b8:fd:94:
                    dd:8c:bc:76:dc:ad:d2:56:ba:b4:9a:30:45:8a:52:
                    ef:52:20:8e:cb:13:21:b9:b2:37:6b:e0:20:85:b7:
                    57:82:5f:53:27:5c:27:7f:5c:ad:67:c2:c9:7c:60:
                    f2:2a:50:74:7f:34:3d:c1:34:89:de:32:01:2f:97:
                    51:39:c0:4c:06:02:ed:c9:e6:fb:63:ed:17:ad:61:
                    12:7a:16:69:50:af:ef:08:2c:7e:77:60:2c:10:bf:
                    66:06:2a:d3:0c:8d:80:ff:8a:ac:a5:91:27:e3:1c:
                    a6:fb:7a:4e:ec:55:7a:13:22:c0:fc:12:ae:d7:88:
                    6c:31:c2:54:47:7b:47:3e:1c:8d:36:c5:5c:46:6b:
                    bb:34:5d:e9:f5:8f:d2:35:da:9a:c2:ec:31:62:a3:
                    c4:09:5a:e3:d1:82:99:a2:03:28:93:71:36:d6:ac:
                    a0:c1:78:71:a9:6b:ff:29:7f:e6:10:87:1b:30:50:
                    82:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:07:B8:67:EF:E0:A8:EF:AC:0A:5A:9C:27:EF:49:7D:47:3E:37:89
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32332d3233203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:2e:28:36:ac:65:bf:13:22:dc:08:5b:96:2e:26:78:ff:26:
         57:20:62:c4:1e:4b:7b:10:d5:40:69:c3:e8:9e:37:b7:c0:c0:
         b7:08:c8:b9:c2:26:a6:94:77:d1:51:5d:20:cf:c3:ea:c6:a7:
         22:8e:0c:ed:cf:bb:fe:d4:72:c2:42:0b:53:ef:d4:c4:d5:a2:
         9e:07:04:1d:78:27:38:19:90:4d:dd:70:9b:86:63:71:d4:5f:
         3d:08:a2:4f:2f:64:4d:77:ab:e8:a3:6e:f0:a8:2c:e8:35:7e:
         d4:3d:79:fc:59:63:0f:15:99:b4:c5:ed:f1:ec:3d:2e:28:c1:
         be:87:ce:99:04:7c:39:27:82:8c:a7:70:59:49:ab:7f:70:8c:
         08:7f:e8:05:69:ce:59:76:ff:49:92:0f:1f:f1:4e:3f:4f:5d:
         e0:fd:ef:8b:ba:0b:0c:20:31:80:2c:84:7b:eb:79:bb:3b:8c:
         fe:e7:9e:3a:17:bd:5a:4a:67:4f:1a:b5:1e:2d:29:94:42:11:
         c5:81:04:26:2a:0d:57:9b:f6:f3:85:75:a3:2f:c4:87:b7:61:
         17:34:77:e7:9f:f4:ee:b4:0b:03:c2:7a:dd:1f:15:8c:b3:81:
         93:9e:72:3b:39:cd:83:62:71:65:5d:6d:d6:ea:0e:43:5f:2e:
         05:dc:80:e6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMFLT6vYuOLCAlfXJYrTeev4W4OMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZEQkFFMjhENTRERDQyNzIzODYwNDA3ODlGMzc2MDE4
QzE5RkUzNzAeFw0yNTAyMTAxMjUxMzdaFw0yNjAyMDkxMjU2MzdaMDMxMTAvBgNV
BAMTKDZGMDdCODY3RUZFMEE4RUZBQzBBNUE5QzI3RUY0OTdENDczRTM3ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHx4XdQCGU+C6cWCdnECuOq8F
3pfygMK/5KmvMIMo6ELKyOeNM+Dp78cC0QGgEhJtccqSknl8L9e7COlh6V55HLOG
rpuPhbj9lN2MvHbcrdJWurSaMEWKUu9SII7LEyG5sjdr4CCFt1eCX1MnXCd/XK1n
wsl8YPIqUHR/ND3BNIneMgEvl1E5wEwGAu3J5vtj7RetYRJ6FmlQr+8ILH53YCwQ
v2YGKtMMjYD/iqylkSfjHKb7ek7sVXoTIsD8Eq7XiGwxwlRHe0c+HI02xVxGa7s0
Xen1j9I12prC7DFio8QJWuPRgpmiAyiTcTbWrKDBeHGpa/8pf+YQhxswUIJHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbwe4Z+/gqO+sClqcJ+9JfUc+N4kwHwYDVR0j
BBgwFoAUT9uuKNVN1CcjhgQHifN2AYwZ/jcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC80RkRCQUUyOEQ1NERENDI3MjM4NjA0MDc4OUYzNzYwMThDMTlGRTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGREJBRTI4RDU0REQ0Mjcy
Mzg2MDQwNzg5RjM3NjAxOEMxOUZFMzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzQzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM4MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcjl9DANBgkqhkiG9w0BAQsFAAOCAQEAHy4o
NqxlvxMi3Ahbli4meP8mVyBixB5LexDVQGnD6J43t8DAtwjIucImppR30VFdIM/D
6sanIo4M7c+7/tRywkILU+/UxNWingcEHXgnOBmQTd1wm4ZjcdRfPQiiTy9kTXer
6KNu8Kgs6DV+1D15/FljDxWZtMXt8ew9LijBvofOmQR8OSeCjKdwWUmrf3CMCH/o
BWnOWXb/SZIPH/FOP09d4P3vi7oLDCAxgCyEe+t5uzuM/ueeOhe9WkpnTxq1Hi0p
lEIRxYEEJioNV5v284V1oy/Eh7dhFzR355/07rQLA8J63R8VjLOBk55yOznNg2Jx
ZV1t1uoOQ18uBdyA5g==
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:32:28 2025 by rpki-client