Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e203532363331.roa
File:                     3230302e3232392e3234362e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          Nkj3NctAHAGPcSTbfglpRIbc3fAjWV8LAdZhX5q8QSU=
Subject key identifier:   53:EC:F7:89:3F:7D:77:4F:87:4E:C3:35:89:BD:96:85:C9:A8:39:06
Certificate issuer:       /CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
Certificate serial:       337BF78B0B3FDD9E0048E382C7A69A1693E5F4D8
Authority key identifier: BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e203532363331.roa
Signing time:             Mon 14 Oct 2024 14:24:36 +0000
ROA not before:           Mon 14 Oct 2024 14:19:36 +0000
ROA not after:            Mon 13 Oct 2025 14:24:36 +0000
asID:                     52631
IP address blocks:        200.229.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7b:f7:8b:0b:3f:dd:9e:00:48:e3:82:c7:a6:9a:16:93:e5:f4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
        Validity
            Not Before: Oct 14 14:19:36 2024 GMT
            Not After : Oct 13 14:24:36 2025 GMT
        Subject: CN=53ECF7893F7D774F874EC33589BD9685C9A83906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:09:2c:7f:d4:33:94:88:bc:17:c7:d8:f0:
                    c0:d2:f5:15:87:90:f2:a1:b0:92:2e:37:dd:1b:15:
                    87:61:ab:2b:31:8d:30:aa:a9:0d:df:1c:31:15:03:
                    81:fa:e0:ce:b7:05:8d:df:7b:a3:59:b0:f5:df:b9:
                    35:a6:79:65:59:2f:91:fd:04:1a:f3:0f:b9:8c:65:
                    16:2d:4a:86:bf:c3:78:1d:b6:52:07:a8:32:2c:fe:
                    2e:e1:a9:89:ed:11:43:f2:14:0b:55:d9:d6:9d:69:
                    71:7a:d8:f2:99:a9:4f:ba:38:2d:f9:0d:74:60:db:
                    67:0c:f9:81:eb:61:a9:14:0c:43:3e:80:eb:ef:3b:
                    ee:9c:8f:6d:13:dd:78:bc:cb:9d:de:d5:c7:cd:86:
                    e9:2f:2f:65:a9:18:94:2c:38:d8:bf:e0:89:97:f2:
                    35:2e:56:66:9a:c3:4a:29:42:da:b9:13:46:ec:9c:
                    92:52:56:f5:aa:da:9a:33:17:30:09:59:5f:36:37:
                    bf:52:e0:33:14:6e:6f:a6:7b:ff:6a:86:af:fc:63:
                    43:d5:48:00:44:d7:d0:10:3a:3b:9e:78:6e:6d:d6:
                    c4:4f:5c:47:9f:24:d0:f1:76:cb:ce:f5:d4:a0:d2:
                    bf:b1:7d:be:44:be:c8:b1:97:96:50:ce:c1:6c:b3:
                    92:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EC:F7:89:3F:7D:77:4F:87:4E:C3:35:89:BD:96:85:C9:A8:39:06
            X509v3 Authority Key Identifier:
                keyid:BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:f6:3c:5f:f9:5e:97:2e:3b:e0:3d:d6:b0:0f:d0:ce:6c:5a:
         a0:ec:1c:b5:6d:f6:64:da:fe:3d:6d:d8:0d:99:cf:4b:a2:ef:
         5e:d8:59:7d:9d:69:9d:4d:42:2d:90:5c:2c:e7:10:fb:74:e5:
         22:c9:a0:66:cb:28:ec:35:7a:42:41:c6:27:f4:b9:03:27:5d:
         1d:17:48:49:21:65:54:6e:2f:da:c3:57:9f:de:01:12:d6:84:
         e0:9a:49:29:27:09:4f:ff:89:5c:fd:72:83:5a:c1:62:22:15:
         7a:db:01:ce:ea:7d:40:bb:de:bb:4e:15:bf:b2:cd:56:4b:78:
         6d:af:84:e5:e9:42:cf:19:cf:a3:05:e7:ef:1d:d3:f9:ee:49:
         0d:2c:3f:c6:c8:8e:2f:04:16:11:42:6f:5a:f9:64:46:51:f4:
         bb:48:ee:72:6a:08:86:a7:db:54:b5:cd:0e:6d:a7:b1:9d:ed:
         17:7d:1c:39:46:78:d3:e0:eb:bb:77:18:aa:df:bf:44:b9:82:
         49:16:a8:7b:32:c2:aa:26:38:17:cc:cc:ff:e7:70:79:57:d5:
         b8:ce:d5:d3:b5:96:07:17:a8:77:f6:16:93:1f:9c:cb:a9:30:
         c5:17:67:fc:23:f1:97:96:9d:c9:6a:03:99:db:46:bf:9e:cf:
         4f:7a:96:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:44:22 2025 by rpki-client