Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/3230302e32362e3234342e302f32322d3332203d3e20323730343539.roa
File:                     3230302e32362e3234342e302f32322d3332203d3e20323730343539.roa (raw, json)
Hash identifier:          jF65vlkJbTNdJOjja7yPgbevbVBscpEo30PZdYMwm9A=
Subject key identifier:   9C:AC:90:92:B3:99:FD:A2:D4:50:A0:F7:61:66:8F:3D:01:2E:BF:B4
Certificate issuer:       /CN=F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C
Certificate serial:       6A51F8919D8CE07A42C586CDEB7AC6800FF9C088
Authority key identifier: F9:F7:B1:CD:A4:04:47:60:11:A4:CC:28:A2:45:5A:83:B6:BB:5B:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/3230302e32362e3234342e302f32322d3332203d3e20323730343539.roa
Signing time:             Tue 25 Feb 2025 21:18:41 +0000
ROA not before:           Tue 25 Feb 2025 21:13:41 +0000
ROA not after:            Tue 24 Feb 2026 21:18:41 +0000
asID:                     270459
IP address blocks:        200.26.244.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:51:f8:91:9d:8c:e0:7a:42:c5:86:cd:eb:7a:c6:80:0f:f9:c0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C
        Validity
            Not Before: Feb 25 21:13:41 2025 GMT
            Not After : Feb 24 21:18:41 2026 GMT
        Subject: CN=9CAC9092B399FDA2D450A0F761668F3D012EBFB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:5a:83:9b:ca:fc:97:0b:61:82:49:d8:23:
                    bb:04:c2:63:3d:52:55:97:1e:a3:06:2f:a2:3a:31:
                    da:a7:96:2c:a2:14:b7:1b:33:d2:c9:f0:5e:d1:12:
                    b6:8a:5f:91:a2:f8:b7:9e:51:83:bd:8c:eb:a4:c4:
                    78:06:8d:36:bd:99:c7:7f:28:11:cc:80:6e:58:53:
                    4d:b7:60:b1:fc:50:dc:8e:54:5f:0a:72:d3:84:61:
                    cb:25:92:49:34:92:3b:1b:08:05:91:d3:7d:42:5c:
                    a5:64:cd:79:6d:70:78:27:a4:b9:61:8e:bb:82:ab:
                    21:6c:67:48:f1:9c:9e:56:12:6a:a9:1c:fb:a6:8c:
                    09:75:38:fc:0d:4b:05:ec:ff:5b:26:6f:a3:a3:72:
                    16:a9:49:8d:f1:7e:c6:a7:26:54:4a:76:1b:cf:b9:
                    0e:70:43:4e:c1:82:0a:ff:f2:56:7a:a3:19:15:40:
                    fc:b9:18:2d:be:bc:5b:dc:f7:e3:2a:44:47:b6:4f:
                    24:22:6a:49:a1:98:29:97:b9:7b:53:31:e1:f3:76:
                    fb:fd:7b:94:1a:99:0b:de:68:60:6e:c1:d4:56:b7:
                    3a:4c:ac:25:75:b1:84:87:d5:ef:4f:a9:8f:99:d8:
                    0a:8e:51:e5:fc:1c:6e:54:84:ae:a9:d0:6b:bc:f2:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AC:90:92:B3:99:FD:A2:D4:50:A0:F7:61:66:8F:3D:01:2E:BF:B4
            X509v3 Authority Key Identifier:
                keyid:F9:F7:B1:CD:A4:04:47:60:11:A4:CC:28:A2:45:5A:83:B6:BB:5B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9F7B1CDA404476011A4CC28A2455A83B6BB5B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/3230302e32362e3234342e302f32322d3332203d3e20323730343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:24:49:62:77:75:5b:bc:08:0b:23:d1:62:ae:5b:a5:e5:86:
         9b:e2:7b:33:7e:be:03:47:32:0f:d2:dd:55:cb:90:4d:38:a4:
         55:66:8d:72:8f:99:2d:cf:3e:e7:6d:92:14:a4:68:3c:13:89:
         f1:f8:e6:45:b8:f9:4d:76:bc:eb:2d:d4:ad:51:b4:35:fe:cf:
         c7:e9:a2:43:e7:1d:30:45:09:0a:d0:f5:4a:86:88:cc:76:68:
         af:e2:f0:9f:54:ef:f4:17:3f:0a:a5:e9:70:00:06:22:48:7c:
         6b:aa:ad:76:ae:52:d2:f4:76:44:8d:0a:09:59:6d:d4:26:dc:
         df:6f:d4:3d:8a:9a:f3:f7:f9:cd:24:d2:f1:cd:53:f5:24:e8:
         f9:d1:e1:4b:26:78:66:58:e0:ba:3d:b4:4d:6b:10:f5:87:c5:
         87:cf:96:e0:80:1d:af:be:fe:a4:a0:ce:c0:f9:6e:5a:bd:de:
         84:c2:78:1c:7c:56:91:ee:13:7d:14:47:fb:fa:c0:eb:44:86:
         10:db:4f:78:9e:02:4a:3e:d5:99:04:1d:50:59:8c:79:5b:f0:
         e8:76:ae:f9:04:48:fb:6a:9b:3c:b6:21:8f:4b:7f:fa:7e:45:
         68:f5:e3:68:ee:c4:73:5f:96:74:f9:e2:f5:98:75:0f:b3:fe:
         00:09:b9:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUalH4kZ2M4HpCxYbN63rGgA/5wIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGN0IxQ0RBNDA0NDc2MDExQTRDQzI4QTI0NTVBODNC
NkJCNUI2QzAeFw0yNTAyMjUyMTEzNDFaFw0yNjAyMjQyMTE4NDFaMDMxMTAvBgNV
BAMTKDlDQUM5MDkyQjM5OUZEQTJENDUwQTBGNzYxNjY4RjNEMDEyRUJGQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSTFqDm8r8lwthgknYI7sEwmM9
UlWXHqMGL6I6MdqnliyiFLcbM9LJ8F7REraKX5Gi+LeeUYO9jOukxHgGjTa9mcd/
KBHMgG5YU023YLH8UNyOVF8KctOEYcslkkk0kjsbCAWR031CXKVkzXltcHgnpLlh
jruCqyFsZ0jxnJ5WEmqpHPumjAl1OPwNSwXs/1smb6OjchapSY3xfsanJlRKdhvP
uQ5wQ07Bggr/8lZ6oxkVQPy5GC2+vFvc9+MqREe2TyQiakmhmCmXuXtTMeHzdvv9
e5QamQveaGBuwdRWtzpMrCV1sYSH1e9PqY+Z2AqOUeX8HG5UhK6p0Gu88q3rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnKyQkrOZ/aLUUKD3YWaPPQEuv7QwHwYDVR0j
BBgwFoAU+fexzaQER2ARpMwookVag7a7W2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExHRXdYTVo1U3hESzViWldFMlY3YlFSNmR6UWF4dFdZNjF5dTI2Z3N5
TVUvMC9GOUY3QjFDREE0MDQ0NzYwMTFBNENDMjhBMjQ1NUE4M0I2QkI1QjZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RjdCMUNEQTQwNDQ3NjAx
MUE0Q0MyOEEyNDU1QTgzQjZCQjVCNkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMR0V3WE1aNVN4REs1YlpXRTJWN2JRUjZkelFheHRXWTYxeXUyNmdzeU1VLzAv
MzIzMDMwMmUzMjM2MmUzMjM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzAzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIGvQwDQYJKoZIhvcNAQELBQADggEBACgkSWJ3
dVu8CAsj0WKuW6XlhpviezN+vgNHMg/S3VXLkE04pFVmjXKPmS3PPudtkhSkaDwT
ifH45kW4+U12vOst1K1RtDX+z8fpokPnHTBFCQrQ9UqGiMx2aK/i8J9U7/QXPwql
6XAABiJIfGuqrXauUtL0dkSNCglZbdQm3N9v1D2KmvP3+c0k0vHNU/Uk6PnR4Usm
eGZY4Lo9tE1rEPWHxYfPluCAHa++/qSgzsD5blq93oTCeBx8VpHuE30UR/v6wOtE
hhDbT3ieAko+1ZkEHVBZjHlb8Oh2rvkESPtqmzy2IY9Lf/p+RWj142juxHNflnT5
4vWYdQ+z/gAJue4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:36:14 2025 by rpki-client