Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3230312e38372e3234302e302f32302d3230203d3e203533313935.roa
File:                     3230312e38372e3234302e302f32302d3230203d3e203533313935.roa (raw, json)
Hash identifier:          n6hI4huSK17k42tsImbbMSH0Sb44qpgpzWN7EN0sQC4=
Subject key identifier:   A7:58:F0:F9:80:A4:CA:81:8F:06:90:7D:D8:DC:D6:7F:FA:56:6C:64
Certificate issuer:       /CN=D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77
Certificate serial:       4A375619F9A5271AB01F57DDFBB13E7E1A6D26F4
Authority key identifier: D5:F6:B7:FF:6F:96:81:9D:AF:FD:6C:EF:21:9B:89:AD:F3:E3:CF:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3230312e38372e3234302e302f32302d3230203d3e203533313935.roa
Signing time:             Fri 23 Aug 2024 20:00:06 +0000
ROA not before:           Fri 23 Aug 2024 19:55:06 +0000
ROA not after:            Fri 22 Aug 2025 20:00:06 +0000
asID:                     53195
IP address blocks:        201.87.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:37:56:19:f9:a5:27:1a:b0:1f:57:dd:fb:b1:3e:7e:1a:6d:26:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77
        Validity
            Not Before: Aug 23 19:55:06 2024 GMT
            Not After : Aug 22 20:00:06 2025 GMT
        Subject: CN=A758F0F980A4CA818F06907DD8DCD67FFA566C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:45:98:7c:e7:4b:65:d7:84:66:b5:c6:c3:e0:
                    04:12:bb:60:24:5b:3b:96:14:2f:1c:c9:76:2d:5a:
                    4b:df:0b:45:29:08:c5:ad:08:8d:e9:1a:01:1b:c4:
                    6d:65:de:01:9e:e6:b9:07:b7:f1:d4:65:84:6a:dd:
                    0d:70:21:57:1d:a7:74:07:22:b3:61:f5:12:b7:6f:
                    bb:ef:39:47:32:d2:92:d7:bd:73:56:88:a6:5b:cf:
                    91:ea:10:d5:b5:af:54:32:f2:23:f3:35:09:30:24:
                    7c:23:62:a3:7c:3f:c1:38:7a:79:64:08:fd:30:df:
                    e1:22:6a:f2:9a:ca:4d:de:47:7e:24:47:eb:da:b8:
                    ab:71:91:57:7d:08:b1:7f:81:2a:0f:0e:03:81:9e:
                    82:46:6e:d9:d7:11:16:32:f5:a3:d7:d0:98:c6:9e:
                    e6:c8:58:79:a2:51:89:c6:02:9d:17:20:de:ba:3a:
                    2d:32:c3:18:3e:31:41:83:c2:e9:cd:5f:6f:15:3f:
                    11:73:01:cb:a0:5b:60:4e:05:4b:3f:70:a0:ed:d1:
                    52:23:88:c1:37:01:29:cd:cc:db:69:3f:e3:7e:4e:
                    13:77:f1:7d:d3:7f:04:c3:9a:e0:2c:58:0c:dd:6e:
                    52:ae:1d:43:e6:f0:c4:44:f0:3c:01:f6:ed:ce:05:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:58:F0:F9:80:A4:CA:81:8F:06:90:7D:D8:DC:D6:7F:FA:56:6C:64
            X509v3 Authority Key Identifier:
                keyid:D5:F6:B7:FF:6F:96:81:9D:AF:FD:6C:EF:21:9B:89:AD:F3:E3:CF:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3230312e38372e3234302e302f32302d3230203d3e203533313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:ef:f6:7d:e2:6d:f5:c2:a5:e7:19:43:cb:d4:05:0f:ad:55:
         0f:69:8e:4c:15:70:7c:04:c4:00:87:d5:e6:11:85:1b:ae:aa:
         4d:13:bc:e7:97:97:1c:7d:44:a0:f0:8a:b1:a6:44:6f:58:fa:
         43:83:ab:6e:74:b9:7f:19:7c:b4:7b:16:24:03:4a:aa:df:f4:
         98:cd:75:c7:ff:08:92:5c:b1:c0:b6:a0:c8:c3:33:45:42:99:
         3f:31:39:f4:1d:ef:dc:81:ad:8e:c1:f7:c2:16:32:d5:26:49:
         61:f8:43:2d:6c:23:a3:91:69:52:67:60:9a:1a:51:59:f0:ac:
         29:c8:e1:86:3f:d8:2d:7a:d2:e4:83:2d:e8:98:47:8a:c8:61:
         9d:26:d9:56:5c:08:25:05:6d:8a:50:5e:6a:45:ae:6b:c6:eb:
         47:47:8b:17:84:e6:38:60:32:9a:05:21:c7:cc:73:3d:c9:3d:
         ce:66:d6:30:89:b0:02:2e:33:05:da:bd:fd:4d:65:a3:d8:35:
         a0:f2:50:37:f2:2e:c7:77:c5:b7:f2:a8:d3:ea:32:32:b6:f7:
         23:42:fb:4a:85:4e:fa:35:3d:a9:6e:d9:2b:70:cd:ea:1f:06:
         3b:46:ba:41:43:5a:ce:75:65:09:b4:8a:88:f8:3c:8d:d8:f4:
         7c:9e:9a:fa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSjdWGfmlJxqwH1fd+7E+fhptJvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVGNkI3RkY2Rjk2ODE5REFGRkQ2Q0VGMjE5Qjg5QURG
M0UzQ0Y3NzAeFw0yNDA4MjMxOTU1MDZaFw0yNTA4MjIyMDAwMDZaMDMxMTAvBgNV
BAMTKEE3NThGMEY5ODBBNENBODE4RjA2OTA3REQ4RENENjdGRkE1NjZDNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCERZh850tl14RmtcbD4AQSu2Ak
WzuWFC8cyXYtWkvfC0UpCMWtCI3pGgEbxG1l3gGe5rkHt/HUZYRq3Q1wIVcdp3QH
IrNh9RK3b7vvOUcy0pLXvXNWiKZbz5HqENW1r1Qy8iPzNQkwJHwjYqN8P8E4enlk
CP0w3+EiavKayk3eR34kR+vauKtxkVd9CLF/gSoPDgOBnoJGbtnXERYy9aPX0JjG
nubIWHmiUYnGAp0XIN66Oi0ywxg+MUGDwunNX28VPxFzAcugW2BOBUs/cKDt0VIj
iME3ASnNzNtpP+N+ThN38X3TfwTDmuAsWAzdblKuHUPm8MRE8DwB9u3OBWrhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUp1jw+YCkyoGPBpB92NzWf/pWbGQwHwYDVR0j
BBgwFoAU1fa3/2+WgZ2v/WzvIZuJrfPjz3cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE1MYkV4a21zclFUaTNHV3BaVTVnOXBob2dwYkdiNmhKbVg3WlYyVzJN
U0ovMC9ENUY2QjdGRjZGOTY4MTlEQUZGRDZDRUYyMTlCODlBREYzRTNDRjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1RjZCN0ZGNkY5NjgxOURB
RkZENkNFRjIxOUI4OUFERjNFM0NGNzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hNTGJFeGttc3JRVGkzR1dwWlU1ZzlwaG9ncGJHYjZoSm1YN1pWMlcyTVNKLzAv
MzIzMDMxMmUzODM3MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNTMz
MzEzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyVfwMA0GCSqGSIb3DQEBCwUAA4IBAQBh7/Z94m31
wqXnGUPL1AUPrVUPaY5MFXB8BMQAh9XmEYUbrqpNE7znl5ccfUSg8IqxpkRvWPpD
g6tudLl/GXy0exYkA0qq3/SYzXXH/wiSXLHAtqDIwzNFQpk/MTn0He/cga2OwffC
FjLVJklh+EMtbCOjkWlSZ2CaGlFZ8KwpyOGGP9gtetLkgy3omEeKyGGdJtlWXAgl
BW2KUF5qRa5rxutHR4sXhOY4YDKaBSHHzHM9yT3OZtYwibACLjMF2r39TWWj2DWg
8lA38i7Hd8W38qjT6jIytvcjQvtKhU76NT2pbtkrcM3qHwY7RrpBQ1rOdWUJtIqI
+DyN2PR8npr6
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:15:08 2025 by rpki-client