Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234322e302f32332d3332203d3e20323730383334.roa
File:                     3230302e3232392e3234322e302f32332d3332203d3e20323730383334.roa (raw, json)
Hash identifier:          0OJbmsUC5LrGOjfsmXsjDL1u/pwxUrQ8VA6kvYk6mRY=
Subject key identifier:   C5:BE:ED:56:6F:D7:39:0F:C3:60:C8:C7:A7:B4:F8:ED:EC:09:04:4C
Certificate issuer:       /CN=1714E24A15B85867FF793EB1A49B70A167B00FA1
Certificate serial:       213E59075877429113BF18E1E7E1302286F55980
Authority key identifier: 17:14:E2:4A:15:B8:58:67:FF:79:3E:B1:A4:9B:70:A1:67:B0:0F:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1714E24A15B85867FF793EB1A49B70A167B00FA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234322e302f32332d3332203d3e20323730383334.roa
Signing time:             Tue 08 Oct 2024 15:16:25 +0000
ROA not before:           Tue 08 Oct 2024 15:11:25 +0000
ROA not after:            Tue 07 Oct 2025 15:16:25 +0000
asID:                     270834
IP address blocks:        200.229.242.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3e:59:07:58:77:42:91:13:bf:18:e1:e7:e1:30:22:86:f5:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1714E24A15B85867FF793EB1A49B70A167B00FA1
        Validity
            Not Before: Oct  8 15:11:25 2024 GMT
            Not After : Oct  7 15:16:25 2025 GMT
        Subject: CN=C5BEED566FD7390FC360C8C7A7B4F8EDEC09044C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:37:5f:b5:e2:47:2b:ef:ab:ec:01:f4:49:
                    24:0c:6f:70:8b:d3:76:77:e7:99:a1:1a:af:f1:a5:
                    e0:b5:67:34:56:a4:e8:ee:07:8f:4d:5e:f3:42:50:
                    8c:a1:ba:2a:46:1e:71:b0:29:1e:1c:bf:d9:ef:75:
                    bb:07:c1:ae:76:f2:7f:4f:a2:3b:d8:39:57:25:7f:
                    54:24:9a:57:80:26:06:f5:97:c5:10:f5:1e:68:ff:
                    c8:4b:45:9e:2c:bd:24:86:34:3c:63:f8:e7:a8:b7:
                    e2:0e:32:e5:40:53:a1:40:08:41:0c:e1:06:0f:1c:
                    d4:03:68:bd:ee:12:b8:eb:1b:4d:97:dd:65:4f:e6:
                    fa:b2:93:25:45:38:58:88:d4:83:86:05:68:75:c4:
                    ff:52:55:23:b3:95:94:d6:b1:17:03:7b:c8:c5:2c:
                    d5:45:1b:73:74:07:8f:1d:d9:2b:95:10:81:2d:17:
                    07:8e:e9:9d:be:ef:ca:69:56:57:61:69:34:98:7c:
                    d7:5b:01:8f:7d:a5:ea:ff:f0:2c:71:d5:5b:3a:7b:
                    41:37:b6:a6:83:a7:cc:63:e8:d0:63:f6:ed:f3:52:
                    79:52:e8:ef:9e:ab:e8:8a:f4:8d:b6:02:07:a0:07:
                    05:10:2f:d4:f2:fe:31:63:0e:1a:43:71:4e:c6:78:
                    41:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BE:ED:56:6F:D7:39:0F:C3:60:C8:C7:A7:B4:F8:ED:EC:09:04:4C
            X509v3 Authority Key Identifier:
                keyid:17:14:E2:4A:15:B8:58:67:FF:79:3E:B1:A4:9B:70:A1:67:B0:0F:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/1714E24A15B85867FF793EB1A49B70A167B00FA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1714E24A15B85867FF793EB1A49B70A167B00FA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234322e302f32332d3332203d3e20323730383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:b7:4f:4c:89:26:ca:ea:b5:39:6b:42:dd:2b:15:a7:19:1f:
         07:f3:17:78:2c:41:89:7b:82:3d:00:a6:6e:7c:80:8e:97:ba:
         04:39:b6:e3:3a:d9:8b:13:8b:d0:e7:ce:4e:e8:f4:61:1f:0a:
         34:ad:2e:3c:71:85:ac:76:68:ed:a8:2f:bc:ef:2d:dd:ed:83:
         11:78:75:b4:5b:9f:64:6a:f7:0a:f3:4e:1b:65:19:98:e8:42:
         e0:7a:39:76:14:f1:e7:0a:03:c8:5f:a0:6b:4f:5d:de:65:b6:
         f5:e3:c9:1e:a4:bb:cf:3b:5e:0d:86:01:27:0c:61:25:8c:35:
         ba:11:da:3a:11:23:17:18:4d:f8:73:5f:fd:cb:f3:11:37:a2:
         45:8e:fb:f1:21:db:c6:5d:19:78:bb:4a:cd:ab:9c:3d:18:ef:
         c6:e2:a1:5f:e9:40:2f:87:96:33:a0:10:d0:27:fc:8f:70:61:
         45:09:5c:d1:c4:15:bd:69:60:47:a4:6a:7f:b2:09:2c:25:b3:
         7a:17:e6:e0:31:92:95:60:2f:fa:b3:86:4d:43:51:b7:c9:e3:
         48:7a:41:22:65:00:5e:fb:2f:6a:f5:96:ad:e6:fd:c2:68:73:
         3c:7e:46:d9:8c:ef:ad:e1:97:7a:bc:4c:16:fa:f1:8b:7a:9c:
         05:bc:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:37:30 2025 by rpki-client