Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa
File:                     3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier:          7GIBFAbsUsSf5BspmuaaAnyXIqZMBMwILqkmm9/Uq/g=
Subject key identifier:   84:93:2D:E8:D8:D1:C3:72:48:DD:4C:A8:71:63:5D:B5:D4:61:B9:EA
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       6B296580AD58CCE45C43373D82E356F995A00567
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa
Signing time:             Wed 05 Mar 2025 18:59:37 +0000
ROA not before:           Wed 05 Mar 2025 18:54:37 +0000
ROA not after:            Wed 04 Mar 2026 18:59:37 +0000
asID:                     270811
IP address blocks:        200.219.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:29:65:80:ad:58:cc:e4:5c:43:37:3d:82:e3:56:f9:95:a0:05:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: Mar  5 18:54:37 2025 GMT
            Not After : Mar  4 18:59:37 2026 GMT
        Subject: CN=84932DE8D8D1C37248DD4CA871635DB5D461B9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:33:59:c0:5c:e7:56:4c:34:00:a6:c5:38:10:
                    d0:0b:52:a7:78:4e:25:f5:9e:c5:33:ff:e7:6f:8f:
                    61:7c:ac:0c:5f:8d:b0:77:8e:34:ca:be:4c:63:69:
                    70:35:95:b7:d9:a7:f3:bf:c5:cd:34:8e:0c:74:ce:
                    20:f9:be:3d:2f:de:9f:6d:39:4f:b7:65:60:6d:11:
                    e1:37:a1:fd:af:bb:5d:61:fb:6c:e6:f1:5b:ac:46:
                    1a:d7:11:54:c8:e2:6e:e9:d2:56:ce:86:95:07:3f:
                    ea:7c:53:88:32:f4:45:f5:57:2e:f8:60:57:68:91:
                    97:e6:aa:69:1f:0e:16:e3:bd:57:a7:4d:69:95:97:
                    62:78:12:0c:6f:0c:c3:fa:42:f7:ce:fc:1a:13:0d:
                    42:c1:2c:cb:18:e0:a4:95:fe:dd:0c:78:fc:ca:86:
                    0c:4d:64:2c:e2:9c:43:ae:5a:dd:e9:16:9b:28:35:
                    08:d1:de:c9:09:f9:e2:b4:90:ae:89:79:74:d0:e4:
                    15:d4:01:41:df:ee:9c:be:fc:05:ff:43:16:02:41:
                    51:72:5f:b2:d3:9e:f4:76:e8:e8:06:d2:11:c6:ef:
                    9a:d7:14:5d:b1:2c:ad:5b:08:ba:86:c6:01:e6:27:
                    60:1f:41:ab:c3:75:00:aa:9c:9f:29:b6:22:10:22:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:93:2D:E8:D8:D1:C3:72:48:DD:4C:A8:71:63:5D:B5:D4:61:B9:EA
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:5f:c4:e0:48:fa:55:c0:18:34:52:a1:6b:78:b2:0b:6d:76:
         90:8e:dc:89:6b:50:a8:01:ff:72:e8:48:26:51:48:2d:75:d4:
         21:3c:f1:aa:be:59:ca:e0:ed:22:16:8e:f2:8f:82:1e:60:6d:
         96:be:40:2e:8d:b3:c7:63:b8:48:5d:7a:6b:6c:86:a8:76:d5:
         75:ff:63:e1:61:59:a3:73:6a:3d:9c:1e:1d:bb:a1:79:fd:38:
         9b:e1:7c:66:70:8d:e7:dd:5c:0c:1d:e7:ab:fe:4f:9c:a7:c5:
         58:74:d3:8a:6e:8d:8f:1d:09:94:60:99:ce:26:46:98:a0:b2:
         c7:f7:1e:0c:4d:aa:30:f2:41:ff:a3:36:a8:28:8c:10:35:39:
         4d:b1:71:60:08:67:d8:e8:62:73:ed:68:5c:09:3d:75:d8:81:
         4e:20:3e:70:11:9f:46:64:55:ee:a5:e5:a8:30:15:30:58:74:
         09:e0:bb:d2:3e:a6:84:69:3d:1f:3b:78:4d:17:86:ff:74:e0:
         65:f7:5d:51:c0:fb:92:31:38:fc:6e:d6:c1:73:a3:0b:b9:0c:
         70:28:cc:5d:5c:67:ad:bb:ec:07:ad:1d:36:e2:7f:d4:64:de:
         2d:81:82:25:41:19:10:af:18:74:4a:01:99:3f:24:5c:15:13:
         78:cc:71:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:53:51 2025 by rpki-client