Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3230302e35332e33302e302f32342d3234203d3e203533303632.roa
File:                     3230302e35332e33302e302f32342d3234203d3e203533303632.roa (raw, json)
Hash identifier:          0fD9xpihb9GNbwHKEJWN54zT41lL8O6zozYvg0GFmaQ=
Subject key identifier:   2C:81:8A:C3:AC:A6:C6:BA:73:D2:89:CA:08:16:24:13:72:14:58:7D
Certificate issuer:       /CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
Certificate serial:       4E9E3A357A76C42F475B6F09FDE02CA19BD743D4
Authority key identifier: 4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3230302e35332e33302e302f32342d3234203d3e203533303632.roa
Signing time:             Wed 14 Aug 2024 01:06:12 +0000
ROA not before:           Wed 14 Aug 2024 01:01:12 +0000
ROA not after:            Wed 13 Aug 2025 01:06:12 +0000
asID:                     53062
IP address blocks:        200.53.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9e:3a:35:7a:76:c4:2f:47:5b:6f:09:fd:e0:2c:a1:9b:d7:43:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
        Validity
            Not Before: Aug 14 01:01:12 2024 GMT
            Not After : Aug 13 01:06:12 2025 GMT
        Subject: CN=2C818AC3ACA6C6BA73D289CA081624137214587D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:5e:ae:9d:d5:cd:cb:ce:5d:b8:c9:c9:70:
                    e1:3d:01:00:5d:e1:7f:5d:d6:6f:da:04:52:0c:29:
                    58:7c:ba:41:b0:af:df:37:96:b4:76:ed:46:4a:7f:
                    05:33:10:4b:a7:a1:be:9d:12:92:1f:ea:32:17:d4:
                    97:a2:49:8f:af:62:ff:d6:54:94:e9:be:23:7c:0e:
                    16:7f:5d:17:65:25:74:9f:56:d1:f9:d6:f0:e6:bf:
                    8e:bb:ce:3c:3d:b5:e7:46:04:e7:e7:ad:7b:97:f3:
                    14:5a:bb:db:54:b5:aa:eb:7e:0d:ee:0f:38:ce:fa:
                    dd:13:19:28:3b:be:d1:7d:b8:d6:63:d9:41:f6:a3:
                    7a:cd:be:8e:97:88:e3:89:e3:6c:df:34:a6:77:23:
                    66:9d:9e:e4:da:4c:0a:e4:7f:ab:f1:90:c5:78:69:
                    67:4d:e5:b0:8e:05:a6:28:42:e8:2d:cf:97:1f:e0:
                    89:22:d0:3e:8f:5a:0e:2c:f3:3f:3e:4f:e4:c9:15:
                    93:09:d4:b4:43:f7:f6:b5:6a:10:e3:5f:45:1d:56:
                    6a:29:a3:a3:58:56:28:26:fa:0f:8d:21:1c:44:9a:
                    04:0f:d0:f3:f5:61:6b:f8:f3:dd:76:02:fb:4b:f2:
                    2c:9c:66:01:3e:0a:1a:ee:b5:5b:63:fd:b5:32:1a:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:81:8A:C3:AC:A6:C6:BA:73:D2:89:CA:08:16:24:13:72:14:58:7D
            X509v3 Authority Key Identifier:
                keyid:4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3230302e35332e33302e302f32342d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:6b:cb:85:20:2d:85:3d:69:84:75:00:a5:f4:4e:c1:33:1a:
         81:22:ba:87:63:82:96:a1:ea:71:35:63:75:1f:b2:27:60:1d:
         28:6a:05:d4:4e:48:19:7a:0a:92:9c:43:19:2c:82:a5:fb:3a:
         75:16:ae:62:45:5f:9f:59:83:bf:18:24:43:70:e0:e9:85:53:
         76:26:91:52:2f:41:d4:80:c3:8e:88:be:f3:4f:98:55:77:06:
         7a:ba:bd:7d:48:07:28:4f:a5:71:c3:fb:20:a9:ad:8b:2e:8f:
         29:dd:19:b3:59:54:3b:38:2c:6f:19:0b:f7:63:85:ec:f4:06:
         a3:eb:0c:43:16:6b:c3:b5:ea:cc:f1:22:52:25:4e:4e:3c:dc:
         b4:71:95:6f:fa:ce:7c:d6:67:b6:09:7e:89:96:45:2d:02:58:
         0d:9e:10:e6:76:0a:7e:92:1d:da:0d:0d:86:eb:60:af:26:82:
         de:cb:db:75:f7:ac:26:37:d5:83:87:0c:3b:18:f8:65:c9:2f:
         7d:12:c4:28:07:3f:02:31:16:7d:11:46:f6:d8:b4:e3:09:b7:
         9d:6a:d4:01:7a:79:56:fc:50:bd:a7:3e:91:df:d7:82:19:35:
         12:13:a5:45:6b:b9:a9:e2:f5:f0:04:3e:06:8c:23:5e:a6:07:
         de:0c:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:44:26 2025 by rpki-client