Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/voN8zrDn6poPt5ktP78inPD8Xik2Vqv9eJAwLKiyicT/0/3230302e3231382e3232342e302f32322d3234203d3e20323636393237.roa
File:                     3230302e3231382e3232342e302f32322d3234203d3e20323636393237.roa (raw, json)
Hash identifier:          R2aRZHIOidPrwk74E+aSCVBeuHx0iKR6XevpiNF2gPc=
Subject key identifier:   40:72:CA:87:CC:4E:BB:05:49:2D:D3:7D:11:D9:C0:D5:03:26:D5:1A
Certificate issuer:       /CN=62E6306C885E3E998E1164CD3F5B6A42FA85DB0D
Certificate serial:       7027FFA81F1FA04CCFCF97A2774069F91ADDF3DE
Authority key identifier: 62:E6:30:6C:88:5E:3E:99:8E:11:64:CD:3F:5B:6A:42:FA:85:DB:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E6306C885E3E998E1164CD3F5B6A42FA85DB0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/voN8zrDn6poPt5ktP78inPD8Xik2Vqv9eJAwLKiyicT/0/3230302e3231382e3232342e302f32322d3234203d3e20323636393237.roa
Signing time:             Fri 27 Dec 2024 15:48:32 +0000
ROA not before:           Fri 27 Dec 2024 15:43:32 +0000
ROA not after:            Fri 26 Dec 2025 15:48:32 +0000
asID:                     266927
IP address blocks:        200.218.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:27:ff:a8:1f:1f:a0:4c:cf:cf:97:a2:77:40:69:f9:1a:dd:f3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E6306C885E3E998E1164CD3F5B6A42FA85DB0D
        Validity
            Not Before: Dec 27 15:43:32 2024 GMT
            Not After : Dec 26 15:48:32 2025 GMT
        Subject: CN=4072CA87CC4EBB05492DD37D11D9C0D50326D51A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:37:a3:e2:ea:a9:c9:e2:18:07:32:86:b0:
                    91:10:03:bc:e6:f6:17:ab:7d:2a:88:be:81:ca:6f:
                    27:06:ed:56:67:b8:30:9c:e7:89:2f:0c:8b:5c:a3:
                    b4:b9:48:99:82:f7:af:0e:51:a7:01:62:86:98:41:
                    56:da:f9:ff:a5:a0:49:86:4b:e2:13:32:a8:15:6d:
                    10:60:f2:78:1d:23:c9:fd:ca:81:6c:29:ba:d2:c8:
                    de:04:ed:c1:eb:72:3f:d5:82:d5:08:1b:7a:c3:e5:
                    76:21:8c:a6:0d:44:a0:6a:7a:ef:ab:0a:ef:98:98:
                    7f:58:4c:b7:15:b1:e8:6f:16:6e:dd:01:23:91:9d:
                    7a:31:47:ed:6c:a4:7e:dd:a1:a3:0b:74:6f:0c:7f:
                    4d:2d:92:af:59:47:8f:65:9d:3c:1c:0a:0d:f1:de:
                    77:60:94:90:0c:d7:b9:32:e2:ee:7f:61:93:95:1d:
                    70:39:63:cb:d1:9a:de:0d:34:e4:bf:e1:66:79:d8:
                    c7:d4:ac:c8:81:ed:48:a3:7a:d2:ba:b8:9c:5f:7b:
                    ea:51:2b:25:ff:df:16:54:30:8e:89:25:73:a4:d7:
                    af:7e:5b:58:c0:61:65:b3:d2:45:2f:46:b9:2a:69:
                    88:c0:49:05:6b:fb:a1:82:43:67:70:9d:aa:6b:da:
                    fe:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:72:CA:87:CC:4E:BB:05:49:2D:D3:7D:11:D9:C0:D5:03:26:D5:1A
            X509v3 Authority Key Identifier:
                keyid:62:E6:30:6C:88:5E:3E:99:8E:11:64:CD:3F:5B:6A:42:FA:85:DB:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/voN8zrDn6poPt5ktP78inPD8Xik2Vqv9eJAwLKiyicT/0/62E6306C885E3E998E1164CD3F5B6A42FA85DB0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E6306C885E3E998E1164CD3F5B6A42FA85DB0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/voN8zrDn6poPt5ktP78inPD8Xik2Vqv9eJAwLKiyicT/0/3230302e3231382e3232342e302f32322d3234203d3e20323636393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:8a:ff:03:e6:63:ac:70:bd:c6:b9:57:51:57:c1:dc:44:db:
         6c:17:1b:21:96:f8:cd:38:8a:fa:b9:60:59:47:ad:6c:2f:7b:
         15:56:a9:6d:7a:73:4f:1d:97:e5:33:8b:35:e4:17:6a:aa:c3:
         76:01:ca:86:4f:40:ff:95:8b:a8:29:47:e2:da:5b:ef:10:65:
         67:6d:91:cd:10:d3:2f:50:dc:7e:ba:61:78:ce:b6:74:29:e0:
         2f:3a:a1:36:04:71:62:8b:e3:d0:b7:a7:2a:b8:7e:44:42:87:
         6d:5f:53:82:89:01:91:86:8c:e5:f6:5d:51:d2:ca:b0:47:cb:
         82:ca:6b:d9:df:c7:70:04:4e:82:45:21:13:38:7b:44:51:a4:
         16:45:76:ac:2a:58:05:a7:2f:bf:d2:23:79:a0:28:f5:c7:5f:
         b1:16:0c:ac:5d:4f:a7:b5:98:b4:61:fb:e5:7d:fa:48:f3:a9:
         54:23:93:fb:a6:0b:cc:61:a5:c8:c7:22:21:1f:b1:d1:bc:45:
         13:00:fa:a0:de:d4:fc:95:04:4d:59:32:ec:3b:96:4b:34:b8:
         cc:ec:85:17:68:2d:c4:70:85:86:45:b2:4f:3e:29:51:a9:42:
         55:d2:a8:b0:82:c2:29:9a:5d:a5:c2:45:44:59:dd:bd:04:05:
         c6:99:cc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:42:41 2025 by rpki-client