Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32332d3233203d3e20323731363733.roa
File:                     3230312e3231382e3139302e302f32332d3233203d3e20323731363733.roa (raw, json)
Hash identifier:          dadtCIPaeoZRgXbU5cQsYPIC7eGRkifdVuBRZLr+Pi8=
Subject key identifier:   06:40:8D:CE:2F:1A:7B:AF:07:FE:DF:5E:98:23:DD:FE:60:C2:63:FA
Certificate issuer:       /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial:       62460BE953F42F3A0BEB4B8B52117B0D68474241
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32332d3233203d3e20323731363733.roa
Signing time:             Fri 17 Jan 2025 18:14:02 +0000
ROA not before:           Fri 17 Jan 2025 18:09:02 +0000
ROA not after:            Fri 16 Jan 2026 18:14:02 +0000
asID:                     271673
IP address blocks:        201.218.190.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:46:0b:e9:53:f4:2f:3a:0b:eb:4b:8b:52:11:7b:0d:68:47:42:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
        Validity
            Not Before: Jan 17 18:09:02 2025 GMT
            Not After : Jan 16 18:14:02 2026 GMT
        Subject: CN=06408DCE2F1A7BAF07FEDF5E9823DDFE60C263FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:eb:f0:09:35:da:e8:85:19:32:db:fa:18:
                    51:0d:45:5a:f6:02:7e:6d:ad:c9:7a:e7:4c:4c:ea:
                    bb:44:31:12:bb:4f:67:fd:0b:a7:b0:38:f8:dc:2e:
                    37:18:b2:22:94:be:af:7e:7d:4c:b1:64:2b:e5:bf:
                    74:87:10:66:59:a9:8e:ef:3f:18:c1:ac:7a:22:d8:
                    e7:5a:78:a8:cd:b0:1d:82:82:91:c4:5f:ae:09:9c:
                    27:c2:2b:0e:67:1b:11:80:20:e4:82:ab:7e:6d:77:
                    3d:b0:44:57:5f:a4:b2:af:18:a5:ec:84:12:7c:cc:
                    60:68:d1:c6:50:51:0f:b0:57:66:0e:1d:b9:99:7b:
                    c7:90:3e:d9:3c:1c:23:86:82:7b:7a:3f:aa:2d:27:
                    51:07:03:18:63:82:04:c1:c5:b5:70:d6:f0:e2:f4:
                    d3:98:00:a0:3c:1b:44:1b:63:01:ed:2a:cc:c8:0c:
                    23:b9:d6:19:3d:30:97:e1:3e:1b:38:ae:94:36:ee:
                    26:02:80:1b:e4:b9:bb:ab:7e:1d:c9:14:c5:73:d9:
                    0b:c0:b6:d5:e5:ad:2c:88:43:81:dd:fa:9b:cc:a0:
                    25:70:58:51:34:9c:69:aa:27:89:3b:24:c8:ad:2f:
                    f0:7f:88:87:b9:a6:75:94:9a:07:a7:75:53:fd:01:
                    0f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:8D:CE:2F:1A:7B:AF:07:FE:DF:5E:98:23:DD:FE:60:C2:63:FA
            X509v3 Authority Key Identifier:
                keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32332d3233203d3e20323731363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:2b:f3:7c:58:5f:86:35:86:41:58:1d:ef:cc:b0:4c:20:ef:
         72:d7:73:c0:7e:61:cb:41:0b:3e:d2:13:6a:68:91:48:53:df:
         92:79:30:dd:59:dc:10:73:fc:3a:9a:67:5a:53:e8:51:6f:46:
         5a:19:65:fc:44:f8:39:09:8c:3e:50:fc:16:82:c1:fd:f7:35:
         3f:32:c0:ad:ee:90:19:db:25:c1:07:74:36:b2:72:26:06:f1:
         65:a1:ef:cc:18:f0:75:e2:ee:72:a4:69:0c:c4:2b:20:c0:2a:
         56:bc:ae:1d:00:1d:5c:99:51:2d:49:ef:d8:7b:12:55:cc:c9:
         2d:ec:f5:4e:9f:3a:fe:1e:1c:a2:86:ca:34:b4:7c:25:c3:8d:
         e1:de:b1:92:3d:7e:95:84:5c:10:d5:42:08:0e:f0:3c:e4:e7:
         3e:6e:41:0e:35:ed:47:a9:13:0d:9f:36:06:9f:fa:50:ac:ed:
         b5:7f:94:df:b1:d9:02:19:1a:49:13:98:01:0f:d8:74:2f:c1:
         4d:b5:05:fa:86:e3:07:7f:3f:e5:03:ae:4c:d7:c5:c1:7e:ce:
         96:68:93:8c:78:0d:b8:e8:d7:d8:e6:39:82:26:11:0e:b4:47:
         e3:3f:40:e6:5f:fe:6a:5e:8e:ae:81:56:80:67:31:02:5c:85:
         fb:3e:73:d3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYkYL6VP0LzoL60uLUhF7DWhHQkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJBOUY0M0FGMUM1RDZENDE5MEEyMTNCNzE1Q0NDQ0Q4
ODcwQjIxNDAeFw0yNTAxMTcxODA5MDJaFw0yNjAxMTYxODE0MDJaMDMxMTAvBgNV
BAMTKDA2NDA4RENFMkYxQTdCQUYwN0ZFREY1RTk4MjNEREZFNjBDMjYzRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uevwCTXa6IUZMtv6GFENRVr2
An5trcl650xM6rtEMRK7T2f9C6ewOPjcLjcYsiKUvq9+fUyxZCvlv3SHEGZZqY7v
PxjBrHoi2OdaeKjNsB2CgpHEX64JnCfCKw5nGxGAIOSCq35tdz2wRFdfpLKvGKXs
hBJ8zGBo0cZQUQ+wV2YOHbmZe8eQPtk8HCOGgnt6P6otJ1EHAxhjggTBxbVw1vDi
9NOYAKA8G0QbYwHtKszIDCO51hk9MJfhPhs4rpQ27iYCgBvkuburfh3JFMVz2QvA
ttXlrSyIQ4Hd+pvMoCVwWFE0nGmqJ4k7JMitL/B/iIe5pnWUmgendVP9AQ95AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUBkCNzi8ae68H/t9emCPd/mDCY/owHwYDVR0j
BBgwFoAU26n0OvHF1tQZCiE7cVzMzYhwshQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby93N1J1MU5DQ2hUZG9QOTVuakNuZlVaRHc3ZVNpbXYzNFZ6eFoxUm9BYnlN
LzAvREJBOUY0M0FGMUM1RDZENDE5MEEyMTNCNzE1Q0NDQ0Q4ODcwQjIxNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EQkE5RjQzQUYxQzVENkQ0MTkw
QTIxM0I3MTVDQ0NDRDg4NzBCMjE0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby93
N1J1MU5DQ2hUZG9QOTVuakNuZlVaRHc3ZVNpbXYzNFZ6eFoxUm9BYnlNLzAvMzIz
MDMxMmUzMjMxMzgyZTMxMzkzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzcz
MTM2MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAcnavjANBgkqhkiG9w0BAQsFAAOCAQEAiivzfFhf
hjWGQVgd78ywTCDvctdzwH5hy0ELPtITamiRSFPfknkw3VncEHP8OppnWlPoUW9G
Whll/ET4OQmMPlD8FoLB/fc1PzLAre6QGdslwQd0NrJyJgbxZaHvzBjwdeLucqRp
DMQrIMAqVryuHQAdXJlRLUnv2HsSVczJLez1Tp86/h4coobKNLR8JcON4d6xkj1+
lYRcENVCCA7wPOTnPm5BDjXtR6kTDZ82Bp/6UKzttX+U37HZAhkaSROYAQ/YdC/B
TbUF+objB38/5QOuTNfFwX7OlmiTjHgNuOjX2OY5giYRDrRH4z9A5l/+al6OroFW
gGcxAlyF+z5z0w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:17:01 2025 by rpki-client