Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/3230302e3131352e36342e302f32322d3234203d3e20323730383932.roa
File:                     3230302e3131352e36342e302f32322d3234203d3e20323730383932.roa (raw, json)
Hash identifier:          1IiKupawFrFE/PBltkOIgsR/H2jR091CmrUa+zy27mI=
Subject key identifier:   41:E9:A9:1E:9A:1A:E4:C6:B2:C6:B3:3D:BF:78:C4:32:45:0E:81:81
Certificate issuer:       /CN=E496E55B2D7D83B6D801A61DD5F8AF31B0866F38
Certificate serial:       68D2236F128CEF18C1CE40757E325BFB9258D420
Authority key identifier: E4:96:E5:5B:2D:7D:83:B6:D8:01:A6:1D:D5:F8:AF:31:B0:86:6F:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E496E55B2D7D83B6D801A61DD5F8AF31B0866F38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/3230302e3131352e36342e302f32322d3234203d3e20323730383932.roa
Signing time:             Sun 21 Jul 2024 14:50:17 +0000
ROA not before:           Sun 21 Jul 2024 14:45:17 +0000
ROA not after:            Sun 20 Jul 2025 14:50:17 +0000
asID:                     270892
IP address blocks:        200.115.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d2:23:6f:12:8c:ef:18:c1:ce:40:75:7e:32:5b:fb:92:58:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E496E55B2D7D83B6D801A61DD5F8AF31B0866F38
        Validity
            Not Before: Jul 21 14:45:17 2024 GMT
            Not After : Jul 20 14:50:17 2025 GMT
        Subject: CN=41E9A91E9A1AE4C6B2C6B33DBF78C432450E8181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:c1:1f:87:75:f3:f4:be:f7:8e:57:36:67:
                    65:82:80:d9:97:7b:66:4e:fc:cc:87:55:e8:96:e9:
                    66:72:03:09:c6:da:d6:6d:10:f7:7f:13:39:c9:06:
                    c5:6d:4e:8d:2e:cc:b3:73:b0:6d:41:3e:f9:87:5a:
                    ba:50:0c:9b:69:99:15:88:69:85:71:87:f3:f5:a4:
                    99:71:96:b4:bd:cd:5f:de:a5:25:f8:b0:5e:69:b2:
                    a9:5b:00:df:98:93:da:57:c5:92:fa:89:9d:fa:67:
                    a2:ef:50:a6:a5:21:57:98:65:6b:9e:7f:36:4b:bc:
                    a8:25:df:c5:31:59:15:2f:82:3e:68:9e:5d:4c:66:
                    6d:8e:e0:73:22:7f:a5:f5:80:97:b1:4b:71:4d:03:
                    a4:54:05:1d:2b:37:06:6e:9c:d9:73:6c:bc:f3:2e:
                    c6:b4:fc:72:1e:a1:64:cb:6e:0d:ec:58:2e:08:fa:
                    32:48:9e:25:4a:2a:58:44:2c:b8:60:fa:75:11:90:
                    6f:a7:4d:b0:3a:37:cd:6f:1d:3c:be:2d:b5:ce:e2:
                    ff:86:ea:c0:82:41:d9:ef:b8:c1:1c:40:7a:f7:a6:
                    01:20:59:0c:1f:22:fb:8d:2b:aa:2a:09:01:63:e7:
                    b5:6c:9a:40:61:86:28:7a:91:97:d1:ee:53:4f:dc:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E9:A9:1E:9A:1A:E4:C6:B2:C6:B3:3D:BF:78:C4:32:45:0E:81:81
            X509v3 Authority Key Identifier:
                keyid:E4:96:E5:5B:2D:7D:83:B6:D8:01:A6:1D:D5:F8:AF:31:B0:86:6F:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/E496E55B2D7D83B6D801A61DD5F8AF31B0866F38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E496E55B2D7D83B6D801A61DD5F8AF31B0866F38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/3230302e3131352e36342e302f32322d3234203d3e20323730383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:52:7c:28:17:18:67:6f:8e:ea:8e:56:c1:09:db:d8:e8:6c:
         ea:b6:4a:cf:97:2a:81:78:3a:f2:2d:37:5e:9d:11:32:f5:6c:
         cb:d6:dd:b5:3e:a5:77:4b:b2:03:68:b1:5f:54:29:74:0b:8e:
         69:46:13:f4:52:b5:01:0b:e7:9c:22:0d:24:72:37:55:36:0e:
         cb:e4:33:b4:18:ef:56:1d:b7:10:e2:6e:b0:a1:91:31:93:12:
         e0:b9:22:0e:67:6b:69:7b:6b:cf:b5:76:3f:ae:23:21:73:42:
         09:b1:3e:37:ab:69:b0:66:dd:b4:0e:50:72:4f:71:31:64:66:
         93:11:b4:96:74:e9:a6:d9:11:64:6b:c7:89:d3:54:d4:f7:bb:
         e2:c5:80:ee:e5:0e:99:86:cc:af:4e:de:08:df:4b:7d:ca:14:
         5f:74:3f:69:c8:9b:71:22:33:d0:5f:93:ab:72:71:6f:b6:b6:
         b8:b6:41:e8:a8:b2:38:61:6b:56:cb:81:e0:77:43:e6:2c:da:
         4b:e0:9e:c4:99:67:d2:51:92:bf:f5:13:89:4b:a0:75:bd:19:
         2f:02:6c:a8:87:e3:32:ee:8b:c4:c9:4b:50:92:54:5c:e1:77:
         16:9f:48:56:7e:86:bb:98:d7:cf:ee:73:5c:6a:6b:b0:56:0b:
         f6:66:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:07 2025 by rpki-client