Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa
File:                     3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa (raw, json)
Hash identifier:          PbtorWzcok9RqhDQJBK1X2ESqG5akbY/YKEKxPUid14=
Subject key identifier:   A6:6C:45:E4:E7:23:A1:7B:79:21:DE:9A:53:F6:18:F4:7F:0A:FC:D5
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       7C3F1E020AAE8465DFE1AA31EA6054E46862777A
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa
Signing time:             Tue 14 Jan 2025 13:26:16 +0000
ROA not before:           Tue 14 Jan 2025 13:21:16 +0000
ROA not after:            Tue 13 Jan 2026 13:26:16 +0000
asID:                     270815
IP address blocks:        200.229.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3f:1e:02:0a:ae:84:65:df:e1:aa:31:ea:60:54:e4:68:62:77:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:16 2025 GMT
            Not After : Jan 13 13:26:16 2026 GMT
        Subject: CN=A66C45E4E723A17B7921DE9A53F618F47F0AFCD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:c3:88:81:d0:6c:0e:55:7f:b8:6e:e3:1f:
                    a2:3b:09:13:cd:46:22:4e:fd:0e:f9:9b:81:14:84:
                    d6:af:45:80:f1:ac:25:bb:fb:99:35:04:bc:2d:87:
                    f0:b7:55:6a:f0:ff:a6:4e:d1:8b:d1:9f:a6:b8:13:
                    41:3a:d9:9a:24:74:8b:e2:03:b6:2d:19:ca:30:de:
                    40:ab:18:6c:f4:cd:96:4d:72:b5:aa:84:98:d3:49:
                    52:89:17:f3:b2:b9:62:d8:2b:50:1d:a8:a5:48:b4:
                    88:d4:3b:2c:d2:78:d2:aa:5e:97:26:31:5d:11:4b:
                    04:c1:c9:ab:a1:d1:02:51:63:8b:0b:96:91:2d:35:
                    09:6f:1d:4f:a6:f5:d0:4f:f2:79:93:bc:41:f5:86:
                    5b:86:4a:cd:00:82:25:61:4b:7a:34:90:ab:c6:cd:
                    4a:0f:35:f8:bc:41:d8:ab:2b:2d:cb:b3:98:6e:45:
                    25:26:08:29:55:5c:8f:62:d1:82:2d:91:5b:d8:42:
                    30:09:b6:4a:6c:c3:b5:64:6a:4f:f5:99:ba:7b:62:
                    05:39:a0:9f:85:7f:75:95:a2:1c:e3:23:25:04:47:
                    18:1c:54:91:73:3c:21:58:48:7c:17:33:69:5b:61:
                    a1:74:ab:6f:43:c2:4a:0e:30:d5:fc:37:4f:59:d9:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6C:45:E4:E7:23:A1:7B:79:21:DE:9A:53:F6:18:F4:7F:0A:FC:D5
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:54:ad:ee:08:41:b7:f8:17:b2:90:8a:f0:17:dc:b5:10:70:
         26:ba:80:53:3f:ed:dc:53:5a:f6:ba:40:3a:3a:93:4d:2a:12:
         77:9c:ae:e7:7b:ce:2b:fa:f7:ee:50:33:35:a2:79:48:07:63:
         35:7f:16:ff:bf:5a:44:76:05:fc:5a:de:66:67:bf:da:12:9c:
         3a:01:cf:82:c3:37:93:37:1d:c7:4c:0f:bf:73:93:9c:fc:ac:
         2c:79:0b:2c:2f:e9:9a:5a:50:8d:8e:81:03:14:cf:92:29:81:
         34:17:fc:84:ef:c6:8e:33:7c:89:e6:ce:2c:c7:fd:25:cb:6a:
         5c:df:40:7e:2b:aa:5f:2f:49:4e:77:e8:e4:e7:1d:03:0c:da:
         d6:21:17:f4:ef:2c:da:61:51:96:7f:54:f7:4d:bf:cf:ec:87:
         f5:a1:f9:a7:32:71:3b:f0:20:8d:75:60:fa:9d:56:b2:36:06:
         ba:dd:44:aa:39:68:d5:de:40:5f:24:94:aa:df:07:a5:40:5a:
         a5:ab:4b:00:6c:b9:99:20:27:b3:0d:12:e2:db:4a:d5:73:f2:
         5a:a2:83:6f:e4:1b:25:4c:c3:bc:10:7f:76:6f:2a:2c:f1:28:
         d0:3f:84:16:78:20:04:1a:10:a3:59:19:8c:91:fd:68:3f:be:
         0e:b8:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:12:19 2025 by rpki-client