Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          VR7K/2rgKXvhuKsED9+s9eRWknYLtlIWsPQ6/aUaero=
Subject key identifier:   05:AE:4C:BD:04:11:68:9F:34:F5:FA:3A:90:AA:3A:7F:A7:CC:CA:90
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       3389E73D9D75721F5516565B2EB64EE7C0057BA2
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa
Signing time:             Tue 14 Jan 2025 13:26:13 +0000
ROA not before:           Tue 14 Jan 2025 13:21:13 +0000
ROA not after:            Tue 13 Jan 2026 13:26:13 +0000
asID:                     270815
IP address blocks:        200.229.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:89:e7:3d:9d:75:72:1f:55:16:56:5b:2e:b6:4e:e7:c0:05:7b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:13 2025 GMT
            Not After : Jan 13 13:26:13 2026 GMT
        Subject: CN=05AE4CBD0411689F34F5FA3A90AA3A7FA7CCCA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6d:8a:b2:73:c4:f5:99:59:e6:62:3d:c1:e6:
                    4a:59:fc:5c:73:f0:d3:75:bf:6e:3a:a2:0e:45:26:
                    4a:61:4d:fd:9c:2b:bb:d5:36:b3:fa:e3:3d:b5:5b:
                    5d:00:e7:8d:91:34:b4:0c:fd:bf:9e:0e:c5:af:ba:
                    ab:d3:cd:fa:a6:8e:69:d6:73:cf:ae:88:25:a9:d2:
                    9c:63:40:52:90:b7:4c:44:be:83:0f:4b:f3:1c:fd:
                    91:da:87:cb:ca:b9:6d:a6:a2:92:c4:e9:a8:83:af:
                    3e:10:8d:20:96:bc:2b:69:55:65:97:e5:ee:92:07:
                    cb:31:54:30:d6:3f:da:b8:b2:3e:d1:b2:05:b6:14:
                    12:59:3d:1b:ad:8f:b5:15:66:6c:dc:fa:78:6b:54:
                    32:42:21:4c:7b:fc:83:24:e7:ac:8f:fb:69:16:92:
                    dc:64:67:b4:8e:ee:c9:86:1a:c9:ef:5e:59:88:e7:
                    1e:af:12:f8:4e:f1:31:fd:ff:2b:bf:27:f2:b4:5e:
                    87:45:2e:3b:1d:98:c4:67:df:ac:9b:5c:62:9a:27:
                    ca:88:7f:ea:2d:ea:b3:b6:5e:a4:f9:8a:38:35:9b:
                    db:dd:eb:9e:42:f8:25:19:d8:15:52:bc:c1:3e:58:
                    ef:ab:7a:dc:39:d2:e7:81:be:9a:d4:0c:9a:e7:4a:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AE:4C:BD:04:11:68:9F:34:F5:FA:3A:90:AA:3A:7F:A7:CC:CA:90
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:7c:78:8f:03:d5:cb:89:e3:93:19:42:73:eb:96:d3:19:a8:
         26:c7:9a:57:1b:d0:37:71:81:f8:a5:1f:6d:c9:84:e5:7b:14:
         ec:21:37:41:d8:c6:71:2e:0d:a5:3e:5b:76:ff:a5:d0:a8:b3:
         88:b6:97:9c:ad:1d:4a:0b:92:99:f4:cf:c8:46:e7:25:59:be:
         ef:c4:4c:88:1f:91:02:2b:8a:e7:fb:e4:bb:32:6d:27:03:12:
         4f:0d:82:49:cc:48:eb:00:cd:0e:44:33:43:be:82:15:ed:a1:
         1f:dc:a8:ee:85:14:5a:0f:51:f5:87:78:db:05:2c:c8:8a:b8:
         3b:b1:ea:30:dd:78:f2:42:a4:39:e5:ca:21:3e:2c:90:b6:62:
         79:fa:19:7e:a8:79:d5:be:13:f2:89:25:f2:29:c3:fe:da:d3:
         08:4f:07:bd:03:ee:3c:a1:34:69:64:9c:d9:2e:0a:2b:4b:07:
         ed:f9:e4:37:0e:1c:56:b8:82:08:f5:6d:23:ed:9c:b8:98:dd:
         9f:be:26:5e:07:d0:78:be:65:d9:95:f8:b2:08:2c:9e:68:01:
         f1:f7:4c:ee:6a:4f:f7:82:8a:20:cd:73:95:54:d3:2a:3c:fe:
         7a:e1:e7:ca:25:36:14:9c:22:b8:f0:56:89:3a:37:02:42:90:
         92:da:c2:d1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUM4nnPZ11ch9VFlZbLrZO58AFe6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JCNjY0MTVENzExREI0MDE3MDRCNUE1QTMxNUMyMDJD
QjhBRjg2MzAeFw0yNTAxMTQxMzIxMTNaFw0yNjAxMTMxMzI2MTNaMDMxMTAvBgNV
BAMTKDA1QUU0Q0JEMDQxMTY4OUYzNEY1RkEzQTkwQUEzQTdGQTdDQ0NBOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjbYqyc8T1mVnmYj3B5kpZ/Fxz
8NN1v246og5FJkphTf2cK7vVNrP64z21W10A542RNLQM/b+eDsWvuqvTzfqmjmnW
c8+uiCWp0pxjQFKQt0xEvoMPS/Mc/ZHah8vKuW2mopLE6aiDrz4QjSCWvCtpVWWX
5e6SB8sxVDDWP9q4sj7RsgW2FBJZPRutj7UVZmzc+nhrVDJCIUx7/IMk56yP+2kW
ktxkZ7SO7smGGsnvXlmI5x6vEvhO8TH9/yu/J/K0XodFLjsdmMRn36ybXGKaJ8qI
f+ot6rO2XqT5ijg1m9vd655C+CUZ2BVSvME+WO+retw50ueBvprUDJrnSg8bAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBa5MvQQRaJ809fo6kKo6f6fMypAwHwYDVR0j
BBgwFoAUe7ZkFdcR20AXBLWloxXCAsuK+GMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC83QkI2NjQxNUQ3MTFEQjQwMTcwNEI1QTVBMzE1QzIwMkNCOEFGODYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCQjY2NDE1RDcxMURCNDAx
NzA0QjVBNUEzMTVDMjAyQ0I4QUY4NjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM4MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMjl9jANBgkqhkiG9w0BAQsFAAOCAQEAL3x4
jwPVy4njkxlCc+uW0xmoJseaVxvQN3GB+KUfbcmE5XsU7CE3QdjGcS4NpT5bdv+l
0KiziLaXnK0dSguSmfTPyEbnJVm+78RMiB+RAiuK5/vkuzJtJwMSTw2CScxI6wDN
DkQzQ76CFe2hH9yo7oUUWg9R9Yd42wUsyIq4O7HqMN148kKkOeXKIT4skLZiefoZ
fqh51b4T8okl8inD/trTCE8HvQPuPKE0aWSc2S4KK0sH7fnkNw4cVriCCPVtI+2c
uJjdn74mXgfQeL5l2ZX4sggsnmgB8fdM7mpP94KKIM1zlVTTKjz+euHnyiU2FJwi
uPBWiTo3AkKQktrC0Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:10:15 2025 by rpki-client