Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          8TR0EPtvbRJWspPIPUVxoufiN7aRpGvwx8HI69wGiHA=
Subject key identifier:   BD:13:F2:FC:C1:02:A8:4A:16:D7:84:1E:D0:81:13:0B:A9:B1:EF:70
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       45BA460A59D3AA944EB00A04A23172632CD53A75
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa
Signing time:             Tue 14 Jan 2025 13:26:14 +0000
ROA not before:           Tue 14 Jan 2025 13:21:14 +0000
ROA not after:            Tue 13 Jan 2026 13:26:14 +0000
asID:                     270815
IP address blocks:        200.229.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ba:46:0a:59:d3:aa:94:4e:b0:0a:04:a2:31:72:63:2c:d5:3a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:14 2025 GMT
            Not After : Jan 13 13:26:14 2026 GMT
        Subject: CN=BD13F2FCC102A84A16D7841ED081130BA9B1EF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:23:e4:b6:b0:ff:a1:b2:8b:5a:a4:8c:16:
                    01:3a:08:79:26:ae:84:95:00:0f:51:59:1c:6e:9a:
                    7e:54:8c:28:91:23:ae:bf:8d:c4:80:a7:c7:95:ea:
                    fb:f3:6c:12:c6:e4:9c:87:12:11:63:f0:1f:e5:ce:
                    1e:aa:91:26:8c:40:21:68:04:72:d9:11:28:e8:4b:
                    dc:3d:b9:20:63:2f:96:77:a4:2d:f8:d2:9b:b8:fb:
                    4c:e8:40:f0:09:bb:5e:ff:85:27:92:dc:67:c7:60:
                    ae:3a:fe:f3:c2:e2:97:94:c3:73:74:fb:99:d2:76:
                    6f:fc:c1:22:94:39:ad:89:d4:09:f6:7e:eb:9b:75:
                    f3:8f:68:23:59:80:eb:be:1b:0d:4b:fb:2d:2a:ef:
                    c5:82:46:ea:b6:a7:29:6b:51:b9:0d:f4:c9:ec:8b:
                    ef:6d:bd:46:6c:d3:8d:0a:fe:e1:78:c4:62:36:10:
                    dc:64:c3:a8:3b:81:50:47:62:f4:54:97:a7:90:62:
                    9c:e2:3a:c9:ca:70:48:95:42:19:4a:d6:f4:ba:c2:
                    30:74:28:6d:6d:ea:05:3e:72:f7:c1:6b:b4:82:35:
                    34:69:4b:01:ed:9a:76:ff:e5:84:aa:e8:bc:84:fa:
                    ac:e5:52:b4:04:7b:0a:e1:b0:87:5e:fc:dd:bb:6d:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:13:F2:FC:C1:02:A8:4A:16:D7:84:1E:D0:81:13:0B:A9:B1:EF:70
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:95:96:44:27:dd:f6:5a:f4:e8:7c:27:d7:cb:c0:7f:dd:f3:
         20:6b:39:f4:f0:f1:7c:77:f5:3a:7f:42:54:62:ee:a8:df:20:
         28:54:c3:e3:88:63:6d:2a:ad:d2:fe:3e:df:94:dd:f1:a5:23:
         8f:03:73:87:c4:3b:aa:32:45:b7:98:bc:79:d7:08:2a:6b:7b:
         50:9d:4c:db:32:51:40:76:48:ea:33:5f:43:98:bd:d0:0d:fb:
         04:3e:d7:6a:a0:a0:3d:6a:b1:46:68:eb:b4:c5:dd:57:be:f7:
         16:2c:87:f4:ef:03:a9:63:95:c8:39:97:f3:03:67:bf:1a:97:
         ee:f5:bc:41:3b:ba:bf:11:23:e7:f0:cc:57:44:a2:1e:e0:b0:
         50:0b:ab:e3:6b:72:ef:8d:c5:7b:7a:f1:61:c8:81:f1:44:ba:
         20:22:57:47:e3:fe:e7:c9:82:70:3a:ba:73:a8:1b:08:71:f1:
         2a:ce:7f:42:fe:c8:eb:e2:1d:98:cb:54:f5:3f:8a:ba:30:44:
         77:2d:b8:ee:ce:4d:83:6a:7a:18:12:0e:67:60:83:9b:14:a6:
         24:00:44:1a:82:39:2c:16:20:e2:51:6f:f4:af:ab:9a:8e:66:
         fa:77:2c:e5:93:bc:0f:09:d3:22:82:44:55:cc:e3:2d:7e:53:
         3e:d2:85:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:13:13 2025 by rpki-client