Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38362e302f32342d3234203d3e20323731323938.roa
File:                     3230302e35332e38362e302f32342d3234203d3e20323731323938.roa (raw, json)
Hash identifier:          h8DrUuzS91wZ6Vtj65wBmkGm3ioiEkicKdktOxmEJo4=
Subject key identifier:   DF:23:4B:4F:9E:60:C7:9E:D2:71:65:83:0F:3F:DB:B1:9A:C5:FD:39
Certificate issuer:       /CN=0B7E676BF893065665A524EBE293E999020CF3E1
Certificate serial:       6429BF3336898AC7720FFF742247B45C420238B4
Authority key identifier: 0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38362e302f32342d3234203d3e20323731323938.roa
Signing time:             Tue 30 Jan 2024 19:57:42 +0000
ROA not before:           Tue 30 Jan 2024 19:52:42 +0000
ROA not after:            Tue 28 Jan 2025 19:57:42 +0000
asID:                     271298
IP address blocks:        200.53.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:29:bf:33:36:89:8a:c7:72:0f:ff:74:22:47:b4:5c:42:02:38:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7E676BF893065665A524EBE293E999020CF3E1
        Validity
            Not Before: Jan 30 19:52:42 2024 GMT
            Not After : Jan 28 19:57:42 2025 GMT
        Subject: CN=DF234B4F9E60C79ED27165830F3FDBB19AC5FD39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:d8:9f:56:78:d3:52:cf:f5:fe:bc:e1:c3:
                    43:b6:b5:2b:2f:a1:33:31:4c:99:6a:b3:89:48:80:
                    e4:fe:2b:04:18:26:30:90:23:6b:c5:d1:0f:c0:8a:
                    a4:0a:d1:de:b0:30:a9:f8:3c:f9:af:ea:e2:bc:c3:
                    75:b5:96:c3:de:22:26:1b:01:f2:7e:fa:af:aa:c4:
                    3d:67:53:d4:e4:84:ce:90:fe:6e:64:fa:10:c9:45:
                    db:cd:52:6f:4a:68:97:c7:48:91:4a:f2:79:d1:b5:
                    5c:10:1f:1c:59:70:4f:dd:9f:c5:01:3a:2a:20:81:
                    d9:d4:a4:af:01:4e:a0:58:5b:ac:3d:97:23:cc:f3:
                    c0:0f:90:b4:58:3b:78:8a:5f:ac:c5:e7:f4:90:36:
                    63:91:9b:02:e5:ba:fb:1b:17:a2:6c:a7:c4:a3:ff:
                    90:a3:52:ed:85:5b:9a:b7:51:b9:c2:be:cb:6b:b1:
                    e2:94:8e:38:cb:b8:48:e7:5b:8b:af:f0:3e:a4:0b:
                    dd:a7:c5:53:fa:4c:77:19:37:3a:b3:be:29:15:88:
                    67:40:4c:f0:dc:64:72:b5:7a:2b:a2:2b:26:36:71:
                    f8:e2:ca:8c:15:f4:de:39:06:8c:67:80:28:7c:00:
                    96:d2:63:8b:af:e9:1e:d6:81:2d:e7:c9:bb:6d:e3:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:23:4B:4F:9E:60:C7:9E:D2:71:65:83:0F:3F:DB:B1:9A:C5:FD:39
            X509v3 Authority Key Identifier:
                keyid:0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38362e302f32342d3234203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:21:ee:90:c6:a5:a3:94:68:4d:c2:13:92:11:72:d4:fa:
         95:6b:f6:8d:69:10:d2:cd:57:9f:44:3e:d4:49:65:7f:e3:26:
         1d:96:76:ef:0e:49:24:d9:ea:3f:8e:38:59:29:26:09:f2:54:
         f5:6d:57:90:08:17:24:fb:4c:a8:ab:54:38:11:c2:08:80:9a:
         17:29:57:de:6d:2c:99:d0:76:63:3f:3f:56:26:25:d8:59:43:
         34:80:2c:02:95:91:c0:9f:54:3e:d0:59:2d:1d:85:3f:9e:a5:
         41:63:2d:24:16:fb:85:4a:a8:41:34:4a:43:09:be:94:df:97:
         5b:f0:86:71:07:41:1f:72:b2:07:66:0f:77:f7:d0:b4:0c:51:
         c6:cc:e6:87:37:2d:50:71:f4:7c:0d:d5:3a:d4:00:b7:31:ad:
         30:fd:ae:15:f2:b8:e7:ce:02:d1:80:32:45:d2:b1:b3:0e:4c:
         2c:38:6d:71:c7:f4:6f:b2:56:28:ee:38:56:bb:15:a7:22:aa:
         5f:02:50:0c:94:9f:24:da:8a:5a:36:f0:e4:53:d1:ed:e3:65:
         43:ad:87:bd:1b:9e:3a:0d:35:60:ea:d6:90:e4:73:ce:79:70:
         d3:76:45:d6:6a:a9:dc:0b:da:99:c2:c8:6d:9d:b2:4a:6e:1c:
         2a:de:3d:06
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZCm/MzaJisdyD/90Ike0XEICOLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI3RTY3NkJGODkzMDY1NjY1QTUyNEVCRTI5M0U5OTkw
MjBDRjNFMTAeFw0yNDAxMzAxOTUyNDJaFw0yNTAxMjgxOTU3NDJaMDMxMTAvBgNV
BAMTKERGMjM0QjRGOUU2MEM3OUVEMjcxNjU4MzBGM0ZEQkIxOUFDNUZEMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBtifVnjTUs/1/rzhw0O2tSsv
oTMxTJlqs4lIgOT+KwQYJjCQI2vF0Q/AiqQK0d6wMKn4PPmv6uK8w3W1lsPeIiYb
AfJ++q+qxD1nU9TkhM6Q/m5k+hDJRdvNUm9KaJfHSJFK8nnRtVwQHxxZcE/dn8UB
OioggdnUpK8BTqBYW6w9lyPM88APkLRYO3iKX6zF5/SQNmORmwLluvsbF6Jsp8Sj
/5CjUu2FW5q3UbnCvstrseKUjjjLuEjnW4uv8D6kC92nxVP6THcZNzqzvikViGdA
TPDcZHK1eiuiKyY2cfjiyowV9N45BoxngCh8AJbSY4uv6R7WgS3nybtt4zInAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3yNLT55gx57ScWWDDz/bsZrF/TkwHwYDVR0j
BBgwFoAUC35na/iTBlZlpSTr4pPpmQIM8+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmtTcm1LV1liMXVNU3hOOFVQN016YlVBNUJWZ2dVd1E5QnlQZEhIOGJD
eDYvMC8wQjdFNjc2QkY4OTMwNjU2NjVBNTI0RUJFMjkzRTk5OTAyMENGM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBCN0U2NzZCRjg5MzA2NTY2
NUE1MjRFQkUyOTNFOTk5MDIwQ0YzRTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJrU3JtS1dZYjF1TVN4TjhVUDdNemJVQTVCVmdnVXdROUJ5UGRISDhiQ3g2LzAv
MzIzMDMwMmUzNTMzMmUzODM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzIzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyDVWMA0GCSqGSIb3DQEBCwUAA4IBAQAX9SHukMal
o5RoTcITkhFy1PqVa/aNaRDSzVefRD7USWV/4yYdlnbvDkkk2eo/jjhZKSYJ8lT1
bVeQCBck+0yoq1Q4EcIIgJoXKVfebSyZ0HZjPz9WJiXYWUM0gCwClZHAn1Q+0Fkt
HYU/nqVBYy0kFvuFSqhBNEpDCb6U35db8IZxB0EfcrIHZg9399C0DFHGzOaHNy1Q
cfR8DdU61AC3Ma0w/a4V8rjnzgLRgDJF0rGzDkwsOG1xx/RvslYo7jhWuxWnIqpf
AlAMlJ8k2opaNvDkU9Ht42VDrYe9G546DTVg6taQ5HPOeXDTdkXWaqncC9qZwsht
nbJKbhwq3j0G
-----END CERTIFICATE-----
Generated at Fri May 16 19:39:54 2025 by rpki-client