Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
File:                     3230312e32302e3134342e302f32302d3234203d3e203238363035.roa (raw, json)
Hash identifier:          Z5BUX1jdXdRq1Pjaz2zZ/XjmSur3GIzNYkEKOXQUTxo=
Subject key identifier:   AE:3C:E6:42:53:FD:6C:64:7B:ED:0C:60:E7:EB:9C:C1:96:BA:98:DF
Certificate issuer:       /CN=8C9729F4127E02F7A44B4F2867186BDE45DBA2DB
Certificate serial:       358FB39AEBF7A3F73F301ABC60891EFB2DF8ADC0
Authority key identifier: 8C:97:29:F4:12:7E:02:F7:A4:4B:4F:28:67:18:6B:DE:45:DB:A2:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
Signing time:             Thu 06 Mar 2025 15:19:16 +0000
ROA not before:           Thu 06 Mar 2025 15:14:16 +0000
ROA not after:            Thu 05 Mar 2026 15:19:16 +0000
asID:                     28605
IP address blocks:        201.20.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8f:b3:9a:eb:f7:a3:f7:3f:30:1a:bc:60:89:1e:fb:2d:f8:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C9729F4127E02F7A44B4F2867186BDE45DBA2DB
        Validity
            Not Before: Mar  6 15:14:16 2025 GMT
            Not After : Mar  5 15:19:16 2026 GMT
        Subject: CN=AE3CE64253FD6C647BED0C60E7EB9CC196BA98DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6e:8b:81:cd:71:80:2d:04:6d:14:69:b9:36:
                    c5:1f:de:3f:19:d8:16:9f:c7:fb:58:9e:30:8c:da:
                    7b:21:01:95:71:2e:47:9b:f4:5f:de:27:c4:e1:53:
                    93:91:17:bd:89:43:1f:60:cd:3d:22:2e:7c:f4:e2:
                    4b:9a:e0:0f:1f:ba:00:23:77:63:fb:bc:22:67:af:
                    be:6b:a1:b2:44:c8:b0:e9:67:83:2a:a3:17:d9:fd:
                    09:31:fb:f3:88:02:dc:a0:b9:ad:a2:06:14:59:f8:
                    77:4b:4b:90:1b:6b:e4:a4:aa:2b:2c:35:bc:f5:ff:
                    be:7d:53:36:98:8a:16:ec:77:4f:5e:fa:ad:b5:e7:
                    07:1c:6e:b2:0d:18:15:5c:27:9e:3a:4e:03:3f:61:
                    1a:f3:34:cb:76:52:e8:88:7a:e4:a8:8f:69:44:e5:
                    5e:f3:81:e3:73:aa:20:d7:dc:34:43:91:65:98:82:
                    2d:cd:f6:b9:07:09:57:08:77:b6:c6:48:d6:b9:57:
                    a2:51:8c:8c:46:a5:33:18:8c:c1:4a:90:3b:91:58:
                    af:dc:21:76:13:11:89:30:27:17:4e:5b:55:11:29:
                    41:6b:96:a0:5f:71:41:1a:dd:5d:dc:b7:88:b7:6b:
                    13:96:0c:08:a7:43:7d:1b:71:15:c7:14:29:ec:01:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3C:E6:42:53:FD:6C:64:7B:ED:0C:60:E7:EB:9C:C1:96:BA:98:DF
            X509v3 Authority Key Identifier:
                keyid:8C:97:29:F4:12:7E:02:F7:A4:4B:4F:28:67:18:6B:DE:45:DB:A2:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c5:5c:59:67:e2:f8:c3:8d:2e:4f:ca:cf:22:0c:fd:87:f6:10:
         b7:f5:70:93:90:20:eb:ff:d5:68:8e:8e:9e:a2:f8:77:ec:aa:
         93:23:b6:51:fe:a4:7d:4e:45:0d:6d:6a:d4:f9:19:d3:67:b3:
         d7:c7:2b:16:02:59:e6:58:ae:f0:32:55:20:ba:4c:3c:07:12:
         0d:1f:c5:14:58:a8:e4:22:28:e0:a1:44:8d:9e:0f:65:71:88:
         24:0c:77:e8:ac:59:fe:4b:e8:0d:f7:31:f3:17:c8:10:48:cb:
         07:b5:b1:41:18:e0:70:21:c1:28:1c:64:9d:27:25:79:71:d4:
         bf:a7:ff:0b:19:c5:15:79:11:8a:44:14:8d:2e:d1:48:1c:e3:
         52:ec:b4:61:22:85:e9:c6:b0:03:6f:d2:40:4f:f5:74:57:b5:
         f0:ae:68:93:29:7f:26:b9:2c:3c:f5:5b:52:52:d8:68:70:fa:
         29:05:a1:ce:41:26:cf:ba:0d:7d:c6:63:3e:de:2d:9e:92:28:
         7f:99:44:57:81:46:b7:82:bd:9a:28:fe:0b:cd:f3:1f:82:6d:
         1c:3f:8b:ce:ef:8b:9b:58:fb:95:8e:f9:17:bc:7d:50:4a:b3:
         e0:27:30:71:69:81:43:76:8a:b0:78:6b:c1:eb:e0:dc:7b:34:
         83:3f:08:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:40:41 2025 by rpki-client