Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130372e302f32342d3234203d3e20323730343532.roa
File:                     3230302e37312e3130372e302f32342d3234203d3e20323730343532.roa (raw, json)
Hash identifier:          Eixv3OSIK/D6p7tVp7wfz9CSkU0rnP4j7JVx9Te3jPc=
Subject key identifier:   F6:B6:47:61:05:A6:A4:59:30:32:24:4C:1D:07:9C:8F:37:8F:A6:80
Certificate issuer:       /CN=33E1E61B84252FD68E843A85B994ECA6425F8953
Certificate serial:       7ED0124284D9D27B98F5B2E8FE6DE7FA6E45BD1F
Authority key identifier: 33:E1:E6:1B:84:25:2F:D6:8E:84:3A:85:B9:94:EC:A6:42:5F:89:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33E1E61B84252FD68E843A85B994ECA6425F8953.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130372e302f32342d3234203d3e20323730343532.roa
Signing time:             Tue 06 Sep 2022 14:58:29 +0000
ROA not before:           Tue 06 Sep 2022 14:53:29 +0000
ROA not after:            Tue 05 Sep 2023 14:58:29 +0000
asID:                     270452
IP address blocks:        200.71.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d0:12:42:84:d9:d2:7b:98:f5:b2:e8:fe:6d:e7:fa:6e:45:bd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33E1E61B84252FD68E843A85B994ECA6425F8953
        Validity
            Not Before: Sep  6 14:53:29 2022 GMT
            Not After : Sep  5 14:58:29 2023 GMT
        Subject: CN=F6B6476105A6A4593032244C1D079C8F378FA680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:a6:4d:dc:65:39:81:73:c6:6c:4e:d3:e7:
                    64:46:4f:3c:fd:2d:08:e8:df:f4:ea:a4:a6:fa:ce:
                    69:70:92:7b:2a:65:d2:1b:c4:8e:06:2a:ab:29:ed:
                    80:1a:a2:fb:80:5d:98:4b:a9:46:0e:03:06:c5:b6:
                    57:08:9e:3c:d0:1f:e3:e8:6d:5b:3d:c0:be:6f:b3:
                    19:3f:17:c6:ef:1d:ff:c5:8b:fe:31:6f:7f:4b:2b:
                    c1:92:a5:1c:69:a8:73:63:56:19:a8:a8:86:a2:15:
                    c0:79:f5:0e:c8:3b:57:e1:f4:38:59:02:58:31:f3:
                    bb:c3:7c:f7:3b:cb:57:6c:f3:26:a8:14:03:16:00:
                    14:c6:a7:1e:b6:57:1a:27:99:af:db:22:9e:e1:2a:
                    0a:7d:a1:58:3e:ef:54:86:48:90:2a:38:a5:c4:a5:
                    0e:70:97:57:f3:64:fd:fc:cf:49:39:62:cc:b8:3f:
                    0f:8f:91:a7:86:c2:9a:74:74:15:a5:a7:75:c7:d2:
                    be:46:83:34:34:f0:42:dc:86:ee:9c:ce:57:b0:4b:
                    31:c2:dc:ab:6b:10:2a:fe:ca:70:d2:89:08:93:31:
                    13:42:33:bb:9a:1a:d0:e0:e0:8d:ee:ad:5a:16:59:
                    dd:e9:cd:be:41:47:2b:eb:e4:db:74:f0:73:b4:01:
                    bc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B6:47:61:05:A6:A4:59:30:32:24:4C:1D:07:9C:8F:37:8F:A6:80
            X509v3 Authority Key Identifier:
                keyid:33:E1:E6:1B:84:25:2F:D6:8E:84:3A:85:B9:94:EC:A6:42:5F:89:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/33E1E61B84252FD68E843A85B994ECA6425F8953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33E1E61B84252FD68E843A85B994ECA6425F8953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130372e302f32342d3234203d3e20323730343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b6:9d:49:6a:8f:82:92:f4:d8:9e:79:66:43:a2:2a:0c:f4:
         6f:72:fd:48:85:5e:08:a1:3d:ed:a9:f4:16:62:14:30:88:d8:
         34:67:3e:99:5f:78:76:2a:ce:40:aa:77:56:77:af:09:c2:4e:
         c8:58:e4:ae:6e:bb:16:d3:2a:5f:c6:28:48:39:98:9e:2d:4e:
         45:fe:a0:6f:19:ac:55:c1:cc:7d:d1:de:bd:e4:ec:98:67:6c:
         39:76:db:f9:f7:24:ea:66:cc:dd:b7:dc:37:0a:08:8f:71:c9:
         6a:51:6f:be:54:e3:c4:f4:49:a6:be:60:3f:8a:76:15:f6:77:
         61:11:ff:1c:d2:6b:8e:d7:c9:14:6c:0c:f8:6c:1c:98:17:45:
         9f:9c:4e:da:46:5b:52:97:aa:20:32:33:e5:6c:d2:ae:a1:47:
         89:13:0d:d5:f7:ae:a4:b0:05:a7:9a:a0:f2:0d:67:17:93:94:
         d2:21:3f:a0:74:6c:ab:8f:eb:0b:4b:c3:b3:1b:a0:ec:38:0d:
         05:ff:1d:cc:97:34:29:f0:bf:86:11:29:0d:74:97:51:5d:62:
         07:a2:c5:a6:bc:1d:e7:13:91:a5:fb:41:da:1c:c9:45:6e:fa:
         cd:9b:03:4a:c2:cf:1e:21:a9:f1:68:62:c4:df:4d:e9:34:62:
         8e:f5:5d:0f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUftASQoTZ0nuY9bLo/m3n+m5FvR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNFMUU2MUI4NDI1MkZENjhFODQzQTg1Qjk5NEVDQTY0
MjVGODk1MzAeFw0yMjA5MDYxNDUzMjlaFw0yMzA5MDUxNDU4MjlaMDMxMTAvBgNV
BAMTKEY2QjY0NzYxMDVBNkE0NTkzMDMyMjQ0QzFEMDc5QzhGMzc4RkE2ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbaZN3GU5gXPGbE7T52RGTzz9
LQjo3/TqpKb6zmlwknsqZdIbxI4GKqsp7YAaovuAXZhLqUYOAwbFtlcInjzQH+Po
bVs9wL5vsxk/F8bvHf/Fi/4xb39LK8GSpRxpqHNjVhmoqIaiFcB59Q7IO1fh9DhZ
Algx87vDfPc7y1ds8yaoFAMWABTGpx62Vxonma/bIp7hKgp9oVg+71SGSJAqOKXE
pQ5wl1fzZP38z0k5Ysy4Pw+PkaeGwpp0dBWlp3XH0r5GgzQ08ELchu6czlewSzHC
3KtrECr+ynDSiQiTMRNCM7uaGtDg4I3urVoWWd3pzb5BRyvr5Nt08HO0AbzJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9rZHYQWmpFkwMiRMHQecjzePpoAwHwYDVR0j
BBgwFoAUM+HmG4QlL9aOhDqFuZTspkJfiVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkVhdktQMWdQMjZib0JIR2lBUUNiWWhLUlJVU0N0blFuVjFmZURoTTQ2
OHgvMC8zM0UxRTYxQjg0MjUyRkQ2OEU4NDNBODVCOTk0RUNBNjQyNUY4OTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzRTFFNjFCODQyNTJGRDY4
RTg0M0E4NUI5OTRFQ0E2NDI1Rjg5NTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFYXZLUDFnUDI2Ym9CSEdpQVFDYlloS1JSVVNDdG5RblYxZmVEaE00Njh4LzAv
MzIzMDMwMmUzNzMxMmUzMTMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIR2swDQYJKoZIhvcNAQELBQADggEBAFa2nUlq
j4KS9NieeWZDoioM9G9y/UiFXgihPe2p9BZiFDCI2DRnPplfeHYqzkCqd1Z3rwnC
TshY5K5uuxbTKl/GKEg5mJ4tTkX+oG8ZrFXBzH3R3r3k7JhnbDl22/n3JOpmzN23
3DcKCI9xyWpRb75U48T0Saa+YD+KdhX2d2ER/xzSa47XyRRsDPhsHJgXRZ+cTtpG
W1KXqiAyM+Vs0q6hR4kTDdX3rqSwBaeaoPINZxeTlNIhP6B0bKuP6wtLw7MboOw4
DQX/HcyXNCnwv4YRKQ10l1FdYgeixaa8HecTkaX7QdocyUVu+s2bA0rCzx4hqfFo
YsTfTek0Yo71XQ8=
-----END CERTIFICATE-----
Generated at Fri Jun 20 17:41:18 2025 by rpki-client