Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235332e302f32342d3332203d3e20323731363730.roa
File:                     3230302e3135302e3235332e302f32342d3332203d3e20323731363730.roa (raw, json)
Hash identifier:          5tLnU1wylmNuGqsEgnA7GMyWj95a68Q3sZCYsyP1E+U=
Subject key identifier:   35:A3:4A:7D:62:0B:91:6F:2E:8B:07:79:BC:A8:B5:FA:AF:AE:C8:08
Certificate issuer:       /CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Certificate serial:       04EA2AEBAF4E7A7199E3A13546577051AEBF2A08
Authority key identifier: DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235332e302f32342d3332203d3e20323731363730.roa
Signing time:             Tue 07 Jan 2025 13:28:24 +0000
ROA not before:           Tue 07 Jan 2025 13:23:24 +0000
ROA not after:            Tue 06 Jan 2026 13:28:24 +0000
asID:                     271670
IP address blocks:        200.150.253.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ea:2a:eb:af:4e:7a:71:99:e3:a1:35:46:57:70:51:ae:bf:2a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
        Validity
            Not Before: Jan  7 13:23:24 2025 GMT
            Not After : Jan  6 13:28:24 2026 GMT
        Subject: CN=35A34A7D620B916F2E8B0779BCA8B5FAAFAEC808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:c1:0a:ad:c6:95:36:52:ea:3c:af:5d:d6:
                    70:36:7f:16:7e:ba:2f:2b:a4:d6:63:a9:84:c1:ad:
                    d2:71:44:00:f2:ec:2b:32:06:2b:81:fe:21:27:96:
                    4a:e5:bc:9e:60:01:66:3a:b1:50:f0:7b:4e:55:19:
                    b6:e5:3d:d8:36:4b:16:0b:f6:c5:c9:e5:af:cc:1f:
                    26:38:a1:74:69:81:67:6f:38:dd:5c:cd:e4:6c:20:
                    cf:99:93:42:c2:05:09:a9:25:0c:d6:f3:d9:ad:7f:
                    1d:0d:66:98:41:67:b6:57:2f:2f:42:1d:14:1f:4e:
                    ab:aa:47:68:f3:8a:1e:ef:5a:88:af:bd:00:39:cc:
                    4c:5d:7c:6a:12:81:69:1e:1d:c2:40:99:6c:58:d4:
                    52:f5:20:11:70:52:74:20:79:59:e6:04:ad:2c:8f:
                    e4:43:8e:1d:65:ed:96:18:ac:e7:41:9f:78:a9:23:
                    60:83:55:86:e0:78:cb:85:91:64:3e:d6:e0:9b:ef:
                    ab:7f:2a:19:e4:5f:36:f7:79:90:50:ff:26:49:97:
                    78:1e:b0:53:ec:17:3a:05:56:94:8f:5d:25:26:d6:
                    ce:18:51:65:16:11:fb:51:b0:b2:ee:04:ac:2f:00:
                    36:95:ce:ea:b7:74:e8:7a:f7:ef:a8:21:cd:03:1b:
                    73:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A3:4A:7D:62:0B:91:6F:2E:8B:07:79:BC:A8:B5:FA:AF:AE:C8:08
            X509v3 Authority Key Identifier:
                keyid:DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235332e302f32342d3332203d3e20323731363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:72:80:c0:18:d0:ac:a1:d8:6d:07:19:92:ef:e8:75:50:5a:
         13:f7:67:83:44:99:68:af:7d:df:26:a9:58:ef:5d:80:26:ec:
         6f:88:6c:02:fa:6e:6c:07:0d:e5:48:1c:06:92:ce:48:5c:e5:
         c2:b8:92:a4:a5:97:f7:3a:8d:ae:98:c2:27:03:07:97:40:a1:
         2d:d0:29:b9:e8:b9:de:61:ca:e2:42:dc:ed:70:82:6b:27:6a:
         4c:98:5c:79:29:3a:08:05:22:67:bf:8e:cc:91:1f:5a:fe:cc:
         f7:15:e4:8e:71:02:31:a0:fa:db:2e:e5:b8:1f:45:8b:01:56:
         34:ce:81:37:db:2b:51:52:c7:ef:2d:20:1d:49:70:dc:00:51:
         47:46:e4:a3:0d:53:9c:18:cb:4a:61:9d:20:69:de:ff:36:36:
         4e:8f:5f:8a:20:e1:5c:bd:19:8a:92:ec:c1:c7:fb:bf:a2:51:
         cc:f0:3b:96:e0:11:0b:cb:22:c3:3e:97:eb:32:29:8f:31:60:
         7a:1b:a6:a3:ac:62:70:13:1a:e8:aa:5e:11:54:0e:d2:f7:c0:
         31:cb:b4:12:62:1b:e9:2d:1f:96:f0:6d:55:94:75:88:b9:6f:
         76:ec:67:06:43:a7:92:41:27:c8:73:08:12:96:fe:49:37:f0:
         b8:0d:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:06:22 2025 by rpki-client