Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235342e302f32342d3332203d3e20323731363730.roa
File:                     3230302e3135302e3235342e302f32342d3332203d3e20323731363730.roa (raw, json)
Hash identifier:          1CUcyryYuj7WKi3goNSFbT57Al8odh8XdxTiiaz5Wzk=
Subject key identifier:   1B:72:16:CC:41:8E:F2:E7:C4:C8:E1:C9:4C:4C:A0:DA:17:CD:17:B9
Certificate issuer:       /CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Certificate serial:       48D53DF60E18AA1981D185B7C9E5E6FCDD71E96E
Authority key identifier: DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235342e302f32342d3332203d3e20323731363730.roa
Signing time:             Tue 07 Jan 2025 13:28:29 +0000
ROA not before:           Tue 07 Jan 2025 13:23:29 +0000
ROA not after:            Tue 06 Jan 2026 13:28:29 +0000
asID:                     271670
IP address blocks:        200.150.254.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d5:3d:f6:0e:18:aa:19:81:d1:85:b7:c9:e5:e6:fc:dd:71:e9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
        Validity
            Not Before: Jan  7 13:23:29 2025 GMT
            Not After : Jan  6 13:28:29 2026 GMT
        Subject: CN=1B7216CC418EF2E7C4C8E1C94C4CA0DA17CD17B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:ec:6b:58:ee:da:72:f0:9f:36:8b:0e:ce:
                    15:06:9f:71:4a:d9:b1:b7:ed:d8:a6:5d:c4:9e:5a:
                    be:67:d9:2f:74:1f:5b:95:7d:12:6e:06:ec:33:5a:
                    8a:4d:c0:67:14:0f:eb:58:38:ee:74:ce:fa:36:74:
                    2e:f9:49:85:59:bf:04:96:6e:b6:89:66:06:ad:80:
                    e4:29:16:8c:6d:89:63:f2:32:69:5a:c3:95:f6:82:
                    6d:a5:2f:9a:2a:b9:b2:6e:30:a5:b4:ae:66:9a:ad:
                    89:5f:1c:b5:47:76:c4:ea:3e:7c:d8:38:3f:2f:5d:
                    25:28:99:0c:25:98:a0:5f:db:f9:e6:60:ea:ac:c8:
                    12:b7:06:f5:12:8c:dc:19:6b:2a:e3:06:37:23:c9:
                    19:04:32:09:07:63:4a:2e:19:59:3d:b7:28:0c:8e:
                    2c:20:d6:b5:70:df:1b:e3:7c:4d:58:9d:bc:66:8a:
                    e8:a1:7b:86:99:f2:94:4c:4c:4b:45:e8:fc:4e:8e:
                    cb:65:2d:53:fa:25:3e:73:1c:d1:08:0a:89:16:6e:
                    33:51:b3:a6:8c:8d:7c:17:97:4f:bc:53:13:77:7c:
                    03:ca:75:3f:35:0d:94:4c:ed:07:b6:21:12:70:b5:
                    fa:3e:49:52:eb:be:da:71:a9:3f:f7:f2:e5:84:60:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:72:16:CC:41:8E:F2:E7:C4:C8:E1:C9:4C:4C:A0:DA:17:CD:17:B9
            X509v3 Authority Key Identifier:
                keyid:DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235342e302f32342d3332203d3e20323731363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:df:3b:bb:04:a5:d5:81:6e:68:74:08:09:f8:44:85:d4:d8:
         fd:7b:cf:8c:40:2a:99:10:d6:17:0c:11:cd:fd:9e:85:1e:30:
         55:81:f3:c0:8a:c8:61:1f:bc:75:06:0b:98:25:06:f4:44:78:
         98:9b:9e:44:c3:f3:43:8f:42:b1:d3:6a:a1:e8:5f:58:49:70:
         07:bc:74:14:d9:58:46:76:0a:64:e6:65:37:28:da:08:e7:6c:
         0d:2a:eb:81:2e:ef:f3:25:f9:55:67:fa:8e:02:e3:60:c8:88:
         69:91:04:61:c3:23:83:ca:a7:87:e6:cd:c5:ce:c8:1a:e6:87:
         75:a2:c8:4f:3d:ba:b8:dd:d1:ac:19:93:c7:02:55:ac:d9:40:
         f0:56:17:be:29:a2:6c:7e:19:25:42:ec:ca:85:c6:2c:53:0d:
         8e:3c:d7:1c:f0:90:08:ec:c6:1d:71:0e:5d:54:57:f6:0d:ca:
         5b:3a:63:e9:19:75:7a:00:88:ba:ba:09:28:0f:e2:af:e3:2e:
         88:ad:52:03:2f:e4:d0:3a:0b:df:36:ce:13:69:4f:0d:13:0f:
         e8:ca:cb:0c:38:52:fb:b8:a3:d7:1c:f5:60:c6:0e:b7:41:99:
         9c:26:96:57:14:23:3e:45:50:ba:2a:bd:7b:ce:ad:53:c8:96:
         10:d2:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:55:26 2025 by rpki-client