Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa
File:                     3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (raw, json)
Hash identifier:          E2EgOvFloTqG59AJrY+JQStHr3UQAZEdELk7xf4ZWkw=
Subject key identifier:   4D:9F:00:C6:2F:1D:A2:8E:07:AE:06:E6:BB:53:AD:E6:BD:8D:88:EE
Certificate issuer:       /CN=1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76
Certificate serial:       737049B018BA5C9467FE19C4E5F698EA25634CBF
Authority key identifier: 1A:B5:4A:4F:05:4E:3B:FD:78:8B:DC:45:FF:1B:6C:77:39:BB:9D:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa
Signing time:             Tue 21 Jan 2025 20:53:56 +0000
ROA not before:           Tue 21 Jan 2025 20:48:56 +0000
ROA not after:            Tue 20 Jan 2026 20:53:56 +0000
asID:                     11432
IP address blocks:        200.170.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:70:49:b0:18:ba:5c:94:67:fe:19:c4:e5:f6:98:ea:25:63:4c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76
        Validity
            Not Before: Jan 21 20:48:56 2025 GMT
            Not After : Jan 20 20:53:56 2026 GMT
        Subject: CN=4D9F00C62F1DA28E07AE06E6BB53ADE6BD8D88EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f2:19:17:44:04:80:62:24:0c:7c:fa:11:41:
                    87:2c:dd:57:29:01:1e:1b:96:c7:d3:75:cf:54:67:
                    a7:d8:da:d5:46:c0:94:99:cd:33:1f:90:02:10:43:
                    b4:83:65:e0:d8:4c:0d:63:90:1b:e3:59:c3:9f:1d:
                    bc:0a:7b:1f:2b:3d:53:4f:f2:35:ab:04:58:45:a4:
                    14:fe:e6:85:77:c6:98:ec:3e:16:2e:2e:fa:3d:e7:
                    ad:57:30:28:f7:45:27:2f:ea:5f:c2:51:73:3d:54:
                    05:bc:03:5a:c2:d1:7c:65:1c:91:d0:8e:6c:80:52:
                    9b:d4:ff:99:4b:27:d0:b3:de:83:b0:34:e4:8e:70:
                    7f:18:4f:ea:86:44:b1:d1:68:bf:38:84:ef:a8:88:
                    47:eb:7f:33:79:0c:b0:47:fb:69:9a:f4:e0:b5:86:
                    95:ab:3f:3c:04:1e:dc:7f:f3:88:76:31:0c:46:f1:
                    89:15:da:28:c1:95:46:62:10:07:d6:a8:67:12:09:
                    ee:eb:ef:20:64:7c:e3:4e:e3:d3:48:bd:e7:5e:06:
                    ce:c0:84:8f:c1:c7:f9:76:34:40:42:1f:38:b4:cb:
                    f5:3d:c3:6b:f0:73:4b:46:5c:5d:71:7c:f8:a6:63:
                    41:c3:35:16:c9:6d:62:fd:7f:79:dc:e8:62:72:5c:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9F:00:C6:2F:1D:A2:8E:07:AE:06:E6:BB:53:AD:E6:BD:8D:88:EE
            X509v3 Authority Key Identifier:
                keyid:1A:B5:4A:4F:05:4E:3B:FD:78:8B:DC:45:FF:1B:6C:77:39:BB:9D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a8:b0:d3:90:34:6a:da:40:7c:cd:0f:b4:e5:ca:be:5e:7b:55:
         4a:62:ac:a3:18:7a:51:be:dd:cc:ba:ec:f4:24:4c:c6:dc:76:
         6b:14:53:35:c0:f1:87:a4:d0:a5:8b:e8:47:ca:d3:ee:e5:bb:
         9e:34:d9:d7:8d:61:de:12:ee:b5:e4:ce:05:a9:d6:e3:ee:72:
         13:97:32:b2:05:83:58:f0:13:cd:67:2b:83:15:fd:6f:66:bb:
         55:e1:60:22:ab:2d:c5:6a:cd:6f:28:ac:95:ac:0e:ef:ef:2d:
         fa:d4:cf:66:9e:0a:2e:ec:db:19:3b:59:fd:d2:a3:63:8c:06:
         7c:24:3b:76:da:36:67:76:3f:63:c6:87:dd:8a:c7:b0:13:68:
         32:32:01:69:16:e8:23:65:fd:b0:c1:90:51:25:ac:9e:4b:eb:
         d0:f2:9c:cb:23:c6:17:ff:06:d5:2e:9b:6d:3e:8b:0a:40:f9:
         e1:b2:8e:78:4f:73:98:4b:a3:88:af:3a:af:66:38:a8:1e:65:
         2a:16:0b:ab:e7:9f:ec:49:f6:9d:bd:bd:14:7b:11:1a:32:3c:
         51:65:f2:7e:18:80:ec:15:78:ec:0a:b6:e9:b1:73:67:89:0d:
         bd:75:cd:3e:fb:27:32:61:a8:f2:0d:01:16:d0:2b:09:ce:8c:
         f7:4a:b3:d9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc3BJsBi6XJRn/hnE5faY6iVjTL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFCNTRBNEYwNTRFM0JGRDc4OEJEQzQ1RkYxQjZDNzcz
OUJCOUQ3NjAeFw0yNTAxMjEyMDQ4NTZaFw0yNjAxMjAyMDUzNTZaMDMxMTAvBgNV
BAMTKDREOUYwMEM2MkYxREEyOEUwN0FFMDZFNkJCNTNBREU2QkQ4RDg4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe8hkXRASAYiQMfPoRQYcs3Vcp
AR4blsfTdc9UZ6fY2tVGwJSZzTMfkAIQQ7SDZeDYTA1jkBvjWcOfHbwKex8rPVNP
8jWrBFhFpBT+5oV3xpjsPhYuLvo9561XMCj3RScv6l/CUXM9VAW8A1rC0XxlHJHQ
jmyAUpvU/5lLJ9Cz3oOwNOSOcH8YT+qGRLHRaL84hO+oiEfrfzN5DLBH+2ma9OC1
hpWrPzwEHtx/84h2MQxG8YkV2ijBlUZiEAfWqGcSCe7r7yBkfONO49NIvedeBs7A
hI/Bx/l2NEBCHzi0y/U9w2vwc0tGXF1xfPimY0HDNRbJbWL9f3nc6GJyXHvrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTZ8Axi8doo4Hrgbmu1Ot5r2NiO4wHwYDVR0j
BBgwFoAUGrVKTwVOO/14i9xF/xtsdzm7nXYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQ
alMvMC8xQUI1NEE0RjA1NEUzQkZENzg4QkRDNDVGRjFCNkM3NzM5QkI5RDc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBQjU0QTRGMDU0RTNCRkQ3
ODhCREM0NUZGMUI2Qzc3MzlCQjlENzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAv
MzIzMDMwMmUzMTM3MzAyZTMxMzkzMjJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMx
MzEzNDMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAbIqsAwDQYJKoZIhvcNAQELBQADggEBAKiw05A0
atpAfM0PtOXKvl57VUpirKMYelG+3cy67PQkTMbcdmsUUzXA8Yek0KWL6EfK0+7l
u5402deNYd4S7rXkzgWp1uPuchOXMrIFg1jwE81nK4MV/W9mu1XhYCKrLcVqzW8o
rJWsDu/vLfrUz2aeCi7s2xk7Wf3So2OMBnwkO3baNmd2P2PGh92Kx7ATaDIyAWkW
6CNl/bDBkFElrJ5L69DynMsjxhf/BtUum20+iwpA+eGyjnhPc5hLo4ivOq9mOKge
ZSoWC6vnn+xJ9p29vRR7ERoyPFFl8n4YgOwVeOwKtumxc2eJDb11zT77JzJhqPIN
ARbQKwnOjPdKs9k=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:36:19 2025 by rpki-client