Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36372e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          K8Z/uLmhVYmNa70dcqygirf8FzXHOZ+EDQ3NKYkQCAA=
Subject key identifier:   E3:B9:96:BC:64:42:1F:BA:AE:8E:98:6C:9E:4A:C0:51:90:B9:18:C4
Certificate issuer:       /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial:       1E07966FEE8DDE08F2A21DB8930EA4D3A7AC5561
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa
Signing time:             Tue 21 Jan 2025 20:44:46 +0000
ROA not before:           Tue 21 Jan 2025 20:39:46 +0000
ROA not after:            Tue 20 Jan 2026 20:44:46 +0000
asID:                     271504
IP address blocks:        200.53.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:07:96:6f:ee:8d:de:08:f2:a2:1d:b8:93:0e:a4:d3:a7:ac:55:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
        Validity
            Not Before: Jan 21 20:39:46 2025 GMT
            Not After : Jan 20 20:44:46 2026 GMT
        Subject: CN=E3B996BC64421FBAAE8E986C9E4AC05190B918C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2e:43:c0:25:e4:a2:38:e7:76:a7:33:a7:b2:
                    22:db:53:74:72:9c:92:c5:d4:82:a1:70:3b:7d:a0:
                    d2:db:86:6e:8d:44:b8:69:d7:c5:13:c3:43:57:fc:
                    be:1d:d7:6f:7d:31:34:99:8f:e8:9b:cd:d2:e0:56:
                    a3:1d:01:a8:d2:07:ff:0b:c4:04:78:60:1b:0e:c1:
                    a3:74:06:e5:94:28:e1:b3:ae:aa:b6:5f:24:16:ba:
                    99:9e:f3:2c:35:6c:e1:e6:78:68:fb:dc:62:3a:88:
                    64:41:4e:f9:5c:18:b2:5c:12:4d:49:7f:cc:9b:c4:
                    c4:91:a4:d3:73:a2:1d:01:57:8f:5f:4f:bf:19:90:
                    f4:4b:a2:54:68:47:77:97:ec:8a:16:f2:8a:51:74:
                    33:c7:6a:4f:34:fc:07:64:74:d3:40:f7:6b:f7:81:
                    47:ac:32:3f:5d:a8:d5:71:23:af:24:a1:e9:9b:4b:
                    19:67:99:d5:4b:c1:8b:4c:f9:59:12:e6:22:ce:5b:
                    08:1b:b1:1e:46:70:52:f6:e2:2a:69:b9:2d:de:16:
                    96:55:35:94:6f:c6:3c:7d:fa:79:20:9e:08:7c:9e:
                    56:b6:38:eb:bb:9e:cc:4a:ac:fe:9a:da:9c:5a:04:
                    58:38:2b:91:b6:a8:a4:a0:f4:86:a9:d5:0f:79:6a:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B9:96:BC:64:42:1F:BA:AE:8E:98:6C:9E:4A:C0:51:90:B9:18:C4
            X509v3 Authority Key Identifier:
                keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:1c:66:1f:2e:dc:ca:9f:cd:68:53:6a:5e:ba:be:7e:81:
         37:1b:66:1b:54:e6:fd:b9:33:b8:05:d9:24:c7:25:56:48:a3:
         0e:51:29:c8:57:e8:54:f3:1c:06:c1:57:ac:af:85:12:9d:f7:
         a0:06:6e:4a:02:fc:7a:f8:cd:a2:4e:ec:e0:e3:52:fd:c8:a5:
         84:26:9f:bb:9e:11:73:2d:41:eb:e8:97:6d:c0:c4:17:7a:7d:
         f3:38:a9:70:c9:2c:96:1f:95:71:64:a0:93:55:01:0d:c5:3d:
         8a:15:7c:13:7e:0e:a6:54:23:d9:2d:b9:61:a1:6d:f9:21:15:
         81:e1:af:3b:8c:b5:06:57:b3:19:ec:ee:e1:ef:27:af:91:76:
         a8:51:3a:49:59:cc:19:d7:42:7d:ef:bf:91:75:d7:56:b3:74:
         e1:9f:3b:32:c5:06:10:e9:45:7b:fe:a0:6a:02:d9:2f:f6:3b:
         89:78:f1:7d:92:cd:c0:a6:92:94:42:b5:ba:e0:e2:57:12:7d:
         7d:4f:93:f3:e1:cc:73:d4:60:ef:0d:77:84:b4:3b:63:ea:62:
         13:c7:fe:fd:cf:3f:53:66:e5:5d:38:75:a4:f7:8c:b5:30:de:
         37:58:41:ae:ab:14:b6:23:f4:d3:f0:06:ca:e7:03:b6:7c:f0:
         16:8d:99:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:16:21 2025 by rpki-client