Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa
File:                     3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa (raw, json)
Hash identifier:          TZd2z8BJvpr3Juo5isXqzkOQfPOMDDn69EcfSV+DDfk=
Subject key identifier:   78:B5:35:B9:0B:BA:8E:3C:D2:24:DF:CA:00:8D:C9:72:83:B0:A7:D1
Certificate issuer:       /CN=76E18684CB0B1A079ED243908D2E3D3D2B78A1AF
Certificate serial:       41D62F2D031B5D24E180E1467D86F927B4773E3A
Authority key identifier: 76:E1:86:84:CB:0B:1A:07:9E:D2:43:90:8D:2E:3D:3D:2B:78:A1:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa
Signing time:             Thu 06 Mar 2025 01:40:29 +0000
ROA not before:           Thu 06 Mar 2025 01:35:29 +0000
ROA not after:            Thu 05 Mar 2026 01:40:29 +0000
asID:                     270264
IP address blocks:        200.108.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d6:2f:2d:03:1b:5d:24:e1:80:e1:46:7d:86:f9:27:b4:77:3e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E18684CB0B1A079ED243908D2E3D3D2B78A1AF
        Validity
            Not Before: Mar  6 01:35:29 2025 GMT
            Not After : Mar  5 01:40:29 2026 GMT
        Subject: CN=78B535B90BBA8E3CD224DFCA008DC97283B0A7D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:36:56:b4:b2:81:05:b1:4b:23:7f:a0:f2:
                    42:89:b5:73:6d:4c:96:1a:fb:91:f6:48:89:86:52:
                    13:f5:d8:7c:a2:5c:7f:68:c2:c2:67:c9:f9:d8:2c:
                    88:1f:27:ed:6d:fd:04:b1:46:5c:6e:67:b4:b8:24:
                    4f:9e:9b:f1:99:2d:7f:eb:95:bc:61:c2:0f:2f:63:
                    a4:81:7e:ff:ac:49:eb:a7:40:5a:25:37:cc:d2:63:
                    bc:38:5c:93:2b:19:2c:e6:60:ab:b5:bf:d6:62:11:
                    5b:d6:b3:c6:0e:9f:b0:5e:1e:51:5d:c9:3c:a2:11:
                    8c:e1:ee:7e:80:63:0a:eb:f7:27:0a:15:98:0c:d2:
                    ea:72:cd:ae:41:d2:65:df:74:42:7b:2a:27:99:d7:
                    df:1c:0f:4d:a3:12:c8:52:53:ff:b7:88:21:cf:ad:
                    4a:f8:98:1f:a5:09:92:53:90:6c:7e:cd:5c:71:3f:
                    2d:10:f0:98:df:39:c6:2a:49:20:a2:e0:74:9f:2d:
                    f5:86:b0:7d:05:1f:d3:67:e4:b7:d7:ce:48:e8:3e:
                    8c:10:29:8f:1c:af:f4:b7:c2:01:1a:73:ff:2b:26:
                    8b:3c:35:99:b4:f1:54:99:ea:3e:97:22:ae:84:ee:
                    a2:d8:ba:62:5c:2e:30:e6:2f:5f:ec:4c:1d:d3:23:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B5:35:B9:0B:BA:8E:3C:D2:24:DF:CA:00:8D:C9:72:83:B0:A7:D1
            X509v3 Authority Key Identifier:
                keyid:76:E1:86:84:CB:0B:1A:07:9E:D2:43:90:8D:2E:3D:3D:2B:78:A1:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:32:bc:43:cb:28:c9:1d:66:2a:59:f6:b1:9d:34:a5:97:dc:
         c5:72:40:7a:ca:a4:ed:4d:27:4d:7d:1a:af:43:2a:e2:ec:42:
         94:be:d3:f4:c5:68:e1:ca:df:cf:fc:1d:fc:98:93:2c:0f:d7:
         48:29:d4:d9:76:4f:4a:f7:50:f7:10:1a:e2:30:44:0b:8c:11:
         8b:db:86:5b:63:fd:46:cf:0c:00:e7:ff:79:5e:bc:8e:4a:53:
         b4:1f:16:24:53:50:83:e9:de:fd:8f:9f:08:75:2c:ce:8b:69:
         98:ca:b7:d3:60:3c:cd:ca:e5:cd:75:63:4f:ba:7a:71:70:3e:
         31:c6:b1:78:fb:56:03:58:d6:2f:2f:f6:3f:e2:d3:23:6f:c6:
         75:78:48:57:1b:a1:e7:09:30:82:75:73:88:16:4a:83:74:00:
         0a:cf:61:3c:62:41:c5:21:7a:6f:03:03:7d:13:fc:11:97:cc:
         9d:96:4c:b2:51:57:e2:2c:e5:29:a7:79:03:21:a9:e7:fc:af:
         d2:fb:ff:19:61:02:c7:26:68:1b:7b:fd:10:ed:8d:56:7e:e8:
         14:77:b9:db:98:4e:ea:96:db:ec:76:92:0a:1d:c3:f8:4f:44:
         89:76:b5:90:31:e2:47:f4:a6:94:23:06:89:08:73:9d:11:44:
         06:09:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:43:03 2025 by rpki-client