Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/3230302e362e34392e302f32342d3234203d3e20323730363831.roa
File:                     3230302e362e34392e302f32342d3234203d3e20323730363831.roa (raw, json)
Hash identifier:          +p8i7J3VPTh1IJ4Tq4DUGMOhEjJzo+ng5zT2g/hYRbE=
Subject key identifier:   CB:EF:88:B1:BA:3E:7A:D0:6B:D3:B2:58:37:A3:18:A9:12:AE:41:CC
Certificate issuer:       /CN=2550ED64AF65D73E0365088A76683FC98DC1F509
Certificate serial:       495334248E1573208520305D54E3BE9EE5A28BAA
Authority key identifier: 25:50:ED:64:AF:65:D7:3E:03:65:08:8A:76:68:3F:C9:8D:C1:F5:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2550ED64AF65D73E0365088A76683FC98DC1F509.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/3230302e362e34392e302f32342d3234203d3e20323730363831.roa
Signing time:             Wed 26 Feb 2025 12:52:40 +0000
ROA not before:           Wed 26 Feb 2025 12:47:40 +0000
ROA not after:            Wed 25 Feb 2026 12:52:40 +0000
asID:                     270681
IP address blocks:        200.6.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:53:34:24:8e:15:73:20:85:20:30:5d:54:e3:be:9e:e5:a2:8b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2550ED64AF65D73E0365088A76683FC98DC1F509
        Validity
            Not Before: Feb 26 12:47:40 2025 GMT
            Not After : Feb 25 12:52:40 2026 GMT
        Subject: CN=CBEF88B1BA3E7AD06BD3B25837A318A912AE41CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:cb:12:b0:76:f7:cd:aa:27:d9:d5:4d:8f:
                    62:71:ad:e0:83:16:14:e5:46:f8:59:f4:a5:ee:af:
                    42:16:fe:6e:ac:01:b3:07:61:d0:15:79:cf:d8:c2:
                    9a:63:33:62:b3:cd:f3:64:f5:37:26:f6:03:f7:31:
                    20:cd:75:39:1e:f1:08:db:a2:a9:73:79:a8:17:aa:
                    f4:ce:75:4d:6a:1f:6e:62:7f:bf:9a:7b:7f:82:43:
                    a0:36:be:08:ec:41:b4:bd:7e:57:75:be:d0:fe:a9:
                    57:35:12:62:11:f3:b7:20:85:9d:92:f3:58:6b:b7:
                    77:13:c2:24:01:da:9d:c4:c9:c2:dc:a2:9c:76:3e:
                    3f:cc:fc:c7:c9:fa:8e:7c:f2:50:12:b6:7b:96:55:
                    65:87:12:3f:ec:21:ae:5f:aa:bc:82:0e:d7:97:1e:
                    cd:ed:c4:5a:ed:2c:d2:df:35:01:b9:b9:97:64:f5:
                    bf:89:c8:37:38:43:56:45:81:35:d6:d4:fe:b3:39:
                    52:88:ad:7c:f8:6a:a0:f8:8f:ae:20:50:a4:91:49:
                    8b:6c:ff:ef:fe:4a:93:fc:9c:b2:75:4f:ff:95:46:
                    f1:bc:f1:09:8f:d7:96:a9:dd:fa:e1:6d:f4:71:c9:
                    3a:aa:fc:ec:b9:fa:5a:3e:b4:b7:cf:9c:9b:b6:1b:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EF:88:B1:BA:3E:7A:D0:6B:D3:B2:58:37:A3:18:A9:12:AE:41:CC
            X509v3 Authority Key Identifier:
                keyid:25:50:ED:64:AF:65:D7:3E:03:65:08:8A:76:68:3F:C9:8D:C1:F5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/2550ED64AF65D73E0365088A76683FC98DC1F509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2550ED64AF65D73E0365088A76683FC98DC1F509.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/3230302e362e34392e302f32342d3234203d3e20323730363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f5:d6:52:a7:1f:6f:47:a9:88:39:ad:ad:db:f2:b7:f3:c0:
         31:67:02:a2:07:1f:9e:ea:bd:5c:fd:2f:33:00:00:fd:05:23:
         33:11:30:55:a5:91:01:f2:ef:dd:42:4e:4f:35:5d:3c:88:8a:
         c0:9b:4f:d9:7c:9b:26:52:9f:f5:05:c2:27:f1:28:4d:f1:c7:
         02:a6:19:e0:3c:94:4c:c4:1e:af:f8:0e:ea:27:a2:80:51:47:
         69:ac:78:ac:38:c7:78:67:fe:b9:aa:5f:97:64:b8:32:5b:49:
         55:56:2d:f7:1a:48:03:c7:78:e1:5a:2a:e6:00:c7:d0:16:34:
         5d:05:f3:71:59:23:0f:93:d3:67:ed:5b:3c:c1:65:36:37:ae:
         05:26:6e:97:2d:07:b4:f5:de:65:bc:9f:df:9b:2b:d2:c2:f0:
         70:36:85:40:4f:2b:d8:0e:fb:03:72:33:66:89:41:9c:6a:c5:
         02:71:cc:5d:f8:0c:ec:94:5d:c8:1b:9f:6b:ae:f1:6a:23:72:
         a8:2c:3f:5b:f1:d0:8d:f1:32:48:db:a6:34:1b:9b:0b:49:45:
         a6:fa:fb:f4:03:08:01:fa:06:d7:de:d8:79:8e:d6:95:c1:c2:
         03:57:f5:d3:d5:93:f0:94:dc:77:51:5c:ba:90:10:6d:2c:23:
         5a:a8:a1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:39:59 2025 by rpki-client