Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3230302e3139362e3134302e302f32322d3232203d3e203532373930.roa
File:                     3230302e3139362e3134302e302f32322d3232203d3e203532373930.roa (raw, json)
Hash identifier:          lQ+oX5jgecPLvx4+WkcJJsh9gGIX1zLFogcnyUtQabk=
Subject key identifier:   5C:A1:C7:4A:2C:C2:5A:90:AF:0E:21:96:92:A4:07:CB:B1:11:4F:48
Certificate issuer:       /CN=A55E93D565F6F77E37BF561CEEE467048A013F7C
Certificate serial:       34B6F0ABB528E892449493EA9608C9F4BD4232C4
Authority key identifier: A5:5E:93:D5:65:F6:F7:7E:37:BF:56:1C:EE:E4:67:04:8A:01:3F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55E93D565F6F77E37BF561CEEE467048A013F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3230302e3139362e3134302e302f32322d3232203d3e203532373930.roa
Signing time:             Thu 13 Mar 2025 19:26:14 +0000
ROA not before:           Thu 13 Mar 2025 19:21:14 +0000
ROA not after:            Thu 12 Mar 2026 19:26:14 +0000
asID:                     52790
IP address blocks:        200.196.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b6:f0:ab:b5:28:e8:92:44:94:93:ea:96:08:c9:f4:bd:42:32:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55E93D565F6F77E37BF561CEEE467048A013F7C
        Validity
            Not Before: Mar 13 19:21:14 2025 GMT
            Not After : Mar 12 19:26:14 2026 GMT
        Subject: CN=5CA1C74A2CC25A90AF0E219692A407CBB1114F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:5d:35:11:98:00:74:64:07:df:65:f1:96:
                    42:c0:b3:dc:41:69:fc:ca:58:2e:7d:63:1d:8e:46:
                    c3:de:c5:16:ac:ed:fa:ee:7f:aa:73:bf:2b:b7:e3:
                    92:72:7b:04:76:2d:ec:3e:ea:ff:64:d6:da:e6:3f:
                    b3:e6:6a:2e:79:44:50:8b:27:7a:ea:52:a8:b4:a7:
                    a1:4c:ea:59:00:d2:d5:13:1d:ba:b5:97:7e:b4:53:
                    dd:9f:8f:9b:43:c2:91:ba:93:95:42:a5:81:c4:9b:
                    38:92:01:da:cf:eb:f5:a2:1f:8f:21:a3:ea:f8:e4:
                    95:a9:58:c4:fa:df:f7:7c:c9:34:ff:8d:15:5d:9e:
                    32:18:e2:86:b6:66:2c:4c:6b:9b:ad:4e:44:02:72:
                    68:9a:3e:c5:ae:d5:0b:88:58:9b:49:88:d1:38:c9:
                    5a:a0:37:81:27:67:be:55:af:ea:ba:f8:40:ce:73:
                    b3:72:6f:d6:98:b9:99:3c:da:80:58:1f:8a:33:16:
                    a9:93:ed:bc:96:02:a0:13:60:b2:de:84:a3:00:85:
                    68:3b:3e:eb:59:2a:5c:8c:77:89:3b:e9:e5:52:d1:
                    7f:99:a5:44:ee:ef:fb:e2:9a:47:37:4f:72:3c:6e:
                    8c:55:4f:a1:7f:e4:2d:08:9b:29:97:61:6c:3c:87:
                    77:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A1:C7:4A:2C:C2:5A:90:AF:0E:21:96:92:A4:07:CB:B1:11:4F:48
            X509v3 Authority Key Identifier:
                keyid:A5:5E:93:D5:65:F6:F7:7E:37:BF:56:1C:EE:E4:67:04:8A:01:3F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/A55E93D565F6F77E37BF561CEEE467048A013F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55E93D565F6F77E37BF561CEEE467048A013F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3230302e3139362e3134302e302f32322d3232203d3e203532373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:e4:bb:35:ad:fa:61:ab:cf:87:bd:a5:b0:4d:44:79:12:71:
         a3:a0:a9:a5:ec:41:ab:ed:6c:ce:75:87:1d:ca:6d:f0:ad:a2:
         1e:4b:79:c6:32:da:d0:b2:40:84:ad:bf:92:27:fb:ee:7b:57:
         38:64:47:aa:14:14:d9:6d:ea:e7:6d:57:a8:7b:6a:30:78:b8:
         f8:cd:cb:ae:27:3c:32:8e:8f:0f:88:9c:68:59:11:2c:8d:cb:
         29:81:9c:f8:29:31:b8:d1:1d:15:0f:7b:78:92:05:0b:a1:23:
         e0:6b:1c:ef:79:59:85:b3:d9:2d:24:4f:3d:bc:13:0a:35:81:
         df:cf:48:37:0f:d9:58:e4:be:50:77:95:43:6e:78:e2:e1:a5:
         b5:86:1a:06:a8:5c:24:3e:fe:96:65:97:2b:a6:d8:99:6c:c7:
         5a:97:8b:4f:85:48:9b:f2:6c:23:59:fd:eb:83:78:0a:1d:8d:
         b1:b8:0c:89:4c:f4:ae:f9:d7:a1:b1:09:a7:b8:1b:82:75:8a:
         2b:03:af:08:b8:eb:7a:01:ff:b3:a3:f3:55:ee:7e:6a:7e:44:
         9e:2a:4c:c6:c2:f9:fd:6a:ea:da:df:03:80:f4:81:96:19:8e:
         73:75:48:89:34:2f:3c:2f:dc:80:66:b6:8d:16:e9:08:71:d9:
         0e:07:89:4c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNLbwq7Uo6JJElJPqlgjJ9L1CMsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU1RTkzRDU2NUY2Rjc3RTM3QkY1NjFDRUVFNDY3MDQ4
QTAxM0Y3QzAeFw0yNTAzMTMxOTIxMTRaFw0yNjAzMTIxOTI2MTRaMDMxMTAvBgNV
BAMTKDVDQTFDNzRBMkNDMjVBOTBBRjBFMjE5NjkyQTQwN0NCQjExMTRGNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48V01EZgAdGQH32XxlkLAs9xB
afzKWC59Yx2ORsPexRas7fruf6pzvyu345JyewR2Lew+6v9k1trmP7Pmai55RFCL
J3rqUqi0p6FM6lkA0tUTHbq1l360U92fj5tDwpG6k5VCpYHEmziSAdrP6/WiH48h
o+r45JWpWMT63/d8yTT/jRVdnjIY4oa2ZixMa5utTkQCcmiaPsWu1QuIWJtJiNE4
yVqgN4EnZ75Vr+q6+EDOc7Nyb9aYuZk82oBYH4ozFqmT7byWAqATYLLehKMAhWg7
PutZKlyMd4k76eVS0X+ZpUTu7/vimkc3T3I8boxVT6F/5C0ImymXYWw8h3c1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXKHHSizCWpCvDiGWkqQHy7ERT0gwHwYDVR0j
BBgwFoAUpV6T1WX29343v1Yc7uRnBIoBP3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmJRamZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdj
dU4vMC9BNTVFOTNENTY1RjZGNzdFMzdCRjU2MUNFRUU0NjcwNDhBMDEzRjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NUU5M0Q1NjVGNkY3N0Uz
N0JGNTYxQ0VFRTQ2NzA0OEEwMTNGN0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZiUWpmQ1B3TG9mY1B1NVZieDdLRWRFc3AxdDVRSkV1clBjeVBhaVhnY3VOLzAv
MzIzMDMwMmUzMTM5MzYyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNzM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIxIwwDQYJKoZIhvcNAQELBQADggEBAGfkuzWt
+mGrz4e9pbBNRHkScaOgqaXsQavtbM51hx3KbfCtoh5LecYy2tCyQIStv5In++57
VzhkR6oUFNlt6udtV6h7ajB4uPjNy64nPDKOjw+InGhZESyNyymBnPgpMbjRHRUP
e3iSBQuhI+BrHO95WYWz2S0kTz28Ewo1gd/PSDcP2VjkvlB3lUNueOLhpbWGGgao
XCQ+/pZllyum2Jlsx1qXi0+FSJvybCNZ/euDeAodjbG4DIlM9K7516GxCae4G4J1
iisDrwi463oB/7Oj81Xufmp+RJ4qTMbC+f1q6trfA4D0gZYZjnN1SIk0Lzwv3IBm
to0W6Qhx2Q4HiUw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:34:03 2025 by rpki-client