Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38302e302f32302d3230203d3e2032373136.roa
File:                     3230302e31372e38302e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          hnFivaFH39Xewsi8x8RX6AYwf/xoloqoBnMr+WPu52g=
Subject key identifier:   97:AF:8C:1C:1E:B9:6A:EA:9C:6F:3D:7E:E4:E7:36:C7:DF:F7:02:0C
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       2072251C5D2C522B1A3D95268F1BA18076F0817E
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38302e302f32302d3230203d3e2032373136.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     2716
IP address blocks:        200.17.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:72:25:1c:5d:2c:52:2b:1a:3d:95:26:8f:1b:a1:80:76:f0:81:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:6a:fe:ee:e9:e0:49:ea:da:51:e7:ac:02:
                    75:a8:4f:98:ed:71:c0:d3:1e:2a:23:69:2d:a9:1b:
                    d0:34:53:65:fe:da:9f:6c:6b:0c:2d:13:e3:01:e0:
                    93:04:4b:30:49:49:4e:6b:67:4e:f8:08:17:d2:56:
                    51:63:fc:a3:9d:bd:55:f4:ac:46:5b:4e:3f:6b:18:
                    33:5a:4f:80:d1:f9:f7:96:45:25:48:ab:7c:e7:8c:
                    0b:3e:b0:05:d4:c2:7a:6f:59:0a:1c:22:0b:78:47:
                    e6:13:10:29:82:eb:0d:11:f2:69:42:c8:3e:fb:52:
                    45:8d:33:dd:f0:73:96:85:d3:0b:7e:3c:ab:49:a3:
                    3b:3c:4b:54:64:c0:53:a9:38:53:7b:56:08:ff:56:
                    e8:da:cd:9b:86:3f:c0:d4:dd:d8:e5:de:72:4b:2d:
                    f0:b6:f5:0a:16:6d:ee:57:0f:92:fd:7a:5f:db:61:
                    fc:e6:c5:79:d8:91:28:bd:56:5c:f7:1b:bf:33:77:
                    c5:58:63:1b:7f:db:c8:b8:25:ce:b7:f6:4d:03:73:
                    fa:d9:03:32:53:e0:d2:f3:c9:a8:6d:d3:11:3d:71:
                    6e:9f:bf:b5:96:fd:46:99:e1:a9:9b:2a:46:2c:0e:
                    25:e2:57:b6:9e:bd:4e:2e:10:e3:e6:0f:c1:98:90:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AF:8C:1C:1E:B9:6A:EA:9C:6F:3D:7E:E4:E7:36:C7:DF:F7:02:0C
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38302e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:38:29:b4:0f:1d:f4:09:78:c5:31:46:ab:73:68:04:bf:9b:
         37:72:32:97:99:6d:f0:50:78:fe:9e:cd:11:da:62:bf:d5:f9:
         8d:74:3b:19:43:6b:20:94:07:ec:93:2a:cc:aa:2d:13:35:f5:
         44:bb:06:8a:be:71:fd:fe:29:1a:20:21:77:62:4c:c1:95:bd:
         17:70:d5:dc:8c:9e:13:d5:5d:cf:0f:0f:3c:44:eb:54:18:eb:
         d7:0d:47:43:15:b9:73:99:6d:ce:34:d8:ea:d2:15:15:d1:93:
         cc:69:38:47:09:69:e9:47:b8:ea:fd:5f:2e:6a:76:3b:d7:77:
         93:fc:5d:59:37:ea:d6:ad:82:9e:1e:c4:1d:1b:3a:f4:cb:1c:
         fc:87:1c:9f:ba:e5:8c:55:96:d1:ac:d2:3f:ba:98:97:bd:e7:
         3c:8b:6b:ad:72:f4:21:35:dd:fc:34:37:77:1f:1f:93:46:90:
         35:c0:2a:f6:46:7a:f4:b5:3f:1e:fd:8e:38:8b:54:33:53:c8:
         36:7c:38:e5:62:05:8f:b7:aa:f0:a7:58:08:e5:59:19:68:ea:
         82:1a:84:11:a9:8b:3a:1f:b7:1b:9a:c0:44:42:33:04:42:07:
         2a:aa:ea:58:a8:fe:4f:44:a4:f5:ff:ad:f8:56:fe:bd:6c:d1:
         9e:0a:76:f3
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUIHIlHF0sUisaPZUmjxuhgHbwgX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG
RkUzNjczRTAeFw0yNTAzMDUxODU1MDRaFw0yNjAzMDQxOTAwMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNDMTZBRkVFRUU5RTA0OUVB
REE1MUU3QUMwMjc1QTg0Rjk4RUQ3MUMwRDMxRTJBMjM2OTJEQTkxQkQwMzQ1MzY1
RkVEQTlGNkM2QjBDMkQxM0UzMDFFMDkzMDQ0QjMwNDk0OTRFNkI2NzRFRjgwODE3
RDI1NjUxNjNGQ0EzOURCRDU1RjRBQzQ2NUI0RTNGNkIxODMzNUE0RjgwRDFGOUY3
OTY0NTI1NDhBQjdDRTc4QzBCM0VCMDA1RDRDMjdBNkY1OTBBMUMyMjBCNzg0N0U2
MTMxMDI5ODJFQjBEMTFGMjY5NDJDODNFRkI1MjQ1OEQzM0RERjA3Mzk2ODVEMzBC
N0UzQ0FCNDlBMzNCM0M0QjU0NjRDMDUzQTkzODUzN0I1NjA4RkY1NkU4REFDRDlC
ODYzRkMwRDREREQ4RTVERTcyNEIyREYwQjZGNTBBMTY2REVFNTcwRjkyRkQ3QTVG
REI2MUZDRTZDNTc5RDg5MTI4QkQ1NjVDRjcxQkJGMzM3N0M1NTg2MzFCN0ZEQkM4
QjgyNUNFQjdGNjREMDM3M0ZBRDkwMzMyNTNFMEQyRjNDOUE4NkREMzExM0Q3MTZF
OUZCRkI1OTZGRDQ2OTlFMUE5OUIyQTQ2MkMwRTI1RTI1N0I2OUVCRDRFMkUxMEUz
RTYwRkMxOTg5MDc5RDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvMFq/u7p4Enq2lHnrAJ1qE+Y7XHA0x4qI2ktqRvQNFNl/tqfbGsM
LRPjAeCTBEswSUlOa2dO+AgX0lZRY/yjnb1V9KxGW04/axgzWk+A0fn3lkUlSKt8
54wLPrAF1MJ6b1kKHCILeEfmExApgusNEfJpQsg++1JFjTPd8HOWhdMLfjyrSaM7
PEtUZMBTqThTe1YI/1bo2s2bhj/A1N3Y5d5ySy3wtvUKFm3uVw+S/Xpf22H85sV5
2JEovVZc9xu/M3fFWGMbf9vIuCXOt/ZNA3P62QMyU+DS88mobdMRPXFun7+1lv1G
meGpmypGLA4l4le2nr1OLhDj5g/BmJB50QIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FJevjBweuWrqnG89fuTnNsff9wIMMB8GA1UdIwQYMBaAFNVMN2lgomlyoLdnvaCE
BI3/42c+MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEvRDU0QzM3Njk2MEEyNjk3
MkEwQjc2N0JEQTA4NDA0OERGRkUzNjczRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2
NzNFLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8xLzMyMzAzMDJlMzEzNzJlMzgzMDJl
MzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMyMzczMTM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyBFQMA0G
CSqGSIb3DQEBCwUAA4IBAQBCOCm0Dx30CXjFMUarc2gEv5s3cjKXmW3wUHj+ns0R
2mK/1fmNdDsZQ2sglAfskyrMqi0TNfVEuwaKvnH9/ikaICF3YkzBlb0XcNXcjJ4T
1V3PDw88ROtUGOvXDUdDFblzmW3ONNjq0hUV0ZPMaThHCWnpR7jq/V8uanY713eT
/F1ZN+rWrYKeHsQdGzr0yxz8hxyfuuWMVZbRrNI/upiXvec8i2utcvQhNd38NDd3
Hx+TRpA1wCr2Rnr0tT8e/Y44i1QzU8g2fDjlYgWPt6rwp1gI5VkZaOqCGoQRqYs6
H7cbmsBEQjMEQgcqqupYqP5PRKT1/634Vv69bNGeCnbz
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:09:17 2025 by rpki-client