Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e302e302f32312d3231203d3e2032373136.roa
File:                     3230302e31392e302e302f32312d3231203d3e2032373136.roa (raw, json)
Hash identifier:          IsVgV3V3iPbs9tRp4tHX6bi2Qt6w7cHdMmfeUhLQq5I=
Subject key identifier:   D8:F6:44:1D:A8:F1:B8:2E:74:BA:C5:76:4F:6B:00:86:62:A1:65:A9
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       6E4B5B3B2B3F29E20E6EE50D19B89D52BD270EFF
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e302e302f32312d3231203d3e2032373136.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     2716
IP address blocks:        200.19.0.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4b:5b:3b:2b:3f:29:e2:0e:6e:e5:0d:19:b8:9d:52:bd:27:0e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:1d:52:a9:55:48:50:3b:4a:f8:3e:3c:e5:
                    fd:fc:52:f2:73:f8:ea:fa:c7:6f:29:14:b1:c0:9d:
                    25:f2:03:39:5b:04:32:36:87:64:c9:ba:b0:0d:eb:
                    fc:c1:75:67:77:f0:c4:1e:be:d1:dc:bd:52:39:cd:
                    1d:fc:04:ac:1b:e3:66:f9:5b:b5:69:22:5b:d5:70:
                    08:d6:60:f2:81:64:77:89:cf:10:45:a0:3e:f1:35:
                    33:11:38:dc:86:ea:3b:48:54:e7:22:97:33:b4:7b:
                    5c:34:e9:2c:e2:4a:94:bb:e6:03:bd:af:f2:1a:21:
                    b4:c6:1a:a9:57:b2:4d:7d:66:3d:93:fa:ce:ee:8f:
                    74:f0:f3:62:e3:45:1b:db:bb:4a:4b:e9:1f:68:aa:
                    1c:c9:c2:ad:36:87:af:28:33:57:4f:2e:b4:32:60:
                    9f:6a:f9:7d:5a:93:d0:0d:51:b4:e2:ec:81:d3:86:
                    83:a3:16:52:3d:a1:f1:bc:7b:8d:69:d6:87:a0:16:
                    02:49:f4:af:92:c6:30:a1:2d:9b:cf:a2:2f:8b:48:
                    97:98:23:04:54:19:f6:50:80:57:0e:76:cb:be:d5:
                    de:77:44:5c:08:e9:bd:16:7b:ec:50:ab:5c:03:6f:
                    fd:ec:ec:0b:d9:61:f2:38:ea:c7:af:6e:e8:a1:ef:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F6:44:1D:A8:F1:B8:2E:74:BA:C5:76:4F:6B:00:86:62:A1:65:A9
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e302e302f32312d3231203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:1d:a6:d0:bf:05:63:98:58:7a:6b:97:b6:54:cc:d7:2b:a6:
         ec:31:a7:be:f1:44:da:4c:fe:82:99:fe:71:29:18:e1:58:1d:
         3b:53:29:ec:79:54:d4:20:80:14:1e:83:8c:10:cd:d7:46:ef:
         dc:88:ea:24:ec:0a:e2:4b:89:9e:1c:4b:48:31:28:a6:9a:fb:
         cf:98:f2:35:d0:a9:f6:58:2a:8a:80:b1:3f:74:f9:54:a2:8e:
         ce:a5:24:02:71:16:ae:24:54:43:b1:6f:9c:e5:0a:2a:2c:42:
         77:ce:e3:05:b7:76:f9:83:af:dd:90:85:9e:c9:39:13:14:c3:
         85:5c:28:5a:60:c2:6f:f4:aa:eb:56:ef:32:72:73:f5:b4:52:
         e1:14:ea:32:9d:44:e4:43:5f:57:bc:d4:2a:0c:f1:0d:78:24:
         8c:18:16:bd:60:fb:2e:31:18:93:78:46:fd:c7:ff:f0:9c:e0:
         c6:cc:ad:e2:fb:aa:4c:71:91:46:7f:11:a7:00:9f:08:ec:02:
         2e:b6:81:3f:d1:89:ef:77:e7:34:0b:17:32:87:d1:6c:70:d1:
         57:1d:c8:30:99:07:6a:fe:58:ef:00:37:80:87:0b:4c:24:56:
         56:4a:4c:b4:e8:a3:9b:c1:fa:c2:6f:b2:c6:a3:12:82:c0:14:
         70:a4:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:55 2025 by rpki-client