Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39322e302f32342d3234203d3e20323730343336.roa
File:                     3230302e362e39322e302f32342d3234203d3e20323730343336.roa (raw, json)
Hash identifier:          lr0Td6Vx7XHmQBlbgBbUdQNoHJZq3iCK7qzy5fDqIYo=
Subject key identifier:   A2:64:6C:A3:85:42:4D:7C:94:FD:EE:F1:61:F8:8F:A1:79:89:4C:7F
Certificate issuer:       /CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
Certificate serial:       0B13BD7668958B14BA6B7FA85302874ED29C81D2
Authority key identifier: B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39322e302f32342d3234203d3e20323730343336.roa
Signing time:             Tue 11 Mar 2025 19:56:53 +0000
ROA not before:           Tue 11 Mar 2025 19:51:53 +0000
ROA not after:            Tue 10 Mar 2026 19:56:53 +0000
asID:                     270436
IP address blocks:        200.6.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:13:bd:76:68:95:8b:14:ba:6b:7f:a8:53:02:87:4e:d2:9c:81:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
        Validity
            Not Before: Mar 11 19:51:53 2025 GMT
            Not After : Mar 10 19:56:53 2026 GMT
        Subject: CN=A2646CA385424D7C94FDEEF161F88FA179894C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:5a:a9:55:85:5e:82:1e:80:60:8f:a8:d6:
                    d6:ff:df:56:b2:be:0f:45:12:ad:98:f9:14:6d:cc:
                    18:fb:41:59:e6:83:2a:69:3a:56:a1:95:5d:b4:de:
                    2c:9e:75:bd:1a:16:b8:61:0d:d5:36:d6:7c:fd:a2:
                    b1:d2:3f:d4:56:0b:c2:98:10:cc:7c:a8:0d:92:2b:
                    d5:f6:8d:88:4d:90:e6:c3:14:fb:dd:97:72:82:0b:
                    d0:72:f0:23:f9:91:e4:94:a8:aa:0f:6a:85:98:38:
                    90:d0:7b:93:40:a9:49:67:e1:c8:9a:9d:28:bb:c4:
                    ef:32:fd:aa:31:95:cf:ee:35:d3:d9:64:56:bc:f1:
                    49:1b:97:17:fd:4c:1d:5e:dc:e5:d1:a5:5d:04:8c:
                    1a:69:e5:5e:4a:aa:b9:58:6c:0e:b8:b4:a2:cf:cd:
                    97:33:19:37:8d:88:5e:64:8a:61:97:92:cc:c0:0d:
                    ff:9c:c4:ab:6b:9a:c7:09:79:fe:3a:ba:b7:1d:1c:
                    f5:49:a0:e9:62:c2:a1:a9:e3:2a:4b:84:af:25:6a:
                    71:a4:8c:db:0e:64:a0:ea:db:e4:ed:c2:9f:dc:4f:
                    f0:89:7c:eb:53:11:e3:e6:28:1e:8b:cd:95:d7:2d:
                    11:a3:0a:87:e1:13:89:30:4d:12:19:98:f2:04:01:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:64:6C:A3:85:42:4D:7C:94:FD:EE:F1:61:F8:8F:A1:79:89:4C:7F
            X509v3 Authority Key Identifier:
                keyid:B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39322e302f32342d3234203d3e20323730343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:f4:77:91:c0:45:f7:67:cf:b4:5a:82:19:9d:ba:7b:d6:c6:
         06:c1:78:51:f9:6b:f5:3a:e3:67:c2:e5:d7:e4:7f:f4:c3:de:
         9f:00:30:d9:78:d1:28:14:74:8a:0d:44:65:e7:23:e1:b0:84:
         59:5c:49:18:13:11:c5:1d:86:21:82:db:d7:65:c8:31:3d:62:
         2a:e1:89:c2:4d:94:7d:53:90:4d:61:33:1d:68:04:55:fd:94:
         d2:1d:32:ca:7a:fe:25:a6:95:e8:b8:c9:a6:c6:fc:9a:88:cc:
         3d:98:a1:d2:44:47:74:2d:76:9e:f1:a5:28:45:ee:88:55:d7:
         80:1a:4c:84:4d:4d:3f:74:0c:d5:3a:b2:5c:bb:90:0a:fc:ba:
         79:e2:4e:c4:02:0f:3c:fe:6f:1a:e5:51:80:bf:28:58:8a:e0:
         42:ce:4d:16:28:7b:c3:88:f1:c1:64:91:ce:39:5a:09:c9:8a:
         8f:46:80:fc:ff:da:38:ee:c4:cf:29:c5:e7:77:fd:5f:30:66:
         f2:45:33:75:4e:fe:bc:b9:2e:9d:ea:93:b0:42:a2:58:b5:ad:
         8c:1e:bd:a5:10:de:10:9c:c0:18:81:ee:f1:b8:a0:1e:c8:4b:
         1a:56:18:48:97:0c:08:ee:7a:c5:f2:ee:17:f1:a5:f4:78:eb:
         b7:38:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:34:23 2025 by rpki-client