Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32322d3232203d3e203631393339.roa
File:                     3230302e37352e3137362e302f32322d3232203d3e203631393339.roa (raw, json)
Hash identifier:          PARRXSXX/jmkbEGcRUO82F8gNBShKtQ75+1v+CV5Bjg=
Subject key identifier:   04:50:EF:3C:19:43:BE:4D:E7:58:E6:04:0B:A2:3D:AD:48:75:21:F3
Certificate issuer:       /CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
Certificate serial:       5BB70ADDDFBA98918ECC2C12627019A35ADE41A1
Authority key identifier: 30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32322d3232203d3e203631393339.roa
Signing time:             Fri 23 May 2025 19:46:06 +0000
ROA not before:           Fri 23 May 2025 19:41:06 +0000
ROA not after:            Fri 22 May 2026 19:46:06 +0000
asID:                     61939
IP address blocks:        200.75.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b7:0a:dd:df:ba:98:91:8e:cc:2c:12:62:70:19:a3:5a:de:41:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
        Validity
            Not Before: May 23 19:41:06 2025 GMT
            Not After : May 22 19:46:06 2026 GMT
        Subject: CN=0450EF3C1943BE4DE758E6040BA23DAD487521F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0b:ea:97:6a:de:55:48:1c:9f:6f:db:a7:e0:
                    36:27:97:98:d6:66:73:d9:81:38:a6:ef:9f:b9:16:
                    b4:00:9b:7a:77:43:25:c8:01:a7:17:b0:09:eb:2f:
                    41:8a:88:50:30:25:80:ce:ac:81:07:bd:97:fa:f9:
                    86:02:cd:31:29:02:7d:c7:1b:93:dc:4c:99:12:e0:
                    c0:94:8f:c0:9f:3a:c9:12:a7:ff:c2:f5:f7:c2:6c:
                    27:93:b7:70:da:65:ec:dd:d4:a6:a9:cb:5f:d8:fb:
                    be:58:7c:82:0a:43:55:b6:7c:68:fb:ea:00:81:6b:
                    56:e8:19:03:79:10:d3:6e:e3:9c:3a:cb:19:d6:79:
                    24:55:78:cd:10:87:53:34:4e:2b:a4:9f:79:be:e3:
                    90:61:3d:be:d6:07:f7:25:1e:c0:eb:39:52:03:7d:
                    84:02:88:80:c7:59:22:f4:b3:c7:18:d1:3b:99:55:
                    bd:97:59:90:f7:a4:fb:c3:8c:ee:62:fe:62:8f:e6:
                    c2:2e:c2:48:4f:8a:8c:a4:c7:79:8c:9c:85:45:ca:
                    43:90:6f:aa:b2:93:b0:a9:f6:6a:d1:9c:15:62:f8:
                    5b:f0:3b:9c:1c:0a:cb:11:19:05:85:84:28:e0:9c:
                    8b:b4:c4:92:fb:f9:80:2a:91:75:91:7f:d7:bc:35:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:50:EF:3C:19:43:BE:4D:E7:58:E6:04:0B:A2:3D:AD:48:75:21:F3
            X509v3 Authority Key Identifier:
                keyid:30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32322d3232203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:ef:4e:2f:af:68:d9:e6:0e:28:c0:68:47:6b:ea:92:da:8a:
         38:de:81:ee:2c:93:93:3a:35:7c:3a:ae:3f:69:98:06:60:da:
         a6:0c:c5:4a:c8:c8:47:bf:1a:7b:80:4c:fa:23:56:0d:5c:ca:
         cf:74:87:32:7e:08:84:80:23:a2:9f:34:87:68:c6:dd:28:ba:
         19:2e:8e:33:29:f9:a7:67:74:a7:28:ef:fd:8d:56:be:80:d6:
         da:e9:9f:db:69:5c:25:8a:3a:6e:63:cb:68:e6:66:82:03:b0:
         e2:a9:9d:b3:81:dc:68:9c:f2:93:27:4d:37:16:dd:ae:bc:6d:
         43:10:b4:2b:9d:b7:89:89:22:d9:07:32:bb:a5:63:14:4c:af:
         1b:c3:03:7b:e4:b3:5d:29:f3:71:2f:34:d3:0a:77:5b:bc:66:
         9b:cf:82:54:81:7d:15:32:52:3c:c6:e0:18:6f:5a:23:6f:08:
         4a:85:24:86:ae:c0:4f:56:a0:6a:87:a4:31:1b:25:67:22:e4:
         71:2b:24:0d:c5:41:13:7f:7b:d9:da:9d:a7:e3:35:2a:e3:bd:
         8d:19:c5:b8:26:31:24:d7:43:0f:0d:35:90:f1:aa:fe:ba:aa:
         2b:43:67:05:b5:2e:9a:e0:5e:a6:cd:c9:a8:77:9e:66:fb:9c:
         49:d8:72:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW7cK3d+6mJGOzCwSYnAZo1reQaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBGQjY3NTRGQTNEMkRBMjQ3MTNCNkE5Q0RFNjEzNDdF
OTVDMzIwRDAeFw0yNTA1MjMxOTQxMDZaFw0yNjA1MjIxOTQ2MDZaMDMxMTAvBgNV
BAMTKDA0NTBFRjNDMTk0M0JFNERFNzU4RTYwNDBCQTIzREFENDg3NTIxRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSC+qXat5VSByfb9un4DYnl5jW
ZnPZgTim75+5FrQAm3p3QyXIAacXsAnrL0GKiFAwJYDOrIEHvZf6+YYCzTEpAn3H
G5PcTJkS4MCUj8CfOskSp//C9ffCbCeTt3DaZezd1Kapy1/Y+75YfIIKQ1W2fGj7
6gCBa1boGQN5ENNu45w6yxnWeSRVeM0Qh1M0Tiukn3m+45BhPb7WB/clHsDrOVID
fYQCiIDHWSL0s8cY0TuZVb2XWZD3pPvDjO5i/mKP5sIuwkhPioykx3mMnIVFykOQ
b6qyk7Cp9mrRnBVi+FvwO5wcCssRGQWFhCjgnIu0xJL7+YAqkXWRf9e8NZ3lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBFDvPBlDvk3nWOYEC6I9rUh1IfMwHwYDVR0j
BBgwFoAUMPtnVPo9LaJHE7apzeYTR+lcMg0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkFEYkhGY0pjNll6aUt1Vm5FbzZqdW55c205a2VOWmtRdTV1QTRRczNY
WEMvMC8zMEZCNjc1NEZBM0QyREEyNDcxM0I2QTlDREU2MTM0N0U5NUMzMjBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwRkI2NzU0RkEzRDJEQTI0
NzEzQjZBOUNERTYxMzQ3RTk1QzMyMEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JBRGJIRmNKYzZZemlLdVZuRW82anVueXNtOWtlTlprUXU1dUE0UXMzWFhDLzAv
MzIzMDMwMmUzNzM1MmUzMTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzkzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyEuwMA0GCSqGSIb3DQEBCwUAA4IBAQAj704vr2jZ
5g4owGhHa+qS2oo43oHuLJOTOjV8Oq4/aZgGYNqmDMVKyMhHvxp7gEz6I1YNXMrP
dIcyfgiEgCOinzSHaMbdKLoZLo4zKfmnZ3SnKO/9jVa+gNba6Z/baVwlijpuY8to
5maCA7DiqZ2zgdxonPKTJ003Ft2uvG1DELQrnbeJiSLZBzK7pWMUTK8bwwN75LNd
KfNxLzTTCndbvGabz4JUgX0VMlI8xuAYb1ojbwhKhSSGrsBPVqBqh6QxGyVnIuRx
KyQNxUETf3vZ2p2n4zUq472NGcW4JjEk10MPDTWQ8ar+uqorQ2cFtS6a4F6mzcmo
d55m+5xJ2HLQ
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:24:12 2025 by rpki-client