Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137382e302f32332d3233203d3e203631393339.roa
File:                     3230302e37352e3137382e302f32332d3233203d3e203631393339.roa (raw, json)
Hash identifier:          BvAUAzGiowI2zjwB6SZo/IZOoFrR6MmpJn9pftSwUNo=
Subject key identifier:   B2:11:C6:C6:35:43:8A:83:5D:C8:47:92:AA:6D:22:35:FB:ED:F1:57
Certificate issuer:       /CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
Certificate serial:       24B06C4E5283653218D3B43BC24D1B3B52841455
Authority key identifier: 30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137382e302f32332d3233203d3e203631393339.roa
Signing time:             Fri 23 May 2025 19:46:13 +0000
ROA not before:           Fri 23 May 2025 19:41:13 +0000
ROA not after:            Fri 22 May 2026 19:46:13 +0000
asID:                     61939
IP address blocks:        200.75.178.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b0:6c:4e:52:83:65:32:18:d3:b4:3b:c2:4d:1b:3b:52:84:14:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
        Validity
            Not Before: May 23 19:41:13 2025 GMT
            Not After : May 22 19:46:13 2026 GMT
        Subject: CN=B211C6C635438A835DC84792AA6D2235FBEDF157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:f4:50:02:8c:96:c6:a8:8c:55:b2:c3:ab:
                    0c:bc:e4:ea:c3:19:4e:ba:76:d7:62:68:43:d8:38:
                    13:6d:ba:08:1a:fa:45:03:f1:63:0d:c2:db:bc:9a:
                    9b:ee:c7:1a:ab:99:bf:f6:71:fc:67:70:03:eb:38:
                    fe:a9:01:87:3a:11:5f:d5:04:bb:b1:7d:28:6d:3a:
                    99:a5:80:db:e1:d6:0e:b8:21:44:a2:d8:c2:22:0c:
                    e9:0a:fb:4b:e7:02:51:81:68:ff:4f:dd:58:07:e0:
                    5d:6e:8b:d9:e1:75:da:e9:fe:f8:61:6b:d1:94:0c:
                    2f:4a:6f:fb:14:1a:8d:c8:ef:3a:96:69:07:86:1d:
                    27:51:10:53:f7:68:3f:ce:02:d9:41:aa:cf:a6:73:
                    c7:81:9c:c6:73:c6:5a:0d:3e:38:87:e1:98:df:58:
                    00:b1:5b:3c:40:4c:b8:6e:76:6d:10:4d:43:2d:8b:
                    c3:a4:5a:c6:4d:34:34:16:91:73:7e:2b:79:c4:bd:
                    a3:47:92:37:4c:57:b4:d4:db:03:e6:34:02:02:ce:
                    c8:c8:66:c2:55:da:0f:6d:39:80:de:25:63:75:ad:
                    0a:6a:ea:2b:82:86:cc:d4:18:62:6f:44:bf:33:a5:
                    38:17:be:a7:2c:15:b3:64:2b:8d:d4:46:09:14:67:
                    58:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:11:C6:C6:35:43:8A:83:5D:C8:47:92:AA:6D:22:35:FB:ED:F1:57
            X509v3 Authority Key Identifier:
                keyid:30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137382e302f32332d3233203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:bc:58:75:36:76:08:d2:7a:2e:b2:6f:6f:ce:b0:98:e6:93:
         cf:b5:2a:d0:21:36:38:8b:e2:d1:96:43:48:33:bf:86:18:b3:
         92:d4:4f:ba:22:55:fc:b3:35:75:61:41:24:50:fc:96:5a:ff:
         c7:55:e0:f1:e2:af:bd:a9:f2:17:e1:bc:ba:87:8f:c5:41:68:
         fa:95:ca:2a:2e:75:96:a0:11:1f:8b:9e:98:07:c5:3f:09:64:
         fd:4e:f9:51:5b:b4:ad:a5:a1:97:ad:fd:fa:42:7b:fd:de:f4:
         11:b9:9a:7c:b9:91:c3:9e:b9:5e:f2:91:92:ea:c0:0e:21:ca:
         bc:80:a8:71:5b:34:5e:62:98:19:4c:16:30:f0:0b:6f:7a:2a:
         23:80:91:8f:b0:bb:7d:e3:bc:dd:f1:36:3e:e9:80:a1:49:5f:
         4f:f6:25:ec:d0:f7:c0:15:13:22:53:40:f5:94:e8:c8:cb:6e:
         01:b9:fc:87:87:cf:4f:24:1e:5b:b5:3d:78:2d:67:0e:c2:57:
         b0:fc:77:71:bd:cf:1b:18:2e:a5:d5:36:7a:f5:0e:1a:20:bd:
         54:55:1c:5f:08:18:85:01:2b:bc:f2:d6:16:30:b1:66:7e:e0:
         ab:24:51:da:50:0e:46:6e:7b:ec:80:3d:0f:e6:7b:40:f7:69:
         da:7b:0e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:31:09 2025 by rpki-client