Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3138302e302f32332d3233203d3e203631393339.roa
File:                     3230302e37352e3138302e302f32332d3233203d3e203631393339.roa (raw, json)
Hash identifier:          NC7z3TC8C0087IOmUWUozn7cjN769NFvWasIUWX99N0=
Subject key identifier:   79:00:E7:51:AC:4E:29:34:1D:8F:5A:73:48:96:B9:F0:04:A4:DF:59
Certificate issuer:       /CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
Certificate serial:       603EFA22762F60708267115F0895CFC4CAF1158D
Authority key identifier: 30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3138302e302f32332d3233203d3e203631393339.roa
Signing time:             Fri 23 May 2025 19:46:15 +0000
ROA not before:           Fri 23 May 2025 19:41:15 +0000
ROA not after:            Fri 22 May 2026 19:46:15 +0000
asID:                     61939
IP address blocks:        200.75.180.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3e:fa:22:76:2f:60:70:82:67:11:5f:08:95:cf:c4:ca:f1:15:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
        Validity
            Not Before: May 23 19:41:15 2025 GMT
            Not After : May 22 19:46:15 2026 GMT
        Subject: CN=7900E751AC4E29341D8F5A734896B9F004A4DF59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:c2:25:26:0e:f6:65:ae:cc:75:70:d7:b2:
                    dc:37:9d:19:2b:23:16:0d:3c:3e:4c:25:66:21:10:
                    e8:ae:87:47:41:c4:72:29:0b:88:b3:6d:9a:ff:bd:
                    86:c9:52:0a:3a:57:3e:e8:65:8d:5a:67:1b:7b:f5:
                    f4:e8:ae:e0:ad:c9:f3:47:9e:b0:f0:18:a9:c5:e5:
                    48:92:c4:fe:94:b7:dc:25:de:83:34:d7:9c:31:fe:
                    9b:58:58:70:c1:a7:c7:1d:56:7d:a2:af:ff:52:d7:
                    33:1b:08:83:62:ef:9f:2b:7f:1a:44:d0:9e:15:14:
                    53:c8:b7:62:f3:ec:d4:82:fb:70:6e:3d:12:d5:91:
                    3b:2b:56:36:40:b3:3c:34:33:72:96:a5:7b:37:6a:
                    3b:c3:9f:d0:8b:24:84:0f:af:87:2b:5e:9a:12:0e:
                    12:c4:94:76:ab:71:39:25:64:b1:7b:42:51:07:f5:
                    1c:27:13:af:7f:ae:99:b4:13:fe:63:da:0d:84:49:
                    46:c8:f1:3a:bd:d1:4d:2b:3c:70:1e:79:e6:33:34:
                    8e:9c:58:6c:cd:5f:25:e1:57:bd:d5:ce:d5:f4:6f:
                    c8:79:3f:25:80:6a:64:08:fc:91:1d:e2:89:b8:2d:
                    ef:4e:31:84:26:21:e5:88:da:a6:11:f1:a2:df:1f:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:00:E7:51:AC:4E:29:34:1D:8F:5A:73:48:96:B9:F0:04:A4:DF:59
            X509v3 Authority Key Identifier:
                keyid:30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3138302e302f32332d3233203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:7a:a5:e3:25:66:40:11:72:31:5b:05:29:dd:ba:68:74:63:
         d0:8c:04:f7:82:c3:86:11:9e:ab:b9:a2:a7:9d:65:35:e8:49:
         d7:c8:3e:b7:a2:76:a1:21:f6:88:74:58:35:f3:f1:6d:b5:f5:
         80:a5:c9:c4:a0:aa:a4:0b:f1:14:01:70:43:7f:8e:f3:62:f5:
         c8:9f:6d:93:85:fb:66:5a:d0:50:ce:31:21:01:4b:23:95:88:
         fc:03:f1:b4:6b:9e:99:0c:4e:a8:18:6c:73:6b:a6:1a:90:5e:
         fd:47:32:68:d7:e0:3c:1b:a7:f9:0e:14:49:fe:5b:db:75:96:
         84:41:d8:56:80:61:2f:d3:6f:9f:50:87:02:90:61:b7:c7:d9:
         37:d1:18:49:d7:22:d9:00:91:22:c5:5b:d9:49:4f:c3:bf:53:
         93:11:92:16:75:a4:c9:4b:95:05:97:e7:7c:c2:94:dd:7c:72:
         aa:c8:6d:22:a9:bc:4d:6e:d2:f0:82:e3:d8:46:a0:7b:ed:aa:
         12:24:4c:6c:ea:ed:05:be:70:c6:11:5f:61:12:41:bf:b0:db:
         0f:4b:90:04:e1:4f:3d:c5:21:2d:8c:27:23:fd:4d:dd:d9:0f:
         0d:f8:47:71:62:77:d5:05:61:a0:43:9f:af:50:bb:f5:15:c7:
         8a:4d:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:28:52 2025 by rpki-client