Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3138322e302f32332d3233203d3e203631393339.roa
File:                     3230302e37352e3138322e302f32332d3233203d3e203631393339.roa (raw, json)
Hash identifier:          YKTI4mVBXdzR+1bZN24+jHwkJxsPNX0yBsYfDI/BrdM=
Subject key identifier:   2A:65:F5:20:02:50:61:B7:92:1E:85:2B:F0:11:94:C7:FF:C5:C9:8B
Certificate issuer:       /CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
Certificate serial:       7D0997C11A2C5D088F2D776793879BAA245ECCE8
Authority key identifier: 30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3138322e302f32332d3233203d3e203631393339.roa
Signing time:             Fri 23 May 2025 19:46:17 +0000
ROA not before:           Fri 23 May 2025 19:41:17 +0000
ROA not after:            Fri 22 May 2026 19:46:17 +0000
asID:                     61939
IP address blocks:        200.75.182.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:09:97:c1:1a:2c:5d:08:8f:2d:77:67:93:87:9b:aa:24:5e:cc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
        Validity
            Not Before: May 23 19:41:17 2025 GMT
            Not After : May 22 19:46:17 2026 GMT
        Subject: CN=2A65F520025061B7921E852BF01194C7FFC5C98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:33:44:94:52:b5:9d:0c:8f:01:2b:5e:20:
                    1a:a9:f1:96:94:6a:e7:c3:32:4c:2b:67:e3:e4:84:
                    1b:90:c2:d0:5c:c7:70:29:65:48:b1:36:18:b1:ae:
                    f8:bf:d4:f4:15:48:d2:fe:fd:aa:5f:70:cf:8d:75:
                    57:2c:be:a1:be:5e:ca:09:14:20:73:dd:31:d1:0e:
                    c1:4a:94:8b:1f:03:a6:fa:36:01:52:bd:67:24:10:
                    73:05:e0:f1:7e:24:03:89:0e:6c:50:a5:30:4e:3c:
                    a9:aa:18:99:ac:a3:10:d3:db:22:fd:0e:2c:2f:98:
                    af:d7:63:1c:ef:83:7f:88:fe:7f:1c:e9:07:9b:b3:
                    d5:1d:26:6c:a9:ee:d2:db:0e:8f:f7:5d:e7:40:67:
                    cf:7c:23:18:ab:e4:f1:ce:1b:72:88:a1:8c:60:82:
                    70:a6:a8:d2:1e:aa:6d:7d:7e:e9:5e:fc:8e:ff:67:
                    fc:11:f7:ac:62:e0:b8:e4:fb:2a:35:98:9e:84:85:
                    91:c8:b8:dc:c3:65:93:03:91:0c:2c:56:c4:61:2d:
                    7c:5f:72:17:51:a4:67:53:23:29:1b:c7:12:84:70:
                    7b:7a:7a:da:5d:cd:50:be:28:7c:58:6a:cb:08:5c:
                    1f:98:f9:59:8b:cb:de:44:13:e2:f4:b7:02:ae:78:
                    df:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:65:F5:20:02:50:61:B7:92:1E:85:2B:F0:11:94:C7:FF:C5:C9:8B
            X509v3 Authority Key Identifier:
                keyid:30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3138322e302f32332d3233203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:72:b7:a4:6f:6f:b7:3c:9c:88:0c:7f:57:4a:eb:f9:16:64:
         37:dd:c6:e5:27:96:c3:e6:16:e4:df:e6:32:1f:53:ce:25:6e:
         68:e9:dd:86:d1:eb:e1:b0:55:d3:30:3c:88:c9:4a:74:91:80:
         0c:16:ea:8d:3a:fd:43:af:57:8c:05:ff:22:50:da:7b:d3:84:
         98:57:70:28:3e:6d:39:9b:d7:ca:82:74:2c:c6:ca:61:f3:2f:
         3d:cb:39:89:a1:72:4f:b6:66:df:45:4f:c7:ac:c9:c1:05:6e:
         10:07:bd:a4:36:be:cb:a1:77:3b:e9:57:e2:ab:a8:8c:2c:e3:
         a4:86:80:e1:1a:3f:7f:b6:44:c2:02:f1:25:03:b5:76:83:67:
         be:d6:ae:ae:00:71:01:62:66:b0:8e:68:12:f4:f1:d0:1e:58:
         aa:46:34:5b:f9:c3:00:a0:d4:18:41:02:bb:9c:fa:9a:5d:93:
         06:ac:ab:12:99:3d:ca:ad:f0:32:f2:24:d0:10:ce:62:31:52:
         1f:ec:06:dc:a5:01:dd:59:09:db:a8:76:c8:95:a8:f2:8b:77:
         f2:af:57:fd:e8:b8:44:db:e1:ec:36:4a:0c:a0:c5:cc:4b:5b:
         a4:c7:d2:22:66:bb:ad:43:9f:48:4c:88:3f:67:42:6e:0d:c3:
         89:99:1d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:00:42 2025 by rpki-client