Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137382e302f32342d3234203d3e20323635333030.roa
File:                     3230302e3132352e3137382e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          letSyHaLaxIhGohxxz5Oaq5FOi2od0y4aEOjUSiTAos=
Subject key identifier:   43:D2:1F:6C:85:0C:E1:37:B3:05:3A:24:AA:A8:1A:41:9A:05:B9:0E
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       5825035B4CA0ADA4688E7DB7C48D5AB4C3569B76
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137382e302f32342d3234203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:08 +0000
ROA not before:           Wed 18 Dec 2024 04:06:08 +0000
ROA not after:            Wed 17 Dec 2025 04:11:08 +0000
asID:                     265300
IP address blocks:        200.125.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:25:03:5b:4c:a0:ad:a4:68:8e:7d:b7:c4:8d:5a:b4:c3:56:9b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:08 2024 GMT
            Not After : Dec 17 04:11:08 2025 GMT
        Subject: CN=43D21F6C850CE137B3053A24AAA81A419A05B90E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:61:97:c8:4e:69:6b:f2:4b:c2:95:8d:d8:
                    9f:2b:63:f8:6e:3e:d7:45:6b:14:25:e1:0d:dd:89:
                    3f:eb:cd:e4:db:5b:06:d1:95:cc:4d:e2:2a:34:9b:
                    4e:fe:01:b1:b5:3d:71:59:ea:09:5d:d0:2f:89:75:
                    57:b1:38:5f:86:d5:b9:8b:3b:88:2f:35:32:05:35:
                    18:40:5b:33:f1:8f:ae:37:58:56:46:3a:ef:9e:3f:
                    c9:17:cf:f5:0f:1f:81:d2:9f:f9:ef:e4:67:94:23:
                    bb:4a:97:e7:01:1a:61:e2:56:28:e3:41:a4:18:ce:
                    d5:98:ec:34:06:63:93:c1:7f:81:f3:1d:b5:4d:d6:
                    cf:36:19:96:5b:b2:8e:15:31:92:88:cb:1f:a9:74:
                    d9:f6:f1:25:55:0d:37:5c:46:e5:06:6e:74:55:8a:
                    fc:69:42:27:04:91:e4:23:24:c3:f9:93:c3:65:5d:
                    35:fc:2a:cb:eb:42:6a:33:d7:8f:7e:7f:71:bd:be:
                    d2:c3:cc:40:ba:4f:78:62:f4:cf:8a:31:dd:42:4e:
                    62:69:d9:83:a3:bb:f6:a7:f3:3d:49:39:09:33:2a:
                    96:ca:07:96:b0:40:b6:d3:df:da:03:35:6e:6e:17:
                    87:1b:39:94:f2:c3:06:53:a8:23:1f:5d:4c:03:dd:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D2:1F:6C:85:0C:E1:37:B3:05:3A:24:AA:A8:1A:41:9A:05:B9:0E
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137382e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:95:0f:ed:af:39:9e:da:91:75:ad:80:ea:54:51:47:42:02:
         57:10:cc:c7:a1:78:7d:3a:ef:ce:e3:e0:b1:a8:65:7f:94:23:
         3e:a3:07:f3:08:40:06:5c:1b:4f:e8:da:0a:9e:ae:86:de:b6:
         76:a4:a6:73:0e:a4:cd:fc:53:3d:e4:68:fa:0e:be:84:aa:d2:
         5b:3c:50:f0:b0:11:ed:0f:f6:8f:b1:a7:a9:b5:3d:55:ee:3b:
         9d:22:6b:ea:68:ea:da:2a:ff:bd:ed:33:c1:44:da:07:e4:8b:
         93:31:37:cc:59:9e:f2:de:9c:87:e5:87:a1:e5:63:51:c4:f3:
         1a:df:cd:ce:02:5a:3a:8a:12:24:48:e6:ff:e3:c7:93:bd:9d:
         f4:95:25:4e:19:65:b5:91:08:60:6c:14:39:7a:96:bb:e2:c3:
         45:a3:6c:26:e7:58:fa:75:4f:e0:0d:32:10:22:2e:89:c7:33:
         ed:c2:ec:c4:5d:4a:2e:23:f8:24:94:2a:4c:e6:9d:82:47:5a:
         2d:49:aa:df:80:8d:26:54:29:f3:b0:d5:22:9a:c9:69:10:3d:
         c6:dd:7e:a9:32:e2:f1:26:1b:d2:c5:57:bd:65:e9:d8:24:a6:
         c3:cf:4d:d2:42:21:06:18:f0:75:94:63:8f:0d:20:a6:cf:9b:
         0b:5d:1c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:56:10 2025 by rpki-client