Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa
File:                     3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa (raw, json)
Hash identifier:          sY1gg4XSEBnQru7FQKGMnl8I5uMtQMSWLdLy4EzMWQQ=
Subject key identifier:   46:B2:BF:74:B7:39:1E:8E:AB:28:71:8C:1F:F5:63:EC:27:55:14:EC
Certificate issuer:       /CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8
Certificate serial:       50E9ABC2187796C77CA9603A9FC0C3A18DF73EFF
Authority key identifier: A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa
Signing time:             Thu 06 Mar 2025 05:55:23 +0000
ROA not before:           Thu 06 Mar 2025 05:50:23 +0000
ROA not after:            Thu 05 Mar 2026 05:55:23 +0000
asID:                     270466
IP address blocks:        200.106.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e9:ab:c2:18:77:96:c7:7c:a9:60:3a:9f:c0:c3:a1:8d:f7:3e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8
        Validity
            Not Before: Mar  6 05:50:23 2025 GMT
            Not After : Mar  5 05:55:23 2026 GMT
        Subject: CN=46B2BF74B7391E8EAB28718C1FF563EC275514EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:02:86:ff:0d:a7:f9:83:78:dc:31:ec:e0:
                    11:ac:a8:44:75:c4:c6:b0:38:82:d5:c4:05:06:c2:
                    e4:94:4d:13:00:4c:f5:72:ae:6b:83:66:6d:5e:b3:
                    0b:59:ba:bf:fe:58:21:d7:33:56:b1:d3:07:e9:ca:
                    25:82:e3:40:fe:27:cb:ab:a5:d2:b8:73:e5:2c:d0:
                    a0:e1:b9:17:e8:7b:6c:fd:b2:a9:c3:67:d0:6d:d2:
                    c4:09:08:09:da:2f:84:f2:3d:94:fd:0d:46:d6:a5:
                    2d:65:ae:25:e7:82:89:40:af:b5:b1:5f:35:07:34:
                    15:b3:ea:7d:8d:d1:f9:f3:55:f6:28:dc:b9:85:9d:
                    2c:5f:55:d8:fe:8d:eb:5a:44:6c:d2:2e:a8:07:94:
                    2a:68:17:12:f4:d8:a5:6a:12:51:8a:ab:cb:92:3a:
                    1e:39:23:34:64:95:72:d4:49:d3:65:8a:e5:7a:9a:
                    3e:9a:2a:24:e0:4e:d5:3f:34:ef:54:cb:59:63:ed:
                    cf:01:ad:71:2f:06:89:0f:0e:95:2d:21:81:cb:0a:
                    bb:84:e4:46:61:eb:5f:e5:57:df:01:ee:da:fb:af:
                    42:05:79:98:bf:f4:2d:1c:01:e3:87:d9:0a:80:37:
                    47:ee:97:76:09:cc:ee:93:ef:e7:f9:2e:3e:95:7f:
                    9d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B2:BF:74:B7:39:1E:8E:AB:28:71:8C:1F:F5:63:EC:27:55:14:EC
            X509v3 Authority Key Identifier:
                keyid:A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:e8:87:28:6d:ba:05:cc:3a:a8:05:07:05:57:33:0c:40:7e:
         92:49:46:a0:98:64:0c:aa:9e:33:7a:db:18:a4:69:2e:18:f4:
         b9:70:96:17:8c:5b:bb:af:fe:93:40:32:52:99:ed:e8:0e:a1:
         83:21:83:97:61:c8:50:15:cc:6e:68:88:ec:8e:e3:b7:7a:6a:
         4b:5f:7a:88:7b:1e:94:4c:a7:bc:dc:e8:81:58:70:c5:0f:45:
         e8:a6:ea:1e:e2:e1:34:a5:d6:96:f7:30:5b:03:28:26:cc:52:
         e9:e0:d1:bb:24:7b:23:3c:85:f0:59:02:a5:b7:0a:a3:b7:17:
         c3:94:81:0e:61:1d:ac:35:a7:f7:ed:a8:1b:2d:2d:5f:87:4c:
         44:40:bc:2c:79:12:d0:86:d2:e5:2d:77:e3:24:6c:30:1e:fa:
         45:f9:5a:eb:a1:ad:c3:a1:c2:fc:22:58:f0:d8:79:3d:c1:e4:
         63:e1:70:70:75:61:01:a4:b3:be:14:19:f0:c6:bd:53:b3:d5:
         e9:cd:b7:b3:54:aa:e3:fc:de:ca:e1:bc:e8:31:53:a9:ec:54:
         73:60:53:0a:ff:a2:15:c4:f0:ec:60:36:4b:40:08:2d:0a:40:
         21:f0:34:d9:49:e5:d9:ff:7e:c7:60:09:16:b5:36:4e:05:97:
         d8:0d:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:35:16 2025 by rpki-client