Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa
File:                     3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier:          Y9PegbMusmRZmejRxEG2TRrfzA8YpqxDPWEqKfSEQwI=
Subject key identifier:   34:77:60:D5:47:0D:AD:D8:3C:17:21:64:75:E3:7F:C9:F4:5E:E6:59
Certificate issuer:       /CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Certificate serial:       5ED69B8941CF921E202F517EAA857B621DE72F22
Authority key identifier: A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa
Signing time:             Mon 02 Jun 2025 20:53:23 +0000
ROA not before:           Mon 02 Jun 2025 20:48:23 +0000
ROA not after:            Mon 01 Jun 2026 20:53:23 +0000
asID:                     263290
IP address blocks:        170.150.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d6:9b:89:41:cf:92:1e:20:2f:51:7e:aa:85:7b:62:1d:e7:2f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
        Validity
            Not Before: Jun  2 20:48:23 2025 GMT
            Not After : Jun  1 20:53:23 2026 GMT
        Subject: CN=347760D5470DADD83C17216475E37FC9F45EE659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:02:cc:81:db:6e:16:30:1b:24:38:88:e9:
                    e6:2d:86:da:56:33:ca:d1:80:ae:f8:2a:6a:9e:ea:
                    43:50:3f:ac:c2:ca:24:6a:08:ea:a9:85:34:ba:a9:
                    bb:1e:14:7c:4b:d1:90:20:a9:c0:50:7f:d9:1d:a6:
                    5b:d2:cc:7b:0e:6e:16:d7:77:c0:0d:f2:22:86:7e:
                    df:82:16:87:32:c1:d3:cf:fc:9a:6b:5f:73:de:2d:
                    7a:18:7f:0a:55:36:38:2c:a6:90:19:d1:3f:76:c0:
                    08:b0:45:f1:32:67:81:8b:78:a5:63:8f:82:9f:52:
                    55:39:a4:24:e4:40:01:c1:f9:de:02:20:b3:69:33:
                    4e:2c:56:4b:14:e0:da:30:5f:d7:6b:d8:ff:3c:1d:
                    c5:12:01:24:e3:f2:a3:fe:ba:5b:bd:f1:3f:c9:78:
                    c7:a9:76:f3:ad:97:b3:91:c1:f6:71:fc:48:e5:79:
                    5b:66:12:dc:81:6f:cc:d7:47:45:46:c9:7d:a9:07:
                    ae:0f:17:df:06:d4:d2:08:fd:d7:45:b7:50:29:19:
                    cf:48:18:a7:06:21:e2:82:86:e3:76:50:77:bc:0e:
                    a2:0e:d5:21:fb:87:f0:52:96:b8:fc:41:25:54:53:
                    8e:d4:70:63:79:70:01:71:f9:30:53:b8:49:78:9e:
                    c0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:77:60:D5:47:0D:AD:D8:3C:17:21:64:75:E3:7F:C9:F4:5E:E6:59
            X509v3 Authority Key Identifier:
                keyid:A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:72:16:6e:9f:f7:74:8e:29:b1:db:a9:a8:0e:19:0b:5c:
         b0:1a:d3:54:79:5e:81:2b:2b:7f:5a:90:30:c6:0a:fe:a0:db:
         6a:d7:25:99:82:db:b6:32:b9:e4:7e:02:61:4c:e8:bd:f2:fc:
         55:48:47:d4:fd:94:9d:39:2f:f1:19:a2:a1:ac:5d:17:c1:bc:
         72:14:fd:ec:00:e6:0d:09:33:b0:d8:43:55:07:7d:69:ce:5d:
         fe:49:97:c0:83:ae:e6:04:f7:2a:01:57:1f:cf:88:ca:cb:8e:
         b7:2e:b5:05:bc:2b:6c:b6:55:85:f7:4b:b8:64:bb:b7:5b:1d:
         85:3d:f1:a1:50:3b:60:92:5e:a6:f6:01:11:e9:2b:49:ca:31:
         82:e1:0b:f9:0f:8f:05:ae:92:79:51:18:2d:39:e0:33:e6:b2:
         91:5d:e3:46:dd:c0:63:0a:dd:14:50:6b:26:b7:8a:57:76:9f:
         61:02:43:9f:6d:e5:b8:d6:f9:e1:69:a4:bf:9e:33:01:c5:76:
         77:51:c7:03:4b:b6:31:15:b8:1f:8a:9d:46:17:8c:de:fc:ee:
         5f:b2:07:a1:47:7c:26:ec:12:89:32:55:67:6c:b6:1b:15:2c:
         c2:90:ac:9e:d9:38:85:a0:bb:f8:36:25:d4:ed:d6:33:7c:e9:
         34:ec:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:14 2025 by rpki-client