Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3134322e39362e302f32302d3234203d3e203137323232.roa
File:                     3230302e3134322e39362e302f32302d3234203d3e203137323232.roa (raw, json)
Hash identifier:          kvVq5kxwWaNcd0evCXW6LYIIvTVYZLrT/CU8rw6XdSw=
Subject key identifier:   48:02:89:9A:1D:F0:C7:AC:4E:59:6B:C7:25:7C:EB:84:C6:7A:7C:14
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       08EB277E7A530B1B58F9F879239FED53DECE9BDA
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3134322e39362e302f32302d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:22 +0000
ROA not before:           Thu 06 Mar 2025 15:29:22 +0000
ROA not after:            Thu 05 Mar 2026 15:34:22 +0000
asID:                     17222
IP address blocks:        200.142.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:eb:27:7e:7a:53:0b:1b:58:f9:f8:79:23:9f:ed:53:de:ce:9b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:22 2025 GMT
            Not After : Mar  5 15:34:22 2026 GMT
        Subject: CN=4802899A1DF0C7AC4E596BC7257CEB84C67A7C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:1e:33:89:14:ed:0f:52:a9:5d:d9:2b:73:
                    25:02:2c:03:ba:d1:05:83:5d:2f:68:e8:ef:75:cc:
                    2a:93:54:db:9d:21:d5:c4:16:15:7c:79:ed:20:6b:
                    ff:e2:c2:c7:1d:c0:64:ba:4c:f3:91:7b:62:34:60:
                    fd:02:cd:ed:66:a0:f9:3b:66:2c:f7:39:c0:bc:88:
                    76:98:78:a6:56:58:4b:ea:8d:b9:be:59:aa:c7:b6:
                    d2:fc:79:b5:4e:5c:08:ea:60:c4:86:43:e4:68:90:
                    2d:78:c8:83:dd:ac:08:d6:48:d7:08:69:54:03:db:
                    6b:65:c0:03:d3:ea:6c:90:fc:0f:45:df:56:2b:5d:
                    b7:cd:1e:4f:30:5f:ab:77:18:cb:a5:c8:36:76:a8:
                    36:17:5e:b4:ea:6b:4e:e6:9f:3f:b2:67:f5:d1:28:
                    46:eb:cf:7c:5b:60:de:8b:c8:b9:3e:12:52:0b:9f:
                    af:80:eb:86:a9:40:2c:e9:5f:e4:46:f0:e1:61:56:
                    d9:bc:63:80:6f:da:b8:25:65:f6:a1:19:b5:e7:39:
                    84:d8:8e:b8:a4:05:81:fe:19:42:5a:72:1c:8a:b3:
                    46:f0:62:25:e7:7a:c7:a7:61:fb:26:37:1c:85:56:
                    79:41:55:ee:2a:ab:62:fd:0c:a0:5a:f7:b6:98:4a:
                    35:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:89:9A:1D:F0:C7:AC:4E:59:6B:C7:25:7C:EB:84:C6:7A:7C:14
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3230302e3134322e39362e302f32302d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:42:e9:fe:48:21:81:6c:93:e0:ac:93:5c:f2:21:bd:41:d3:
         79:c4:ae:79:88:2a:7d:af:30:7e:83:ae:39:72:09:10:25:60:
         06:d1:fc:5e:d5:cb:25:34:14:a9:4e:37:4e:b5:75:6c:b3:d0:
         5e:45:6e:7d:65:4f:ca:00:fb:a1:f9:16:5b:18:cd:a1:1f:03:
         c5:af:81:6d:6e:43:f5:cb:a9:88:7d:de:6b:07:e5:b3:b5:6b:
         3c:25:3f:da:3f:4b:b7:22:e8:55:1b:c6:68:90:63:b3:75:0d:
         13:ed:9e:5a:d8:17:be:43:59:33:0c:c1:72:c0:ee:e8:e3:fc:
         9e:a4:cf:eb:a6:64:ea:6f:b4:db:f5:1a:3e:17:a2:53:cb:89:
         7e:e2:6d:2a:77:e1:13:0a:76:63:da:f2:a3:d2:39:c5:c3:40:
         16:84:09:20:80:5c:f0:93:e6:03:f2:42:17:30:7a:71:bf:0a:
         06:da:80:c9:57:ac:c4:23:d7:c5:5f:85:a0:26:d9:3e:30:02:
         93:e0:e2:a7:00:8c:39:9e:5b:52:00:e9:09:71:3b:37:39:11:
         e4:bf:d2:7f:30:79:a8:bd:2d:f7:34:d2:07:77:74:42:b4:26:
         68:7d:c1:90:e4:61:96:44:62:7d:0c:33:a9:33:a3:7a:13:af:
         8e:ce:b0:87
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCOsnfnpTCxtY+fh5I5/tU97Om9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI1OUNENzkwN0QwOEU1NjEwMzcxMzlFMTQ4RDgzODVE
RkQ5MTZFMjAeFw0yNTAzMDYxNTI5MjJaFw0yNjAzMDUxNTM0MjJaMDMxMTAvBgNV
BAMTKDQ4MDI4OTlBMURGMEM3QUM0RTU5NkJDNzI1N0NFQjg0QzY3QTdDMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjmh4ziRTtD1KpXdkrcyUCLAO6
0QWDXS9o6O91zCqTVNudIdXEFhV8ee0ga//iwscdwGS6TPORe2I0YP0Cze1moPk7
Ziz3OcC8iHaYeKZWWEvqjbm+WarHttL8ebVOXAjqYMSGQ+RokC14yIPdrAjWSNcI
aVQD22tlwAPT6myQ/A9F31YrXbfNHk8wX6t3GMulyDZ2qDYXXrTqa07mnz+yZ/XR
KEbrz3xbYN6LyLk+ElILn6+A64apQCzpX+RG8OFhVtm8Y4Bv2rglZfahGbXnOYTY
jrikBYH+GUJachyKs0bwYiXnesenYfsmNxyFVnlBVe4qq2L9DKBa97aYSjXDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSAKJmh3wx6xOWWvHJXzrhMZ6fBQwHwYDVR0j
BBgwFoAUElnNeQfQjlYQNxOeFI2Dhd/ZFuIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURNQWVjU0ZGN0RqVEdxZTh4TFdwUDJIa2dZVVRHTWdtTWE1UTd3Tlg0
WjQvMS8xMjU5Q0Q3OTA3RDA4RTU2MTAzNzEzOUUxNDhEODM4NURGRDkxNkUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyNTlDRDc5MDdEMDhFNTYx
MDM3MTM5RTE0OEQ4Mzg1REZEOTE2RTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VETUFlY1NGRjdEalRHcWU4eExXcFAySGtnWVVUR01nbU1hNVE3d05YNFo0LzEv
MzIzMDMwMmUzMTM0MzIyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM3
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyI5gMA0GCSqGSIb3DQEBCwUAA4IBAQCJQun+SCGB
bJPgrJNc8iG9QdN5xK55iCp9rzB+g645cgkQJWAG0fxe1cslNBSpTjdOtXVss9Be
RW59ZU/KAPuh+RZbGM2hHwPFr4FtbkP1y6mIfd5rB+WztWs8JT/aP0u3IuhVG8Zo
kGOzdQ0T7Z5a2Be+Q1kzDMFywO7o4/yepM/rpmTqb7Tb9Ro+F6JTy4l+4m0qd+ET
CnZj2vKj0jnFw0AWhAkggFzwk+YD8kIXMHpxvwoG2oDJV6zEI9fFX4WgJtk+MAKT
4OKnAIw5nltSAOkJcTs3ORHkv9J/MHmovS33NNIHd3RCtCZofcGQ5GGWRGJ9DDOp
M6N6E6+OzrCH
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:46:57 2025 by rpki-client