Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/3136382e3139342e3137362e302f32342d3234203d3e20323635343030.roa
File:                     3136382e3139342e3137362e302f32342d3234203d3e20323635343030.roa (raw, json)
Hash identifier:          N4wiYCxC2FMtGi0GEADc9jlZV93PF43k0hFpKM23xQU=
Subject key identifier:   AC:3A:B2:80:BC:00:F9:50:1C:89:0A:00:ED:E5:CF:1B:C2:1F:4A:64
Certificate issuer:       /CN=5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1
Certificate serial:       1F3CBABE63D8412ED44D77C332235475F234F5E2
Authority key identifier: 51:80:B3:26:D4:97:3A:1F:A0:FA:CE:EA:2E:BD:FE:BF:DB:B6:68:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/3136382e3139342e3137362e302f32342d3234203d3e20323635343030.roa
Signing time:             Fri 28 Mar 2025 17:04:32 +0000
ROA not before:           Fri 28 Mar 2025 16:59:32 +0000
ROA not after:            Fri 27 Mar 2026 17:04:32 +0000
asID:                     265400
IP address blocks:        168.194.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3c:ba:be:63:d8:41:2e:d4:4d:77:c3:32:23:54:75:f2:34:f5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1
        Validity
            Not Before: Mar 28 16:59:32 2025 GMT
            Not After : Mar 27 17:04:32 2026 GMT
        Subject: CN=AC3AB280BC00F9501C890A00EDE5CF1BC21F4A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f3:2a:b0:a2:77:88:d6:e1:8c:a7:de:8e:26:
                    7f:d3:51:b7:fb:e7:52:5f:a1:50:8c:1d:df:ea:13:
                    97:e5:e0:15:3a:02:84:25:0e:9a:e1:7d:d7:86:f5:
                    da:1a:0e:9d:d5:8a:06:56:72:ce:55:7e:d8:e5:9b:
                    db:ad:07:00:48:e0:95:c2:f8:87:85:69:c9:d6:28:
                    9b:7d:be:20:81:92:d4:3e:45:41:c8:18:e2:80:3b:
                    70:c9:70:c4:8b:71:4b:41:0d:87:9a:f5:05:d0:71:
                    83:77:99:a4:88:14:3c:3c:49:e4:bb:7f:9c:b2:0a:
                    5c:a0:28:ad:8a:1c:ec:3e:77:dc:f4:2c:83:69:98:
                    65:1e:3f:bf:6f:35:7b:bf:ec:fe:19:0a:7b:c0:2c:
                    52:80:65:07:7d:91:5b:68:2c:22:cb:89:94:e0:f1:
                    bd:a9:63:5b:aa:2d:dc:25:6e:6e:64:32:50:51:e7:
                    7a:14:73:9d:ce:22:9f:b1:e0:3b:8b:e3:76:b4:0d:
                    83:3c:46:11:43:dd:7a:b9:23:a5:d5:8c:2e:14:24:
                    54:e3:a4:df:31:52:ea:1c:42:38:d9:cf:34:38:1a:
                    29:10:4d:9a:a5:30:9c:87:fe:e7:f5:97:d0:f6:66:
                    ef:c9:79:8a:fc:c6:fe:dd:7b:bc:9a:1c:66:60:1e:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3A:B2:80:BC:00:F9:50:1C:89:0A:00:ED:E5:CF:1B:C2:1F:4A:64
            X509v3 Authority Key Identifier:
                keyid:51:80:B3:26:D4:97:3A:1F:A0:FA:CE:EA:2E:BD:FE:BF:DB:B6:68:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/3136382e3139342e3137362e302f32342d3234203d3e20323635343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:e9:9a:f8:50:4c:7a:fb:08:17:14:25:f0:22:9e:9b:3f:
         3f:82:35:0a:64:03:38:aa:d9:9a:f3:86:27:6b:88:fc:99:30:
         0d:c8:38:5f:4f:20:df:70:d8:61:3a:47:e0:88:81:4d:96:45:
         0f:e3:ca:b4:03:07:27:65:7e:05:5e:ce:3c:1e:16:ed:79:1e:
         5f:18:7f:1a:dc:76:9e:d8:c8:c2:2f:2b:62:a0:30:b4:20:09:
         47:c9:1b:8b:ae:f7:bd:96:26:6e:b6:11:6b:d7:d9:a7:a6:1d:
         e7:ad:66:15:0a:7d:ef:a8:0a:ba:d3:a3:cb:9c:77:e4:6f:f2:
         a1:81:b4:2c:4e:73:b8:e9:cf:f3:43:7d:56:38:54:4a:49:c7:
         b7:77:3f:db:da:9b:80:87:40:a2:4d:5c:97:f9:0b:b1:b4:11:
         ff:a9:f8:d3:01:5b:1f:0a:d4:a2:82:b8:c9:46:07:05:fd:4e:
         97:cc:d1:29:74:15:ff:39:fc:3e:e8:52:1d:08:45:59:18:34:
         0c:62:73:17:96:48:46:f9:a2:1b:b0:08:b9:62:50:c6:c6:8e:
         49:ab:9d:71:06:bd:81:84:94:05:74:43:06:45:82:d2:34:a7:
         78:94:4f:ba:da:cb:d0:98:a1:6e:07:83:d6:5b:b0:91:36:5e:
         ee:03:e1:6f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHzy6vmPYQS7UTXfDMiNUdfI09eIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE4MEIzMjZENDk3M0ExRkEwRkFDRUVBMkVCREZFQkZE
QkI2NjhBMTAeFw0yNTAzMjgxNjU5MzJaFw0yNjAzMjcxNzA0MzJaMDMxMTAvBgNV
BAMTKEFDM0FCMjgwQkMwMEY5NTAxQzg5MEEwMEVERTVDRjFCQzIxRjRBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa8yqwoneI1uGMp96OJn/TUbf7
51JfoVCMHd/qE5fl4BU6AoQlDprhfdeG9doaDp3VigZWcs5Vftjlm9utBwBI4JXC
+IeFacnWKJt9viCBktQ+RUHIGOKAO3DJcMSLcUtBDYea9QXQcYN3maSIFDw8SeS7
f5yyClygKK2KHOw+d9z0LINpmGUeP79vNXu/7P4ZCnvALFKAZQd9kVtoLCLLiZTg
8b2pY1uqLdwlbm5kMlBR53oUc53OIp+x4DuL43a0DYM8RhFD3Xq5I6XVjC4UJFTj
pN8xUuocQjjZzzQ4GikQTZqlMJyH/uf1l9D2Zu/JeYr8xv7de7yaHGZgHpDFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrDqygLwA+VAciQoA7eXPG8IfSmQwHwYDVR0j
BBgwFoAUUYCzJtSXOh+g+s7qLr3+v9u2aKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0gydkpMbUFvRHJCc2tVVXhWN3FqNUVvS0VOaDc3S1NSNEthTGI1Mjd0
U28vMC81MTgwQjMyNkQ0OTczQTFGQTBGQUNFRUEyRUJERkVCRkRCQjY2OEExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxODBCMzI2RDQ5NzNBMUZB
MEZBQ0VFQTJFQkRGRUJGREJCNjY4QTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIMnZKTG1Bb0RyQnNrVVV4VjdxajVFb0tFTmg3N0tTUjRLYUxiNTI3dFNvLzAv
MzEzNjM4MmUzMTM5MzQyZTMxMzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjCsDANBgkqhkiG9w0BAQsFAAOCAQEATPjp
mvhQTHr7CBcUJfAinps/P4I1CmQDOKrZmvOGJ2uI/JkwDcg4X08g33DYYTpH4IiB
TZZFD+PKtAMHJ2V+BV7OPB4W7XkeXxh/Gtx2ntjIwi8rYqAwtCAJR8kbi673vZYm
brYRa9fZp6Yd561mFQp976gKutOjy5x35G/yoYG0LE5zuOnP80N9VjhUSknHt3c/
29qbgIdAok1cl/kLsbQR/6n40wFbHwrUooK4yUYHBf1Ol8zRKXQV/zn8PuhSHQhF
WRg0DGJzF5ZIRvmiG7AIuWJQxsaOSaudcQa9gYSUBXRDBkWC0jSneJRPutrL0Jih
bgeD1luwkTZe7gPhbw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:46 2025 by rpki-client