Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa
File:                     3230302e31332e38372e302f32342d3234203d3e20323730343430.roa (raw, json)
Hash identifier:          0wOA9Gy4hfyQOUwQ4IIDnTzFJWmpCsCgvpyCgBVLwJc=
Subject key identifier:   67:3F:21:C7:40:B3:92:48:9D:09:A5:E4:4E:F5:17:84:5A:5D:26:91
Certificate issuer:       /CN=972E69522EA7E06655376241FB13ED39AF30B19D
Certificate serial:       79AF41608A9D125B484F7535A242442904CD2BC9
Authority key identifier: 97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa
Signing time:             Tue 28 Jan 2025 18:18:52 +0000
ROA not before:           Tue 28 Jan 2025 18:13:52 +0000
ROA not after:            Tue 27 Jan 2026 18:18:52 +0000
asID:                     270440
IP address blocks:        200.13.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:af:41:60:8a:9d:12:5b:48:4f:75:35:a2:42:44:29:04:cd:2b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972E69522EA7E06655376241FB13ED39AF30B19D
        Validity
            Not Before: Jan 28 18:13:52 2025 GMT
            Not After : Jan 27 18:18:52 2026 GMT
        Subject: CN=673F21C740B392489D09A5E44EF517845A5D2691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:a3:80:e5:89:30:a8:c1:24:0c:35:43:37:
                    02:46:2a:aa:ed:86:91:4a:2d:c6:0a:d2:6f:47:ee:
                    eb:6c:26:d1:8f:bb:99:ad:fe:d6:af:9c:e1:88:5d:
                    7a:a9:6d:7a:9d:bf:72:90:9d:86:10:43:8b:03:5b:
                    92:d4:af:2c:61:41:37:aa:07:57:ee:54:83:53:72:
                    83:4e:f8:d7:3a:a1:a6:be:3a:1a:87:60:88:da:ca:
                    bc:11:a2:46:15:21:a0:ab:f3:db:70:fa:64:50:5d:
                    e9:93:d1:39:b5:cb:0e:2c:30:4f:ec:64:74:02:2c:
                    2a:72:90:cd:88:ff:21:d8:a5:cd:29:89:e0:d2:ee:
                    cb:ae:8c:67:a2:0c:7e:36:91:5f:09:6a:c3:0e:da:
                    21:3e:a7:6b:16:1e:cb:af:4e:2c:11:82:73:db:e8:
                    10:63:b5:30:5f:0a:d2:d0:de:28:63:cb:21:cd:5d:
                    0c:ea:e6:d7:fc:dc:35:c6:f1:1f:a5:6d:5d:dd:6c:
                    af:99:9c:75:9b:bc:00:0e:03:2b:a4:08:81:8c:45:
                    d4:4f:8e:c8:fe:a8:79:19:79:f9:e1:67:0b:14:85:
                    e8:ef:40:ce:ad:61:94:1a:a0:06:b8:e8:c5:92:9e:
                    df:89:be:a7:21:d7:bf:df:73:3f:7b:3f:9b:3a:41:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3F:21:C7:40:B3:92:48:9D:09:A5:E4:4E:F5:17:84:5A:5D:26:91
            X509v3 Authority Key Identifier:
                keyid:97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ca:68:0b:cd:98:e9:c8:49:0e:df:57:62:bf:85:0d:a2:17:
         d4:dc:cd:8c:a0:72:0a:3b:28:2d:61:dc:32:76:5f:08:56:e3:
         61:1e:29:05:04:43:ed:35:f3:67:bc:5b:d5:52:90:90:89:bf:
         fc:d8:b1:d4:09:6c:9a:d6:ac:7a:53:06:cc:f8:3b:c0:b1:e7:
         43:a4:7f:32:fd:43:42:74:4c:4e:10:ed:d4:27:4b:75:0f:0c:
         2a:9b:3f:b7:fa:eb:2c:cb:a0:be:1f:7a:6f:b2:93:3b:c5:f6:
         9e:3a:1f:8f:a7:6d:61:55:ad:1b:5f:de:9b:59:6e:79:73:c7:
         aa:e5:a2:54:1b:ac:13:8d:c4:ca:af:cf:89:08:3b:93:a3:b0:
         c9:d9:77:2a:f9:ab:c8:35:1c:92:8e:f7:e9:34:ba:3b:9f:b3:
         5c:5d:21:00:73:e8:f4:2d:46:40:99:9f:cb:21:ff:80:14:04:
         64:7a:ed:1a:a6:8e:48:9a:de:ca:a4:9a:79:8d:32:b9:4a:53:
         c2:01:a2:02:c8:40:9f:be:57:88:b3:7d:da:7a:3f:88:8e:24:
         a2:9d:83:92:40:d0:30:37:e0:91:f2:bb:fa:3d:37:ed:6e:f2:
         3f:fa:4e:7c:f5:fa:bc:a8:f4:9a:86:13:66:5a:73:d5:7c:9e:
         ad:ba:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:25:23 2025 by rpki-client