Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa
File:                     3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa (raw, json)
Hash identifier:          CByv+eSjmt8rgYOIIMsMjIiUDwttsg5AOZGDH8wIYJ0=
Subject key identifier:   3C:BA:1A:98:81:F1:88:04:4E:A3:08:93:B3:DB:0E:3F:EE:54:30:FD
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       2279FC982768B6C744AEB8C73617B1228FF55572
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa
Signing time:             Thu 06 Mar 2025 03:11:49 +0000
ROA not before:           Thu 06 Mar 2025 03:06:49 +0000
ROA not after:            Thu 05 Mar 2026 03:11:49 +0000
asID:                     266611
IP address blocks:        128.201.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:79:fc:98:27:68:b6:c7:44:ae:b8:c7:36:17:b1:22:8f:f5:55:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Mar  6 03:06:49 2025 GMT
            Not After : Mar  5 03:11:49 2026 GMT
        Subject: CN=3CBA1A9881F188044EA30893B3DB0E3FEE5430FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:8c:14:de:13:36:e8:0c:73:a3:16:8f:6c:
                    8b:24:d6:97:92:77:ab:95:5f:23:0e:04:7e:78:0d:
                    25:8b:92:7a:1f:46:c1:fe:60:ee:68:5b:e9:53:79:
                    05:4e:37:e7:23:a9:e1:44:6a:e8:49:56:bc:61:30:
                    48:24:d1:93:ee:a9:2b:1c:39:ff:40:bb:8b:6f:8f:
                    28:e0:0a:4b:0e:52:6d:52:ed:3e:6a:c9:d2:97:05:
                    4b:67:64:99:95:92:9b:ef:ad:0a:b7:7b:59:73:55:
                    49:35:46:b5:b8:a6:fb:47:53:dc:d4:8c:02:8d:a3:
                    8d:52:33:0d:6e:55:c5:36:46:63:96:f6:1a:db:83:
                    34:1c:6e:e7:f6:1d:dc:3a:f6:dd:ef:26:25:f6:02:
                    fc:ea:38:a1:e6:8b:8f:3b:60:a4:08:e5:03:24:3c:
                    de:5f:7d:16:c4:e8:23:1b:38:8c:28:26:64:c6:c8:
                    7b:2f:ae:b1:d1:19:fd:89:ca:d8:6b:44:0c:ea:6d:
                    d5:9a:c7:38:a1:eb:09:7e:fd:3b:89:59:02:4a:e2:
                    6b:0f:8f:a0:fa:e5:fe:dc:d6:86:31:98:2e:f7:4a:
                    c9:3c:88:81:6e:b9:e4:e8:2f:ce:ec:d1:65:c0:59:
                    1a:db:29:2d:93:51:0b:4a:bf:d8:e4:e1:91:20:75:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BA:1A:98:81:F1:88:04:4E:A3:08:93:B3:DB:0E:3F:EE:54:30:FD
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:2e:08:87:9f:3a:1e:34:a6:8a:7f:69:3c:90:bc:f6:28:98:
         3d:2a:92:ec:37:ff:d8:32:48:46:4c:b7:6f:b0:a8:26:32:fe:
         cc:6c:54:7d:a7:c2:13:3a:bc:8a:ce:01:5a:22:69:bc:dc:02:
         ea:81:33:b0:4b:7e:55:b2:70:e5:3b:d1:b7:2c:d2:cc:2b:24:
         72:3c:27:34:63:db:30:3c:c1:f8:61:fa:ad:57:8c:b7:5d:99:
         37:07:46:ef:98:87:e3:fc:3f:a1:6d:4f:b1:79:a5:db:bf:b6:
         34:0d:36:90:27:36:ce:34:16:e5:98:bc:13:08:69:56:5c:2a:
         7d:c1:f8:c3:26:e7:1b:bd:b3:ad:22:52:f6:04:c6:b0:a3:76:
         63:a2:d4:f9:df:b8:74:7f:73:84:4a:ac:18:75:3a:b4:a6:83:
         5f:b8:07:f1:65:e0:2c:05:a0:2b:6e:34:fd:0d:18:58:d4:4b:
         f5:63:2c:fe:6e:45:f1:27:91:7c:26:a0:15:e0:46:b0:4f:ef:
         d0:6c:c1:2b:e2:7e:7a:54:13:96:e6:2e:db:a3:2f:da:92:33:
         b6:f3:d5:84:7c:12:47:4e:64:c6:6c:58:6d:17:7d:3e:a3:3d:
         7d:36:63:1a:92:99:4c:d1:8f:20:0d:37:be:b1:77:9d:8f:88:
         c9:9b:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:24 2025 by rpki-client