Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/3230312e3138322e3130342e302f32332d3233203d3e20323637353038.roa
File:                     3230312e3138322e3130342e302f32332d3233203d3e20323637353038.roa (raw, json)
Hash identifier:          TshrSzB4kwGjbstmS6SOYrKwSvuIBu4lN/+GHZbTCoo=
Subject key identifier:   D2:55:7D:8B:8B:8D:FF:64:4B:58:16:93:31:3D:82:BB:36:E4:8E:8C
Certificate issuer:       /CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
Certificate serial:       6C3E30C2CA6F77B6FD071EA5FC9678CCE9EECF74
Authority key identifier: 2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/3230312e3138322e3130342e302f32332d3233203d3e20323637353038.roa
Signing time:             Sun 28 Jul 2024 19:41:45 +0000
ROA not before:           Sun 28 Jul 2024 19:36:45 +0000
ROA not after:            Sun 27 Jul 2025 19:41:45 +0000
asID:                     267508
IP address blocks:        201.182.104.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3e:30:c2:ca:6f:77:b6:fd:07:1e:a5:fc:96:78:cc:e9:ee:cf:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
        Validity
            Not Before: Jul 28 19:36:45 2024 GMT
            Not After : Jul 27 19:41:45 2025 GMT
        Subject: CN=D2557D8B8B8DFF644B581693313D82BB36E48E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:89:ba:00:fa:18:13:f8:24:03:aa:22:e1:32:
                    95:99:a5:82:3d:28:cd:a8:dc:2f:b9:ea:d8:36:b1:
                    5d:8b:f3:de:98:47:ce:e1:21:30:b0:b7:1b:59:f5:
                    ae:a6:93:31:01:e0:26:b4:fe:65:1d:dd:22:ab:b4:
                    73:0b:d9:51:4a:45:7b:d6:2f:f9:50:10:6e:dd:92:
                    52:5f:89:d7:d1:a1:48:9c:4e:02:84:d1:c2:e8:a8:
                    0a:97:b3:52:8c:64:ae:4e:17:7f:2b:08:eb:22:62:
                    8e:44:7e:84:19:7c:ad:80:2f:e4:0d:35:e5:49:21:
                    2c:ca:22:c5:4b:bc:72:91:e4:20:ad:aa:f9:de:f4:
                    7a:30:d6:cd:b9:6f:94:86:16:c2:b0:07:b0:b0:56:
                    e4:22:42:2c:0e:e1:c4:87:20:77:2d:3c:92:1f:10:
                    7e:0d:df:15:8d:df:0d:ad:4e:63:49:e4:0f:0f:e1:
                    b8:c2:53:66:ff:e0:ab:88:6a:8f:91:5e:6a:34:46:
                    4c:ed:5f:89:c0:05:f6:aa:00:67:f3:fc:c6:d2:4f:
                    95:1b:ed:10:55:98:f8:68:fd:3e:56:fc:a6:e6:5f:
                    7d:cc:13:99:dd:e7:d3:0a:51:72:bd:23:e1:2e:97:
                    ab:c1:88:ff:61:1a:aa:50:4a:99:d2:8e:6d:e9:cf:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:55:7D:8B:8B:8D:FF:64:4B:58:16:93:31:3D:82:BB:36:E4:8E:8C
            X509v3 Authority Key Identifier:
                keyid:2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/3230312e3138322e3130342e302f32332d3233203d3e20323637353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:b6:b3:08:7e:a4:99:57:f8:2d:ea:8c:3a:1f:81:95:e8:b4:
         2e:89:df:51:24:01:ee:20:ca:8b:00:f8:31:c9:6b:09:80:5a:
         41:8b:1e:cc:90:d1:b5:2d:09:1a:1b:ff:0a:e9:40:1e:70:a1:
         7b:8a:fb:6b:d0:dd:59:67:44:bc:c9:04:6e:e8:6d:d9:3b:8d:
         d3:27:08:5b:ee:8a:1e:12:99:04:dc:3b:26:4a:65:b9:5e:89:
         9c:af:de:5c:aa:8a:a3:93:a0:c4:ce:a6:31:b5:6a:d8:68:3f:
         3a:13:e9:ef:f8:d8:b9:5a:45:6c:25:e7:cc:01:24:65:2a:c4:
         eb:4c:e5:45:9d:6b:30:be:68:66:97:36:9a:08:19:7f:92:88:
         86:3d:c6:4c:ed:9a:49:cb:a5:d2:35:ce:de:1c:2d:a0:39:c1:
         48:57:17:7d:0c:9b:2a:ad:eb:1c:75:67:99:97:77:dc:4f:3c:
         3e:db:3b:b9:fc:cb:e1:11:6f:4e:d3:5b:50:e1:f0:01:01:ac:
         8e:f5:ee:4f:6d:86:ca:62:c7:16:b3:11:74:71:d9:f3:a5:13:
         00:7e:37:c5:0d:12:56:44:1c:67:2a:c8:40:8f:77:fb:3c:05:
         ea:fb:5b:58:58:23:2c:84:a2:5d:76:da:a0:ba:6b:ca:20:e8:
         9b:60:ee:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 16:15:09 2025 by rpki-client