Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa
File:                     3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa (raw, json)
Hash identifier:          S8hmTlLRX7ytwjGFkimNl0EkgqL9GWnHm/nrDTT3sdQ=
Subject key identifier:   86:47:5D:66:12:65:C0:8F:F1:59:D8:BB:B7:64:39:F9:C8:64:D8:8B
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       5F5DFBA2222DE37A890B96058B174178E7280F7D
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa
Signing time:             Tue 21 Jan 2025 16:49:21 +0000
ROA not before:           Tue 21 Jan 2025 16:44:21 +0000
ROA not after:            Tue 20 Jan 2026 16:49:21 +0000
asID:                     61876
IP address blocks:        201.150.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5d:fb:a2:22:2d:e3:7a:89:0b:96:05:8b:17:41:78:e7:28:0f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Jan 21 16:44:21 2025 GMT
            Not After : Jan 20 16:49:21 2026 GMT
        Subject: CN=86475D661265C08FF159D8BBB76439F9C864D88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:f3:f5:ad:e5:3a:2a:ef:3b:f4:17:45:ea:
                    04:1b:d9:77:b4:61:33:f3:93:58:06:c2:23:b4:b0:
                    d3:5a:0a:f5:ff:60:fe:a9:e0:f0:36:81:72:63:f5:
                    a9:7b:13:b2:29:a9:60:53:b4:2c:cd:6b:38:5d:de:
                    0f:e1:7a:da:4f:99:8b:5c:67:99:63:d7:db:ac:ed:
                    64:22:71:20:d1:4e:c8:1a:95:bd:2a:66:a7:6a:7c:
                    37:97:aa:b8:90:1e:3a:9a:ab:3a:84:f4:42:86:0f:
                    bc:7c:aa:4a:87:85:68:00:ee:6f:85:8e:a2:0f:38:
                    dd:de:21:88:0a:09:b0:50:e9:54:23:d9:58:07:46:
                    af:df:59:d6:9a:37:63:bf:00:bc:96:57:0b:65:c5:
                    8d:14:d7:f4:2b:07:b5:e2:47:d0:49:f3:4c:91:94:
                    2b:6d:0d:2b:04:d1:33:4a:f3:3b:ea:c2:96:95:5f:
                    98:5b:20:02:3f:fd:3c:bd:10:ff:20:81:a6:64:21:
                    26:87:e6:11:75:1f:7e:4f:4a:1f:ee:21:f0:ae:b0:
                    1c:7f:4b:5d:f3:aa:04:1a:4c:9b:29:4f:60:76:7d:
                    e7:e6:37:22:56:8b:13:ae:ee:80:a9:6c:c1:be:4f:
                    35:fd:1b:c1:9a:70:fc:bc:26:10:7a:74:2c:6f:42:
                    22:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:5D:66:12:65:C0:8F:F1:59:D8:BB:B7:64:39:F9:C8:64:D8:8B
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:ab:87:99:ae:6d:20:c9:3f:16:b8:b1:4e:c1:8b:f0:2d:
         38:96:1b:23:b0:cf:f7:76:4f:ae:71:44:f3:70:2c:d1:98:ee:
         e5:32:e6:05:6a:3a:b0:a7:9d:e7:d4:0b:04:b4:cc:72:65:3a:
         2d:96:d5:ec:7a:64:a9:c9:b8:26:40:60:a8:14:cd:f2:8a:b0:
         af:e5:38:9f:01:e7:42:28:cb:ec:8c:f3:c6:01:37:48:8b:f1:
         d1:d6:6e:c7:54:71:21:3e:54:38:af:aa:de:d1:52:8f:6d:c4:
         f3:98:7c:53:86:0a:c2:af:ea:8f:57:82:5e:8a:f3:66:51:35:
         99:f9:8d:97:0d:67:ef:f5:2c:85:c8:dc:94:c0:d3:e4:ec:aa:
         ae:2c:e3:ea:82:17:83:12:69:e8:df:f1:53:49:2b:5c:eb:c4:
         f9:d9:ad:fc:bb:e5:d9:56:cf:f3:63:54:69:c6:19:00:9d:5e:
         e5:21:cd:c1:b6:dc:d3:aa:41:29:1b:64:1b:79:42:1f:56:ea:
         c3:97:6f:47:a1:95:b0:84:40:47:c5:e9:83:43:62:3e:17:80:
         f7:ab:e8:52:b8:22:4e:f8:59:d0:13:49:0c:ce:89:d5:f9:dc:
         bc:97:83:a7:39:07:d4:8c:0d:4c:83:e4:e6:b6:e7:62:af:c7:
         70:5e:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:48:22 2025 by rpki-client