Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/3133312e3235352e3230302e302f32322d3234203d3e20323632353436.roa
File:                     3133312e3235352e3230302e302f32322d3234203d3e20323632353436.roa (raw, json)
Hash identifier:          W18pJM3sACxIdZpa9xnsiQPYePxZKpYsn/WPAaq3gqA=
Subject key identifier:   0E:C5:68:9E:E3:99:A3:7B:AD:E3:57:8F:81:1C:A0:AA:C3:CF:C3:61
Certificate issuer:       /CN=C482D0929FF8D199FDC92401922F235EAC78F111
Certificate serial:       17F3EA6901B6E31BEAE7BEBF2EE3C285B94E121A
Authority key identifier: C4:82:D0:92:9F:F8:D1:99:FD:C9:24:01:92:2F:23:5E:AC:78:F1:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C482D0929FF8D199FDC92401922F235EAC78F111.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/3133312e3235352e3230302e302f32322d3234203d3e20323632353436.roa
Signing time:             Thu 27 Feb 2025 13:29:28 +0000
ROA not before:           Thu 27 Feb 2025 13:24:28 +0000
ROA not after:            Thu 26 Feb 2026 13:29:28 +0000
asID:                     262546
IP address blocks:        131.255.200.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f3:ea:69:01:b6:e3:1b:ea:e7:be:bf:2e:e3:c2:85:b9:4e:12:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C482D0929FF8D199FDC92401922F235EAC78F111
        Validity
            Not Before: Feb 27 13:24:28 2025 GMT
            Not After : Feb 26 13:29:28 2026 GMT
        Subject: CN=0EC5689EE399A37BADE3578F811CA0AAC3CFC361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:e0:1c:a4:bd:b0:1d:75:da:31:d7:63:95:
                    b2:3c:17:f1:63:b6:05:20:a8:ea:07:9e:90:03:7d:
                    f8:50:4d:86:8f:73:22:db:83:a3:3c:ac:c0:89:1a:
                    c9:57:b2:df:92:62:4b:8d:31:e9:49:cb:6f:d3:95:
                    b6:7b:c4:7c:a0:21:92:21:63:f8:eb:1b:fb:d9:1e:
                    eb:6d:be:66:ec:4f:a0:6d:02:5a:90:f2:06:48:54:
                    2f:a4:f6:69:99:30:59:5b:d8:2f:75:b9:ac:8e:fa:
                    86:5e:cf:2b:48:69:7e:c8:6c:43:61:f7:ec:99:ea:
                    79:e9:2c:bf:51:18:7b:89:84:b4:9f:f1:5a:16:29:
                    c9:64:a9:83:47:d3:e9:07:f8:11:4e:66:c5:32:b2:
                    56:2d:04:9c:8e:01:03:de:ba:e7:f1:ae:42:66:d8:
                    43:3b:93:b3:39:34:44:80:cc:b8:61:cf:56:c8:49:
                    64:91:fa:b1:1f:22:ef:0d:5e:8f:7e:cb:af:ec:1d:
                    d9:80:2d:e2:a8:37:6c:fe:73:ef:5d:34:c2:ae:03:
                    e7:19:ef:5f:8c:f2:31:87:54:1e:01:2a:cb:d9:9c:
                    85:4f:8c:b7:7e:85:5c:d3:79:19:63:dd:7d:2e:5e:
                    91:f1:a6:aa:59:8c:3f:37:e1:19:72:ad:39:48:b8:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C5:68:9E:E3:99:A3:7B:AD:E3:57:8F:81:1C:A0:AA:C3:CF:C3:61
            X509v3 Authority Key Identifier:
                keyid:C4:82:D0:92:9F:F8:D1:99:FD:C9:24:01:92:2F:23:5E:AC:78:F1:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/C482D0929FF8D199FDC92401922F235EAC78F111.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C482D0929FF8D199FDC92401922F235EAC78F111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/3133312e3235352e3230302e302f32322d3234203d3e20323632353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:ab:bf:fd:b3:2b:c3:7e:26:45:f3:85:43:95:af:f5:08:
         75:6a:d3:69:c8:cc:9c:88:69:ba:19:e3:e4:0b:cf:29:54:c8:
         24:3e:50:42:ed:f1:bd:2d:99:7a:df:80:98:45:60:43:d3:e9:
         70:e8:c6:e1:29:a4:78:55:ed:97:9a:88:ee:6c:43:71:f1:30:
         00:d8:61:c0:9c:4b:e9:7b:d7:07:6e:50:30:81:7c:f3:92:11:
         f5:cf:8c:6a:83:c3:f5:ba:12:c4:33:14:60:34:a3:57:74:cb:
         df:e8:f3:47:20:5a:4f:72:08:5d:02:ad:b2:b5:7e:03:d8:1a:
         08:35:84:e7:7d:99:a2:6b:43:66:f9:4c:d2:77:54:7c:f4:e4:
         de:ea:3f:8f:48:4c:28:0d:7d:31:7c:39:fb:4f:1b:dc:82:33:
         4e:1c:34:02:45:eb:35:4b:63:1c:b8:78:28:f5:1c:35:57:5f:
         14:49:0f:8c:4e:03:91:1d:a4:7b:ae:98:3d:4f:ad:e6:ee:ec:
         cf:49:f8:2c:00:1a:42:07:2a:79:31:ea:ad:b6:1e:e9:bd:3d:
         c5:8c:05:d1:30:5a:64:71:b5:fc:5e:d1:87:f9:7e:25:14:f6:
         0e:22:6b:9e:f3:9a:d9:98:79:36:3d:95:39:07:73:c7:84:15:
         5e:18:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:49 2025 by rpki-client