Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3232203d3e203631383531.roa
File:                     3230312e3134392e3132342e302f32322d3232203d3e203631383531.roa (raw, json)
Hash identifier:          0bJPNBbLwGzXm7JgdN9V2drUET6BLoGqT8nfbS4NZk4=
Subject key identifier:   3C:81:2A:71:99:FF:69:09:82:E5:95:DB:CD:46:FE:91:58:E5:F6:7C
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       2F50F2F3FCD0A7D47D544DE5BF0D899A3D4CC681
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3232203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:27 +0000
ROA not before:           Wed 26 Feb 2025 19:31:27 +0000
ROA not after:            Wed 25 Feb 2026 19:36:27 +0000
asID:                     61851
IP address blocks:        201.149.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:50:f2:f3:fc:d0:a7:d4:7d:54:4d:e5:bf:0d:89:9a:3d:4c:c6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:27 2025 GMT
            Not After : Feb 25 19:36:27 2026 GMT
        Subject: CN=3C812A7199FF690982E595DBCD46FE9158E5F67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:d7:43:61:43:3f:f3:02:89:14:42:18:3d:
                    72:67:02:47:11:7e:5b:03:97:10:0c:97:d9:5b:28:
                    ff:e4:6b:2a:5d:52:3f:f6:28:65:a2:30:ac:54:66:
                    16:b1:6e:6b:ab:3b:0b:78:71:f7:42:e3:9d:f4:3a:
                    a1:bd:dc:ef:70:75:c3:10:45:5b:2d:25:7b:88:84:
                    30:0a:9c:57:ea:a4:c2:97:cb:b7:d1:93:c7:7d:d8:
                    e1:6f:32:e9:e4:f6:c6:bd:96:60:04:78:a1:f0:2b:
                    7c:16:7e:03:cf:04:f1:ef:2b:d0:7a:3e:44:97:06:
                    74:2b:17:8b:0a:40:59:42:02:13:c2:c3:98:53:30:
                    97:99:d7:2f:a8:eb:d5:83:e9:1a:d2:7d:ed:25:10:
                    8a:a2:a4:26:b6:3c:82:4e:73:ee:bf:31:a3:dd:09:
                    ac:f0:84:fa:54:1c:c8:72:c5:c5:21:56:ad:38:70:
                    73:86:f7:3c:f8:7c:ee:fb:9a:da:03:bb:f2:d5:7d:
                    ce:22:d1:1b:4a:01:06:f3:61:3f:f8:1c:c7:27:9b:
                    8f:20:db:8c:dd:87:10:b2:25:27:ec:c2:c1:e0:bd:
                    4b:9d:7a:c6:8e:2d:03:10:a1:c1:86:69:5f:7c:a5:
                    f0:9c:d5:9e:0c:3e:10:d9:f9:80:a6:a8:0a:58:b2:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:81:2A:71:99:FF:69:09:82:E5:95:DB:CD:46:FE:91:58:E5:F6:7C
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3232203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:1e:1a:30:a2:b6:1a:fd:fb:0b:f8:12:72:ff:59:d9:7d:18:
         07:2b:98:4c:31:a0:ab:8c:76:32:9b:ee:02:19:a2:85:09:c1:
         85:df:5e:97:54:1a:27:8a:24:48:12:db:73:76:8f:4b:05:e7:
         65:3d:5f:4e:22:c8:f6:e2:15:ea:14:ec:f4:8c:fc:6c:97:0a:
         da:eb:94:94:e3:10:0b:45:dd:d4:7f:e3:e9:76:b5:ee:c8:eb:
         69:74:32:86:bf:77:77:cc:ef:7e:d3:22:3d:2f:45:e1:3d:70:
         dd:69:c1:7a:23:cd:01:d4:cd:ed:08:a7:6a:ac:26:3f:37:6f:
         18:f5:9c:76:9b:bf:87:ca:dd:0a:f7:9a:bc:b4:30:cf:ff:80:
         28:72:5f:38:0c:7a:77:ee:e8:3c:ed:52:f7:68:48:3a:3c:f8:
         5e:91:4b:18:62:d7:c7:9a:02:b1:70:a8:f9:d3:b6:f0:6a:4c:
         68:94:fe:a2:4d:be:e9:ab:19:7d:a3:a9:a0:29:0a:6f:bd:42:
         d5:03:3a:d1:8f:5d:e3:e6:e4:ae:16:4c:f5:11:3b:3b:e7:e3:
         a9:44:bc:c4:ea:04:3d:e8:fa:d6:bc:04:e2:0d:da:b8:94:75:
         58:45:9c:d9:25:23:3d:6d:1a:ee:5f:38:5e:05:93:4b:35:9c:
         32:42:1f:5f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL1Dy8/zQp9R9VE3lvw2Jmj1MxoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZBNTVFMDQxRkEwRTVEMzk0QTE0ODA5MDIyNzUyOTZC
MTJDMjIyQTAeFw0yNTAyMjYxOTMxMjdaFw0yNjAyMjUxOTM2MjdaMDMxMTAvBgNV
BAMTKDNDODEyQTcxOTlGRjY5MDk4MkU1OTVEQkNENDZGRTkxNThFNUY2N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7tdDYUM/8wKJFEIYPXJnAkcR
flsDlxAMl9lbKP/kaypdUj/2KGWiMKxUZhaxbmurOwt4cfdC4530OqG93O9wdcMQ
RVstJXuIhDAKnFfqpMKXy7fRk8d92OFvMunk9sa9lmAEeKHwK3wWfgPPBPHvK9B6
PkSXBnQrF4sKQFlCAhPCw5hTMJeZ1y+o69WD6RrSfe0lEIqipCa2PIJOc+6/MaPd
CazwhPpUHMhyxcUhVq04cHOG9zz4fO77mtoDu/LVfc4i0RtKAQbzYT/4HMcnm48g
24zdhxCyJSfswsHgvUudesaOLQMQocGGaV98pfCc1Z4MPhDZ+YCmqApYsv0FAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPIEqcZn/aQmC5ZXbzUb+kVjl9nwwHwYDVR0j
BBgwFoAUr6VeBB+g5dOUoUgJAidSlrEsIiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC9BRkE1NUUwNDFGQTBFNUQzOTRBMTQ4MDkwMjI3NTI5NkIxMkMyMjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQTU1RTA0MUZBMEU1RDM5
NEExNDgwOTAyMjc1Mjk2QjEyQzIyMkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzIzMDMxMmUzMTM0MzkyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzODM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJlXwwDQYJKoZIhvcNAQELBQADggEBAIoeGjCi
thr9+wv4EnL/Wdl9GAcrmEwxoKuMdjKb7gIZooUJwYXfXpdUGieKJEgS23N2j0sF
52U9X04iyPbiFeoU7PSM/GyXCtrrlJTjEAtF3dR/4+l2te7I62l0Moa/d3fM737T
Ij0vReE9cN1pwXojzQHUze0Ip2qsJj83bxj1nHabv4fK3Qr3mry0MM//gChyXzgM
enfu6DztUvdoSDo8+F6RSxhi18eaArFwqPnTtvBqTGiU/qJNvumrGX2jqaApCm+9
QtUDOtGPXePm5K4WTPUROzvn46lEvMTqBD3o+ta8BOIN2riUdVhFnNklIz1tGu5f
OF4Fk0s1nDJCH18=
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:17 2025 by rpki-client