Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3332203d3e203631383531.roa
File:                     3230312e3134392e3132342e302f32322d3332203d3e203631383531.roa (raw, json)
Hash identifier:          FDvxwWi4d8/7j/botvVvTo5G2IHt+eSMWYfxhUfp3XY=
Subject key identifier:   47:7D:FC:A5:8A:CF:44:63:42:02:F3:07:2A:35:07:0D:55:5A:2C:B5
Certificate issuer:       /CN=B07267C68D91254F5CE400BAF235C12DCD2D2C0F
Certificate serial:       45BD1BF6EDC54B26D2B41575998FCEA551CE9335
Authority key identifier: B0:72:67:C6:8D:91:25:4F:5C:E4:00:BA:F2:35:C1:2D:CD:2D:2C:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B07267C68D91254F5CE400BAF235C12DCD2D2C0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3332203d3e203631383531.roa
Signing time:             Tue 03 Dec 2024 19:53:59 +0000
ROA not before:           Tue 03 Dec 2024 19:48:59 +0000
ROA not after:            Tue 02 Dec 2025 19:53:59 +0000
asID:                     61851
IP address blocks:        201.149.124.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bd:1b:f6:ed:c5:4b:26:d2:b4:15:75:99:8f:ce:a5:51:ce:93:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B07267C68D91254F5CE400BAF235C12DCD2D2C0F
        Validity
            Not Before: Dec  3 19:48:59 2024 GMT
            Not After : Dec  2 19:53:59 2025 GMT
        Subject: CN=477DFCA58ACF44634202F3072A35070D555A2CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:80:df:ee:3a:f9:3d:85:37:4a:7e:06:e0:
                    02:18:ab:cc:f9:15:93:aa:bf:e4:ef:69:9e:49:14:
                    fb:7b:bd:4e:fd:3c:35:b7:d2:a8:75:5a:39:8b:a7:
                    81:82:94:84:a3:2f:ca:1e:9f:b8:d0:3b:d9:da:3d:
                    95:34:99:a0:16:d3:53:c0:49:a0:20:f0:76:7f:d6:
                    5e:0c:19:c2:e0:11:4e:1b:24:6b:e1:ce:d3:e4:f7:
                    d4:4f:ba:99:11:22:c8:6f:ef:64:ef:e6:f0:77:7c:
                    2b:9a:3d:3c:53:ae:e3:d0:7c:4c:8c:cf:c4:f7:75:
                    e3:c0:b8:41:5e:d1:0a:7c:ae:28:0b:f2:bc:18:3c:
                    fa:da:39:8a:eb:f6:f7:35:26:ef:97:60:76:4f:39:
                    20:ac:65:76:19:61:ee:84:9c:64:2c:c4:5d:83:37:
                    c7:ad:9f:97:4f:bf:38:41:97:ea:1d:77:14:95:57:
                    8f:8c:36:d8:e2:c3:99:30:35:d5:b2:48:e3:37:54:
                    59:2a:4c:1b:01:77:98:1c:bc:8c:39:f2:66:f1:12:
                    51:b6:e8:db:76:01:85:ce:01:ea:b7:b6:ec:f7:e5:
                    8d:49:b9:24:05:b5:07:2b:34:92:78:f0:9f:99:f0:
                    ef:4c:17:ed:99:c8:97:d2:07:06:51:90:7c:82:20:
                    a7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7D:FC:A5:8A:CF:44:63:42:02:F3:07:2A:35:07:0D:55:5A:2C:B5
            X509v3 Authority Key Identifier:
                keyid:B0:72:67:C6:8D:91:25:4F:5C:E4:00:BA:F2:35:C1:2D:CD:2D:2C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/B07267C68D91254F5CE400BAF235C12DCD2D2C0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B07267C68D91254F5CE400BAF235C12DCD2D2C0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3332203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:b1:d8:89:ee:b2:e0:26:46:01:32:0e:b9:c7:26:bc:3d:9a:
         70:c8:78:46:d0:75:ce:ee:43:8f:06:f7:7a:53:04:7d:03:cb:
         7c:39:af:cb:8b:1e:e7:9f:21:f2:23:1b:45:51:29:a7:bb:10:
         4b:e8:68:83:9b:d0:b3:ea:3a:31:5c:b6:9f:29:75:6c:4c:57:
         58:a9:d7:1e:24:8d:be:cc:a7:53:f3:74:ef:2e:07:35:84:f0:
         a9:62:98:b1:13:b0:6d:60:08:d5:67:4a:f5:33:c4:1f:80:32:
         de:a4:b5:e7:38:bd:dc:e7:d9:b8:8e:1e:05:0b:1e:47:26:83:
         54:10:fd:6b:36:61:e8:79:c5:85:3d:12:ba:78:8c:d2:15:e1:
         8e:bf:ea:9d:c9:01:60:e4:a7:2b:4b:dd:a7:50:04:89:59:ad:
         10:0b:76:95:88:d0:6b:77:7a:b2:02:f7:72:8d:e4:ad:40:35:
         d5:28:a0:da:cc:74:dd:c2:6f:6d:ef:a0:86:bf:a5:79:29:73:
         e3:c7:38:c9:1e:8a:a1:eb:08:68:82:5b:91:99:61:ac:ae:f6:
         ee:f2:51:83:2c:22:bf:03:7d:e9:3b:80:93:81:f4:d4:b2:b8:
         f1:79:7f:9b:fb:c9:12:f2:a3:24:54:51:53:b1:5c:c6:3d:6d:
         25:57:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:07:40 2025 by rpki-client