Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132352e302f32342d3234203d3e203631383531.roa
File:                     3230312e3134392e3132352e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          ffhqDED6PADcGfmYeILX7SXaZGcpukgEABmLR4Lkab8=
Subject key identifier:   55:67:6F:35:52:47:19:BA:EB:B8:16:DB:CE:D8:84:8B:79:76:3E:45
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       1855C675A669B82D45706096FBF2656EDBD66DC1
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132352e302f32342d3234203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:21 +0000
ROA not before:           Wed 26 Feb 2025 19:31:21 +0000
ROA not after:            Wed 25 Feb 2026 19:36:21 +0000
asID:                     61851
IP address blocks:        201.149.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:55:c6:75:a6:69:b8:2d:45:70:60:96:fb:f2:65:6e:db:d6:6d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:21 2025 GMT
            Not After : Feb 25 19:36:21 2026 GMT
        Subject: CN=55676F35524719BAEBB816DBCED8848B79763E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:10:31:41:ac:c8:4e:9e:46:46:23:2b:bf:
                    98:2e:1a:d7:54:6f:a0:44:85:b3:53:bb:7a:71:85:
                    cc:39:0c:55:1f:07:86:35:b0:a6:1e:a4:08:1e:23:
                    38:38:fc:6c:c5:54:2d:fe:5f:98:48:3f:d7:85:06:
                    50:a3:72:3e:51:b7:2c:6f:36:df:2d:de:4b:89:80:
                    87:d9:70:9f:42:ba:cc:d1:54:0e:c7:1a:62:67:2e:
                    87:d7:15:b4:67:9d:21:e0:89:66:63:39:e6:f2:82:
                    36:0b:29:45:95:d4:aa:82:c6:88:01:19:32:3f:fb:
                    9c:63:ee:86:59:2b:58:d4:57:40:16:89:35:0d:d7:
                    35:92:45:a8:4a:90:5d:05:f6:5d:1a:d7:4c:fb:2e:
                    9b:43:d5:d6:a1:0a:63:1e:1d:14:a1:f4:ac:ec:89:
                    81:82:6b:80:9f:af:11:fd:8f:e1:73:34:80:47:2e:
                    d1:21:c8:bf:3c:e4:f6:49:6e:a5:3a:50:95:8f:82:
                    57:1c:12:69:c1:59:c8:31:95:c9:b1:cb:54:45:f4:
                    e5:c2:32:b9:26:85:f9:d2:da:94:26:f8:51:35:19:
                    ba:d4:56:ed:22:c6:c7:94:e6:6e:a1:31:14:f2:58:
                    0c:20:94:88:c3:07:cf:11:9a:59:33:ba:35:63:77:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:67:6F:35:52:47:19:BA:EB:B8:16:DB:CE:D8:84:8B:79:76:3E:45
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132352e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:21:f9:be:20:60:46:40:bd:78:ba:4f:77:68:1b:b3:7c:
         a7:4f:a3:4d:ac:73:36:9e:ef:0b:a2:c3:53:89:ab:d6:fc:23:
         4c:87:e3:c8:29:b7:65:77:2b:23:82:28:8d:09:7e:ea:0f:b4:
         e5:6c:c5:81:62:40:e1:1e:dc:bf:2c:99:81:0d:c9:61:9c:31:
         0f:9d:c8:23:a6:89:21:66:f1:25:37:5d:b9:23:58:dd:19:6d:
         39:22:d0:7a:25:1f:4a:a1:f6:1e:0c:7b:e2:bc:58:89:6c:45:
         65:bb:97:5f:2b:c3:06:42:70:52:94:3e:de:cf:4c:8c:83:21:
         98:8a:de:ec:7d:a9:ef:73:81:96:99:54:f3:be:43:cd:0d:fe:
         0f:3a:07:ac:27:cb:aa:6a:a6:68:c5:3d:38:74:c1:f2:6c:e3:
         bf:93:05:06:ad:0d:98:ad:d6:c2:59:d5:6a:f1:f7:cb:ac:07:
         63:59:87:0a:c9:7a:4f:d9:c4:57:90:09:7d:bf:74:ff:74:97:
         66:29:e7:28:f7:99:41:2c:6d:36:76:4e:51:1f:bd:37:58:bc:
         ec:46:81:4e:6b:0c:59:3c:d7:cd:27:34:c0:47:2b:7a:68:43:
         41:ea:50:af:72:cf:22:98:98:52:76:d5:21:ec:7e:63:1d:f3:
         8e:36:7f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:10:10 2025 by rpki-client