Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132372e302f32342d3234203d3e203631383531.roa
File:                     3230312e3134392e3132372e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          hMcWsmqShgZpZIFbBqlawY0QOvSyN8a0YDPnR7RrpPI=
Subject key identifier:   CD:4A:2A:4D:31:74:3D:2D:1C:8A:8E:2C:16:54:18:44:F7:AE:6D:2E
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       433C0AA36E21402E19AA79B773D4D5365D7C204F
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132372e302f32342d3234203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:28 +0000
ROA not before:           Wed 26 Feb 2025 19:31:28 +0000
ROA not after:            Wed 25 Feb 2026 19:36:28 +0000
asID:                     61851
IP address blocks:        201.149.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3c:0a:a3:6e:21:40:2e:19:aa:79:b7:73:d4:d5:36:5d:7c:20:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:28 2025 GMT
            Not After : Feb 25 19:36:28 2026 GMT
        Subject: CN=CD4A2A4D31743D2D1C8A8E2C16541844F7AE6D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:87:c7:98:6b:29:67:d3:ce:86:58:99:51:
                    2c:1f:cb:d1:26:c6:28:11:7d:aa:72:35:97:50:21:
                    8a:85:be:31:07:03:3a:84:62:18:e1:91:a0:a2:a4:
                    d9:ad:14:78:44:5d:45:40:fa:ce:a9:31:cc:f1:76:
                    3f:8a:79:94:18:c1:6c:1c:d9:5b:e4:7e:a3:de:95:
                    7f:38:5d:22:40:5b:3d:f4:a4:f1:a2:47:33:27:1b:
                    06:b8:17:c9:78:70:93:77:43:c5:49:7a:02:6f:96:
                    14:0f:c7:b7:a8:24:8b:30:3f:88:69:59:d2:28:6b:
                    1a:b4:dc:d6:75:e8:2d:6f:96:1a:84:63:c5:f5:2b:
                    83:f1:28:3f:74:a3:fa:fc:b9:d5:8a:46:ea:8e:b1:
                    1a:88:b5:46:67:8d:7c:27:dc:ba:32:a1:2b:89:8e:
                    94:07:0e:01:05:83:ed:83:ce:c7:f0:9e:90:13:79:
                    8d:26:7e:7f:7f:bc:e0:18:c1:43:6d:2a:50:68:3e:
                    4f:56:90:38:ff:cb:e8:09:0e:66:3f:17:aa:00:40:
                    36:71:26:da:0b:48:cc:0c:fd:d4:46:92:9f:9b:30:
                    7c:d9:60:77:a7:cc:79:89:3f:45:fb:e0:10:52:f1:
                    8c:60:72:be:c0:27:b9:1a:28:6c:05:de:f5:31:07:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4A:2A:4D:31:74:3D:2D:1C:8A:8E:2C:16:54:18:44:F7:AE:6D:2E
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132372e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:16:6e:73:5c:52:dd:fc:a7:c4:94:69:07:42:bd:40:1f:17:
         d7:f6:e7:9b:e9:26:ca:6e:b6:9b:18:13:17:c1:bf:84:07:8a:
         4e:8e:74:c0:51:22:28:ad:34:74:69:67:ac:8d:96:d4:70:09:
         79:a5:e8:ff:54:5e:5e:05:b0:35:13:a0:6a:4a:34:2f:c5:e8:
         3d:a1:07:81:c0:8b:86:92:35:19:b8:b8:00:7e:d5:d8:72:82:
         08:92:7d:e3:70:83:d4:ca:e8:d3:0c:dc:87:76:42:6e:d8:ef:
         07:60:c2:4e:b1:56:8c:ea:7c:59:94:e0:a3:fd:8a:46:6b:52:
         88:39:d0:6a:b2:f5:1f:01:d7:53:ab:c9:5e:a5:b7:a5:0c:e1:
         dc:b4:2b:06:59:93:35:79:e0:cc:17:0f:41:60:14:3d:8a:c8:
         a6:65:8c:15:31:c1:41:34:73:03:d6:34:6e:f8:85:34:f8:e4:
         3d:fa:63:91:f5:b1:ac:44:dd:77:c9:2f:8e:11:59:46:35:0c:
         cc:62:c9:fb:c6:7c:8c:c1:75:45:7d:49:aa:20:56:c1:fd:e2:
         cf:b6:26:5a:06:60:cf:4d:5d:ad:56:42:eb:83:b6:1f:98:f6:
         6f:fb:7a:43:aa:29:b0:d2:bd:e0:3c:cc:b5:bc:ec:b3:0e:b9:
         7e:2d:81:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:49:26 2025 by rpki-client