Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          LmlbX93/ty6P+S2GDsz5LQMEHFtN822DfakBsyw5oic=
Subject key identifier:   0F:60:7D:C9:7F:A4:83:8A:D2:20:CB:26:CB:53:9B:F1:89:58:69:FD
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       26AFC6A0D722FB83E06C87D00CF76E3C8F0EC75A
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     263512
IP address blocks:        191.243.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:af:c6:a0:d7:22:fb:83:e0:6c:87:d0:0c:f7:6e:3c:8f:0e:c7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=0F607DC97FA4838AD220CB26CB539BF1895869FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:41:d7:b7:9e:91:4b:a7:80:5f:12:bb:59:
                    0f:6a:78:99:d3:7b:04:57:32:70:f3:6a:72:eb:de:
                    7a:60:75:10:5e:48:9e:f2:2c:e2:ea:74:1a:14:e8:
                    50:92:2a:bd:a0:61:f9:6e:d2:b1:37:c3:4e:ad:7b:
                    8c:ba:0c:38:6e:ac:ad:ca:80:6d:4c:90:d2:cf:67:
                    ff:ad:80:54:1c:64:97:4e:49:41:51:8e:5a:c9:26:
                    88:22:58:a8:71:cd:f9:bf:a1:09:7c:76:db:7a:7d:
                    3a:c7:f2:4b:22:a4:ea:eb:1a:23:6d:fe:83:a7:fe:
                    45:9d:49:19:d6:78:37:0b:b7:99:39:8d:1e:68:8a:
                    30:b4:ba:1f:22:fb:43:1d:63:7a:72:0c:2d:ff:17:
                    12:eb:3f:94:9e:fb:ce:f2:ea:9e:ea:6d:40:c0:dd:
                    45:ae:9d:48:c0:91:1e:ea:0d:48:65:a2:87:6d:1a:
                    49:a4:b9:9e:2a:06:d3:37:03:f0:a6:ce:e9:4a:1b:
                    dd:4d:cb:e2:d7:50:a5:8e:60:23:44:39:63:7a:09:
                    2b:d3:a0:15:4c:90:fa:cd:b3:46:c8:ce:a7:33:91:
                    28:4a:ff:1c:74:20:af:4f:36:2f:e4:7f:f2:bc:82:
                    e9:ff:5b:fe:e4:68:c4:22:95:28:44:90:28:41:90:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:60:7D:C9:7F:A4:83:8A:D2:20:CB:26:CB:53:9B:F1:89:58:69:FD
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:d2:2e:9d:43:b8:68:29:62:57:be:15:5f:c0:47:25:a3:07:
         c5:4d:ba:9e:04:a4:04:0d:8f:ca:66:e1:94:e0:32:59:ca:ae:
         fe:95:12:02:ff:56:0f:86:e0:44:c8:c6:1a:06:23:61:bd:9d:
         c7:16:8d:ca:96:0e:f1:00:eb:dd:21:53:4c:5f:15:e1:6d:ab:
         70:e9:fc:97:a1:71:09:b7:b7:b8:02:e6:8e:d0:de:4a:33:be:
         11:4e:67:e1:cc:eb:3c:22:48:d9:cb:1c:5c:07:20:a1:5b:e5:
         da:b0:a3:d5:95:69:17:58:83:3f:88:61:b9:52:48:86:cc:d7:
         a1:37:e6:dc:c4:a2:37:c9:83:02:52:c1:af:08:47:6b:bd:98:
         04:f1:9a:2c:66:48:5e:b2:e9:31:3a:1e:5b:6e:de:0d:ab:99:
         9f:28:4d:b2:8b:7c:a9:6c:c9:38:4c:80:cc:9d:47:55:2e:92:
         f6:d6:78:1e:f8:b1:fd:0b:43:05:cc:05:55:5e:b9:c1:a1:92:
         ba:d2:8e:77:34:58:e2:cc:fa:30:ff:b9:8d:ce:11:58:13:af:
         ae:65:26:3d:45:dc:55:18:62:e9:bc:90:40:5e:07:78:eb:df:
         cf:87:f1:dd:99:9b:ad:c2:1c:1d:47:c4:3f:c2:89:f5:5e:91:
         52:5b:87:5c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJq/GoNci+4PgbIfQDPduPI8Ox1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgwREJDRTI2QzgwQzg2OUZFOEJENzM0NzcxOTlBREQx
MEU0NDRBMjAeFw0yNTAzMDUxODU1MDRaFw0yNjAzMDQxOTAwMDRaMDMxMTAvBgNV
BAMTKDBGNjA3REM5N0ZBNDgzOEFEMjIwQ0IyNkNCNTM5QkYxODk1ODY5RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo80HXt56RS6eAXxK7WQ9qeJnT
ewRXMnDzanLr3npgdRBeSJ7yLOLqdBoU6FCSKr2gYflu0rE3w06te4y6DDhurK3K
gG1MkNLPZ/+tgFQcZJdOSUFRjlrJJogiWKhxzfm/oQl8dtt6fTrH8ksipOrrGiNt
/oOn/kWdSRnWeDcLt5k5jR5oijC0uh8i+0MdY3pyDC3/FxLrP5Se+87y6p7qbUDA
3UWunUjAkR7qDUhloodtGkmkuZ4qBtM3A/CmzulKG91Ny+LXUKWOYCNEOWN6CSvT
oBVMkPrNs0bIzqczkShK/xx0IK9PNi/kf/K8gun/W/7kaMQilShEkChBkF35AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUD2B9yX+kg4rSIMsmy1Ob8YlYaf0wHwYDVR0j
BBgwFoAUKA284myAyGn+i9c0dxma3RDkRKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZy
TmQvMS8yODBEQkNFMjZDODBDODY5RkU4QkQ3MzQ3NzE5OUFERDEwRTQ0NEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MERCQ0UyNkM4MEM4NjlG
RThCRDczNDc3MTk5QUREMTBFNDQ0QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmcUJkbldUVVVQMXJacHhwdm5tYlRzS0JQRVVOanoxZlNNd1ZVOThmck5kLzEv
MzEzOTMxMmUzMjM0MzMyZTMyMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/zyzANBgkqhkiG9w0BAQsFAAOCAQEAqtIu
nUO4aCliV74VX8BHJaMHxU26ngSkBA2PymbhlOAyWcqu/pUSAv9WD4bgRMjGGgYj
Yb2dxxaNypYO8QDr3SFTTF8V4W2rcOn8l6FxCbe3uALmjtDeSjO+EU5n4czrPCJI
2cscXAcgoVvl2rCj1ZVpF1iDP4hhuVJIhszXoTfm3MSiN8mDAlLBrwhHa72YBPGa
LGZIXrLpMToeW27eDauZnyhNsot8qWzJOEyAzJ1HVS6S9tZ4Hvix/QtDBcwFVV65
waGSutKOdzRY4sz6MP+5jc4RWBOvrmUmPUXcVRhi6byQQF4HeOvfz4fx3ZmbrcIc
HUfEP8KJ9V6RUluHXA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:15 2025 by rpki-client