Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135352e302f32342d3234203d3e203631373835.roa
File:                     3230312e3133312e3135352e302f32342d3234203d3e203631373835.roa (raw, json)
Hash identifier:          uVCIYAxJ40POdqdIWOxkhGCYFO6CB8G1wO77LPAWoz4=
Subject key identifier:   48:3E:12:14:22:F9:87:3B:4B:78:C4:BD:DD:91:F2:3D:02:51:66:3F
Certificate issuer:       /CN=5D02A9D5EA4562DFA1998A8F4C882ACD6908671E
Certificate serial:       1EB71D651E4062C38754618D06CBFE9B4D2C41F9
Authority key identifier: 5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135352e302f32342d3234203d3e203631373835.roa
Signing time:             Tue 21 Jan 2025 14:07:44 +0000
ROA not before:           Tue 21 Jan 2025 14:02:44 +0000
ROA not after:            Tue 20 Jan 2026 14:07:44 +0000
asID:                     61785
IP address blocks:        201.131.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b7:1d:65:1e:40:62:c3:87:54:61:8d:06:cb:fe:9b:4d:2c:41:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D02A9D5EA4562DFA1998A8F4C882ACD6908671E
        Validity
            Not Before: Jan 21 14:02:44 2025 GMT
            Not After : Jan 20 14:07:44 2026 GMT
        Subject: CN=483E121422F9873B4B78C4BDDD91F23D0251663F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:31:98:07:9a:4e:34:af:93:37:40:ac:d2:
                    9f:bb:b2:2e:d7:7a:83:2b:92:7a:54:c1:45:74:20:
                    99:15:5a:e4:97:71:52:1e:9c:8c:52:bd:04:5f:4d:
                    34:cd:b7:a8:2f:c5:75:24:3a:15:9b:93:b6:5f:23:
                    7d:a4:9d:04:64:08:04:37:aa:96:cd:ad:7b:e0:2a:
                    84:70:0d:16:76:2e:43:50:5a:10:b6:73:3d:f4:5f:
                    86:37:ce:34:24:12:de:03:b4:54:b8:4c:82:cb:a6:
                    51:9f:c2:08:85:cc:85:72:f5:71:51:65:54:4f:49:
                    09:5e:4f:d4:d3:6c:1b:54:33:9f:8b:29:56:0c:07:
                    db:2d:b5:14:d4:1c:ff:d0:44:fc:fa:2f:43:c9:e0:
                    5d:4f:f8:06:a7:ef:a7:52:2f:78:01:8f:e7:16:fc:
                    dc:8c:b9:bc:fe:9c:c2:87:08:32:aa:c4:33:a3:d2:
                    a8:a8:11:35:ce:cf:0f:d7:b9:9c:93:1d:49:f9:4e:
                    db:58:45:1b:57:90:51:eb:74:4d:6a:92:82:8a:7d:
                    f4:68:c1:84:7f:e5:70:8a:13:61:eb:8d:2a:4e:10:
                    00:89:15:e7:ed:24:18:9b:60:4b:0c:e9:93:25:66:
                    6b:f8:de:97:31:d0:59:59:b2:e0:42:e7:34:43:ac:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3E:12:14:22:F9:87:3B:4B:78:C4:BD:DD:91:F2:3D:02:51:66:3F
            X509v3 Authority Key Identifier:
                keyid:5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135352e302f32342d3234203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:3a:ea:11:4f:d9:a4:8c:1c:99:00:27:c1:20:b0:c9:f9:3d:
         82:15:fb:8c:4e:81:9a:6d:b9:fa:be:e4:cf:3c:ae:4b:86:79:
         e8:23:b5:0f:d9:d4:d5:b8:85:19:09:1d:a4:27:b1:a3:3c:63:
         f2:9f:9b:30:b7:e8:7c:dd:d7:f5:0c:44:b6:3a:42:7c:39:ab:
         fc:39:5f:2c:d5:89:97:3a:17:33:3e:dd:f8:0b:c3:a4:42:fc:
         99:01:63:3b:e1:49:60:38:a9:33:37:ee:38:7d:5f:87:6f:81:
         40:dc:3a:8e:89:e1:7a:ab:25:6b:a1:ca:af:84:30:e6:ba:af:
         81:8e:d6:4c:51:c8:f2:bf:e2:20:e3:97:f7:a7:d8:4a:f7:9a:
         43:54:c2:32:f4:2c:ad:f8:ff:ff:55:26:54:04:69:69:e3:ad:
         5d:1a:1f:b3:eb:f3:51:e8:e4:0f:11:18:b8:74:07:58:20:5a:
         72:a6:d8:c9:51:0e:ac:f7:23:6a:14:39:4e:52:42:1e:17:c7:
         99:73:ab:d7:54:6d:15:e7:c3:f1:05:d8:de:3b:9a:78:02:f2:
         57:d9:18:6f:fc:ac:22:8b:50:6f:86:93:35:5c:4f:fb:eb:cb:
         00:27:41:d6:1f:14:2f:b6:a6:81:e8:35:e4:b3:fe:a8:1f:cd:
         f0:ce:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:20 2025 by rpki-client