Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230322e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230322e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          vbCcgUGpX4c8KIdp/9F0M8YN3wd+yQYBsb1o7+NaIxA=
Subject key identifier:   73:FE:2C:3E:AA:D4:F7:B2:1C:D6:A6:C4:A9:EB:3F:32:EB:71:6A:31
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       0A7EC06B26547FFF639D66F5AD45A44CFCCE8D81
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230322e302f32342d3234203d3e20323633313436.roa
Signing time:             Thu 06 Mar 2025 08:20:29 +0000
ROA not before:           Thu 06 Mar 2025 08:15:29 +0000
ROA not after:            Thu 05 Mar 2026 08:20:29 +0000
asID:                     263146
IP address blocks:        187.86.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7e:c0:6b:26:54:7f:ff:63:9d:66:f5:ad:45:a4:4c:fc:ce:8d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Mar  6 08:15:29 2025 GMT
            Not After : Mar  5 08:20:29 2026 GMT
        Subject: CN=73FE2C3EAAD4F7B21CD6A6C4A9EB3F32EB716A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:aa:7a:f1:d7:7c:07:5f:12:1d:50:80:61:
                    8e:5a:e6:b7:56:73:48:fc:dc:f4:44:8c:a1:7c:40:
                    bb:f0:3e:8e:aa:d2:77:bb:19:c6:1c:5c:1d:52:fa:
                    02:95:53:00:ed:b1:04:f6:72:2a:e5:ac:e9:30:98:
                    0d:7d:89:80:48:78:23:31:06:d7:45:08:0f:f3:b3:
                    94:9b:22:0d:c1:0b:de:73:79:3c:8c:1d:bb:80:88:
                    a1:b1:d3:a1:9d:15:06:ee:31:91:a6:6a:02:d9:2d:
                    be:1b:47:77:7e:1b:00:3f:b5:9c:14:f8:9b:eb:88:
                    2e:2d:4c:4d:f1:de:9e:80:7f:7b:9d:d0:01:3d:b9:
                    f5:dc:a1:3c:4b:4c:f2:70:5b:66:c7:87:29:50:e4:
                    91:e9:15:77:01:e2:5f:31:9c:4f:d4:54:24:08:9b:
                    35:49:e9:bd:72:2d:03:11:66:8a:84:a8:df:0c:0f:
                    80:c6:3f:7e:29:9d:21:74:ba:ed:f1:b4:6e:f9:26:
                    ce:77:d5:c0:78:c1:53:e8:10:37:f7:f5:4f:2b:46:
                    47:47:0d:62:83:02:ba:34:8d:98:22:e1:25:8c:c9:
                    a9:9d:0b:ff:4b:a3:9e:b2:6c:82:f4:ee:f2:df:a4:
                    63:ab:55:b6:e3:59:2f:ea:c8:42:f8:e2:36:e2:39:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FE:2C:3E:AA:D4:F7:B2:1C:D6:A6:C4:A9:EB:3F:32:EB:71:6A:31
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230322e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:57:83:89:11:cf:a0:97:44:a8:aa:1c:60:c4:92:f9:68:ba:
         ab:6a:c7:41:b1:19:80:28:0b:e1:61:dd:35:e6:26:27:57:dd:
         70:dd:bd:3f:d0:87:59:57:bf:01:14:bb:ba:06:a4:9f:77:ec:
         57:af:e7:ff:be:f5:b3:a5:03:27:1d:1c:98:69:7f:d0:a1:41:
         fd:06:d1:43:02:75:a5:1f:a3:2e:db:7e:36:ad:f1:94:00:43:
         88:e6:89:d3:b7:a5:97:11:12:91:e9:d7:fd:eb:35:e6:1f:e4:
         ba:6d:fe:cd:aa:34:01:89:a3:da:ed:ad:1e:71:d3:d2:c5:5b:
         09:c8:d9:ea:4f:42:f2:a1:82:26:6f:a4:6d:d9:c7:e7:2e:c9:
         50:ef:84:3e:05:25:e5:af:1c:ed:a1:6e:e9:24:f5:1a:95:07:
         e6:ff:0c:e1:8a:03:d9:c0:fc:6b:a3:70:0c:ab:3c:cb:74:59:
         9e:da:7d:a2:6f:62:d8:10:c4:ca:51:eb:e0:1f:3f:8b:44:c6:
         95:04:61:d1:32:07:3e:f9:11:db:f3:4b:62:a8:ec:15:de:67:
         7c:e8:f9:d2:48:17:74:5b:a3:0e:07:79:62:60:db:12:7a:4a:
         ca:fd:40:e6:52:44:67:07:7e:ce:78:91:b6:d5:8e:57:20:a0:
         23:ee:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:37:02 2025 by rpki-client