Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          8qMlQ9r+ngT4IUGTpbA8/a8L7k8+SKPz5Kd3+JXVP5E=
Subject key identifier:   99:63:62:EA:19:62:BB:8E:CF:C0:48:5D:00:39:72:05:57:F2:C7:5F
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       6C8BABB5E81C12801E5179195C576C066FBE458B
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa
Signing time:             Thu 06 Mar 2025 08:20:24 +0000
ROA not before:           Thu 06 Mar 2025 08:15:24 +0000
ROA not after:            Thu 05 Mar 2026 08:20:24 +0000
asID:                     263146
IP address blocks:        187.86.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8b:ab:b5:e8:1c:12:80:1e:51:79:19:5c:57:6c:06:6f:be:45:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Mar  6 08:15:24 2025 GMT
            Not After : Mar  5 08:20:24 2026 GMT
        Subject: CN=996362EA1962BB8ECFC0485D0039720557F2C75F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:e4:15:eb:be:16:f7:22:ea:87:ed:b4:ac:
                    9b:04:a2:82:f4:bf:0e:f5:a4:76:e1:bc:66:47:99:
                    86:d2:8e:0f:b8:18:23:ff:6e:11:bc:0d:c3:d3:44:
                    3b:c2:d2:7c:9a:b7:2e:53:e8:13:57:37:34:1e:a6:
                    f2:ea:76:23:05:96:12:be:8b:31:fd:7d:49:fd:d3:
                    85:e2:2e:8a:ff:2c:e9:23:4f:fe:d8:3f:1a:3c:61:
                    cc:8a:e7:ee:cc:10:c8:e2:a6:57:42:68:06:f6:27:
                    e3:59:57:77:e5:6a:23:23:a0:ba:c0:33:5e:87:6f:
                    8c:d1:b5:01:d9:ab:9d:51:f0:5b:2d:8a:3f:2b:00:
                    18:70:af:66:6d:95:b2:dd:ab:0b:a0:8e:89:a2:f8:
                    a1:5d:ea:37:d1:61:71:6c:51:9d:4c:77:52:b9:ff:
                    07:1d:30:e6:6f:83:ad:1e:06:6c:28:18:fd:53:86:
                    8a:c1:28:5c:f0:91:0d:2c:68:7e:7f:7d:61:db:0d:
                    18:61:55:bb:88:9f:65:2d:92:42:f0:aa:d4:c6:c7:
                    f8:a3:c9:33:ef:2b:67:4e:f7:2c:6e:bd:f0:1e:35:
                    ac:6d:ef:29:ab:12:13:09:ba:18:d5:3b:61:8a:e3:
                    65:39:ab:2b:54:97:ab:6a:ea:01:0b:18:88:1a:39:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:63:62:EA:19:62:BB:8E:CF:C0:48:5D:00:39:72:05:57:F2:C7:5F
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ca:82:4e:81:24:dc:47:4c:b3:77:4f:16:67:47:0b:1e:39:
         e0:30:17:dc:8b:7b:df:57:9d:09:46:05:13:b1:a2:5a:33:05:
         20:d6:47:da:db:25:61:9b:ef:a7:44:96:9c:a1:f6:20:da:18:
         8c:41:7e:f5:cf:54:0c:8f:03:4e:d3:ac:0f:b2:d3:e4:d3:bc:
         5d:81:a8:f3:93:c1:7a:b4:3e:8d:e4:a8:5c:4d:9f:16:5b:bb:
         9d:82:13:d9:40:59:2a:d4:d7:15:6d:70:dc:c2:7d:63:97:9c:
         d2:c5:54:15:23:73:a2:59:cc:b0:d4:39:05:eb:95:57:e5:9f:
         f2:38:0f:22:ae:01:8e:02:69:0c:13:91:04:67:80:b0:d3:0b:
         a5:0d:e0:7d:4c:04:f3:dc:c3:e8:5f:d7:b1:72:1b:ff:58:6a:
         aa:88:4d:a2:0b:63:cf:3e:9c:64:ab:e2:bc:46:71:35:8b:6c:
         a2:09:e3:86:75:5f:33:68:e4:67:fe:12:f4:33:c0:fa:51:34:
         6a:b0:93:5b:4d:4c:61:e9:33:d1:4e:4c:2c:19:a5:a4:6e:f6:
         ae:73:ac:b1:92:57:ff:9b:8d:45:5e:a3:7d:5f:24:88:44:d0:
         65:7d:7e:d2:5e:c0:be:ba:86:1d:a6:32:34:d1:d2:f0:2c:b2:
         0b:27:3c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:22:57 2025 by rpki-client