Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3138362e3235302e3132302e302f32322d3232203d3e20323632383137.roa
File:                     3138362e3235302e3132302e302f32322d3232203d3e20323632383137.roa (raw, json)
Hash identifier:          SDlK5X9qh5vMur24oJitJZ9ntDFuQi/5WO2zeem8/C4=
Subject key identifier:   25:EF:7C:4E:7B:86:DB:EB:98:C6:87:B7:D8:98:99:21:6C:8F:A4:A7
Certificate issuer:       /CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
Certificate serial:       643E72B5DFBA3EA42FE5EE21DDF1968A411EB2A3
Authority key identifier: 1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3138362e3235302e3132302e302f32322d3232203d3e20323632383137.roa
Signing time:             Tue 13 May 2025 19:18:34 +0000
ROA not before:           Tue 13 May 2025 19:13:34 +0000
ROA not after:            Tue 12 May 2026 19:18:34 +0000
asID:                     262817
IP address blocks:        186.250.120.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3e:72:b5:df:ba:3e:a4:2f:e5:ee:21:dd:f1:96:8a:41:1e:b2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
        Validity
            Not Before: May 13 19:13:34 2025 GMT
            Not After : May 12 19:18:34 2026 GMT
        Subject: CN=25EF7C4E7B86DBEB98C687B7D89899216C8FA4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:64:ab:65:83:e2:2e:73:db:f8:54:b2:40:04:
                    4b:18:64:88:fd:79:46:d3:ff:fd:9f:80:33:c0:cf:
                    41:f0:00:62:62:b3:b5:fa:f6:83:61:34:0d:f2:b6:
                    f9:25:91:b8:50:48:e7:92:3a:8e:d3:c0:a4:5d:1c:
                    63:af:9b:eb:c2:1a:e3:0f:82:ca:7b:1a:36:5d:7f:
                    8a:51:0a:19:54:0f:2f:d6:72:0a:a3:85:46:65:78:
                    0a:40:88:6c:a6:ea:81:f9:1a:c6:81:73:e3:d8:73:
                    c3:d3:06:14:dd:50:48:d9:73:c1:63:e8:d4:ca:69:
                    49:14:46:21:9c:8b:af:43:f8:cf:04:9b:56:c8:ea:
                    cc:ae:69:72:b2:57:0c:54:ff:f5:e9:ca:11:1c:57:
                    11:69:1e:fd:44:92:60:5d:e0:41:72:da:d5:10:ba:
                    fb:bb:ca:8c:49:81:e7:46:a6:dd:74:02:a6:e4:3b:
                    f0:df:39:e0:9b:9d:14:e4:e6:1f:60:ea:8b:4d:1f:
                    4d:07:bf:ef:75:c9:0f:4b:d7:37:d6:40:51:f9:02:
                    9a:21:8a:d8:88:94:ea:7d:80:3c:f5:9d:f3:0f:ab:
                    59:91:df:7e:74:aa:75:4e:1a:ce:57:86:c0:04:7a:
                    b4:92:ef:65:32:76:03:c7:8f:c3:e1:f5:10:7b:fd:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EF:7C:4E:7B:86:DB:EB:98:C6:87:B7:D8:98:99:21:6C:8F:A4:A7
            X509v3 Authority Key Identifier:
                keyid:1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3138362e3235302e3132302e302f32322d3232203d3e20323632383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:02:44:96:28:ea:f4:7c:ad:8c:bd:4e:7e:5c:bb:10:f6:ef:
         5b:cb:8e:9b:3c:9e:42:75:8f:33:d4:43:d4:3c:31:8f:18:f0:
         f8:da:56:3f:ee:fd:cf:d8:0d:60:39:ea:6f:0f:db:92:db:64:
         d4:21:8e:a2:95:cb:9a:60:7c:64:dd:f4:50:95:e4:8f:9b:c8:
         86:52:63:4f:aa:97:32:f9:b6:4c:f2:94:38:44:2f:87:89:6c:
         f0:90:49:df:08:b9:79:6d:89:9f:ff:57:d9:8a:52:34:24:5b:
         19:0e:d2:0a:f9:bb:7a:ec:bd:02:41:ed:87:d2:0c:cd:dd:b5:
         56:90:d4:fc:ce:3f:f7:74:35:a1:e3:47:60:b0:7c:66:c2:68:
         03:31:1e:13:b7:0c:3f:4b:31:62:db:3a:95:dc:43:20:c6:51:
         0c:17:71:c5:bc:24:28:68:bb:81:56:33:40:c3:88:64:14:98:
         70:8f:1e:a6:12:6f:61:94:71:ec:83:38:21:67:e5:d3:0c:cf:
         69:c7:01:6e:e1:92:de:99:f1:41:2f:21:56:49:0a:fc:bb:9d:
         36:ed:09:75:e7:45:17:4c:48:33:dd:a1:fe:9b:a4:d2:aa:71:
         d0:4d:1a:d3:d9:76:7d:1c:05:a8:5a:35:90:ed:11:3b:b2:97:
         a2:b7:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:46:15 2025 by rpki-client