Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234342e302f32332d3233203d3e20323635323338.roa
File:                     3136372e3235302e3234342e302f32332d3233203d3e20323635323338.roa (raw, json)
Hash identifier:          E+Kciinrr6nptcTotRoaMmnA0/IKPgB5ewhOmw6Rk4A=
Subject key identifier:   5E:61:EA:CA:EC:3F:E3:5A:F7:5C:40:E9:6B:F3:9A:3B:38:4A:9B:36
Certificate issuer:       /CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
Certificate serial:       58AEFBC874AF29B6831C83023B78ACF3F03A9363
Authority key identifier: F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234342e302f32332d3233203d3e20323635323338.roa
Signing time:             Fri 20 Oct 2023 22:56:29 +0000
ROA not before:           Fri 20 Oct 2023 22:51:29 +0000
ROA not after:            Fri 18 Oct 2024 22:56:29 +0000
asID:                     265238
IP address blocks:        167.250.244.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ae:fb:c8:74:af:29:b6:83:1c:83:02:3b:78:ac:f3:f0:3a:93:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
        Validity
            Not Before: Oct 20 22:51:29 2023 GMT
            Not After : Oct 18 22:56:29 2024 GMT
        Subject: CN=5E61EACAEC3FE35AF75C40E96BF39A3B384A9B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:d5:7b:f8:ad:7c:98:dd:88:3e:13:70:37:
                    ff:6f:21:47:d3:5a:08:c4:65:af:a7:67:51:4d:61:
                    d0:88:91:14:39:9b:6e:fd:e3:0b:34:44:7f:1c:d1:
                    51:7a:3e:02:a7:b7:82:55:d6:b6:25:10:3c:a7:17:
                    0d:d5:d3:d6:d0:ec:a1:96:68:55:6d:78:d9:e9:1c:
                    1f:c8:e2:a7:f5:53:ea:f4:de:98:85:31:0e:f8:9b:
                    c2:b4:25:b3:a3:b2:97:b8:a1:67:ad:04:aa:cc:5b:
                    4d:e9:b8:1c:9b:b9:76:65:a6:78:96:38:e2:5f:69:
                    1b:6d:48:93:c0:57:00:ab:bd:06:2c:46:95:54:7b:
                    38:6b:b6:e7:40:19:06:62:b2:7d:90:ec:1c:2e:d8:
                    d8:e0:46:2d:ac:e1:f1:40:4d:6c:e7:27:48:9c:f2:
                    76:35:51:9e:a0:82:36:31:3d:24:cc:12:88:06:b9:
                    ba:37:33:5d:5b:00:4b:86:f9:ce:fc:31:68:37:61:
                    6e:cf:90:f2:a5:3a:d3:32:b4:d0:f9:48:e8:b3:ef:
                    56:c6:55:b3:f0:08:b3:36:af:87:67:7a:f7:3a:e5:
                    29:3f:92:fa:6f:1d:39:84:94:73:74:ef:58:a7:b9:
                    de:b0:e4:16:6c:ab:dd:8d:51:ca:5a:8b:a8:64:3c:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:61:EA:CA:EC:3F:E3:5A:F7:5C:40:E9:6B:F3:9A:3B:38:4A:9B:36
            X509v3 Authority Key Identifier:
                keyid:F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234342e302f32332d3233203d3e20323635323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:1d:f2:d8:dc:61:ee:42:96:c5:97:0b:18:e0:41:25:84:1c:
         5a:95:64:13:6e:06:23:0c:2f:f0:aa:4a:fb:c1:61:68:0c:1b:
         63:62:d2:41:eb:72:53:61:40:c7:0d:a0:ab:4f:9e:8c:15:6e:
         56:03:26:58:79:2f:4c:20:01:bb:e3:2f:9b:aa:23:ea:02:c4:
         44:2c:f8:24:43:db:39:fa:f5:30:67:16:b5:ee:1c:a8:86:24:
         ab:3e:d1:4b:b7:de:a5:a7:a7:04:f5:9c:40:27:48:b0:4a:0f:
         c8:7a:8e:72:d6:af:76:d8:64:af:aa:6f:35:05:aa:dd:66:54:
         4f:fe:d1:af:3c:c8:57:12:ef:ef:99:92:bd:b6:98:09:e0:45:
         6e:05:b0:c6:dd:13:a9:45:6e:f0:5e:17:3b:3e:18:a0:b6:72:
         c2:58:8c:5b:99:51:73:9e:52:58:2a:e4:99:42:d2:20:62:f8:
         43:e3:34:99:96:5f:18:6b:51:67:e3:3b:76:b6:18:c7:c3:62:
         f6:dc:a5:35:0d:9e:95:8e:2e:90:7d:19:eb:b9:5a:81:cb:f4:
         a5:1c:91:01:53:dd:18:f5:58:82:92:c0:bc:eb:c4:cd:f5:15:
         77:c4:9e:e7:3b:72:c0:f7:4e:0a:68:2a:ba:33:c2:5e:37:03:
         a8:14:86:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:17 2025 by rpki-client