Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234352e302f32342d3234203d3e20323635323338.roa
File:                     3136372e3235302e3234352e302f32342d3234203d3e20323635323338.roa (raw, json)
Hash identifier:          zPnkwB58CMVdQDJZ491F0LTmSC6U4hjfvK3KNiW3ccw=
Subject key identifier:   D6:B9:DE:86:BD:C8:AF:8D:71:50:42:C8:76:51:B8:BA:D4:B9:12:CC
Certificate issuer:       /CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
Certificate serial:       673FA12EB298AF98DAA1351EEF86AA97D4A9ADAB
Authority key identifier: F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234352e302f32342d3234203d3e20323635323338.roa
Signing time:             Fri 20 Oct 2023 22:58:02 +0000
ROA not before:           Fri 20 Oct 2023 22:53:02 +0000
ROA not after:            Fri 18 Oct 2024 22:58:02 +0000
asID:                     265238
IP address blocks:        167.250.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3f:a1:2e:b2:98:af:98:da:a1:35:1e:ef:86:aa:97:d4:a9:ad:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
        Validity
            Not Before: Oct 20 22:53:02 2023 GMT
            Not After : Oct 18 22:58:02 2024 GMT
        Subject: CN=D6B9DE86BDC8AF8D715042C87651B8BAD4B912CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:dc:91:a2:32:4e:f1:2d:68:3c:6c:9f:eb:
                    1f:19:d4:a4:8a:37:23:f0:16:54:24:a5:e8:72:79:
                    83:13:72:7a:fd:85:13:ff:db:c5:43:1c:b4:f9:93:
                    8e:07:41:95:d0:b2:26:bd:98:f0:5d:f7:08:bd:72:
                    91:6d:99:ad:01:d1:15:a4:82:d6:59:53:7b:ab:ac:
                    c0:3f:6b:32:f7:86:17:a8:b6:aa:e7:3b:e2:1c:8c:
                    6b:02:cc:20:34:d4:48:1c:ff:70:67:96:c0:60:e9:
                    30:88:0f:87:c9:28:37:a1:00:19:bb:8e:ba:5f:11:
                    2e:c5:8f:a8:2a:61:00:6f:93:41:47:af:61:2f:5c:
                    df:f2:bd:54:ba:e5:2a:56:bc:65:86:b7:3d:5d:eb:
                    60:4d:15:91:07:15:27:d9:a9:30:f3:6a:be:4f:e4:
                    31:b8:e1:2a:49:b6:49:e6:cb:76:a1:de:96:f5:43:
                    ca:3f:bb:b1:fa:d3:0b:bf:28:f2:72:6b:90:a2:87:
                    98:32:7a:fe:57:69:4a:9f:9d:7b:24:75:12:41:81:
                    72:68:32:ea:b8:0b:cb:b1:98:f7:8c:f9:71:59:a9:
                    c8:05:ad:1d:7b:b5:16:ea:79:f6:ae:22:8e:60:3f:
                    57:91:ac:73:fe:6a:a4:76:02:41:2c:5d:4b:dc:b2:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B9:DE:86:BD:C8:AF:8D:71:50:42:C8:76:51:B8:BA:D4:B9:12:CC
            X509v3 Authority Key Identifier:
                keyid:F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234352e302f32342d3234203d3e20323635323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:4a:7a:e2:a4:ed:2b:29:91:7f:12:fc:b0:70:d1:83:3b:3a:
         bb:46:d9:0b:ce:9f:12:84:ee:ac:ae:c3:18:a6:7f:be:51:b6:
         72:c3:a6:c6:1e:5c:de:ba:aa:1a:a9:49:6c:0a:29:47:98:b4:
         cf:17:47:aa:d7:b2:db:5e:5f:58:74:66:ca:95:2d:2e:da:d3:
         f8:a9:ac:4d:2d:e2:1c:93:7c:d5:01:31:2e:3a:18:06:f7:a2:
         95:b4:bc:27:c4:fd:a3:71:21:3d:e7:8d:bc:10:c1:92:88:af:
         78:48:16:e8:8d:ef:92:24:3f:3a:a4:76:1f:ea:1a:54:03:d3:
         f0:b5:c5:4f:7c:e2:38:4d:1e:29:49:f4:28:19:15:ef:c3:e4:
         91:c9:9e:16:ac:e6:d4:93:e0:2b:6e:10:22:ef:73:02:28:99:
         87:81:c6:6a:1e:ac:bb:8b:75:d4:51:3c:9f:34:ab:a6:2d:ca:
         2d:22:ed:00:b1:cf:9b:49:7c:7e:e3:29:e9:3b:72:a6:5a:03:
         83:2f:3f:47:56:bb:e9:4d:c8:b3:06:1a:4d:59:50:30:b7:29:
         a1:99:bc:c9:02:ee:b0:07:13:af:bc:f9:e2:19:4f:cb:b5:09:
         36:9a:31:0e:05:d8:3a:87:ef:9c:f1:66:66:61:de:7e:39:8c:
         52:8d:ff:1d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZz+hLrKYr5jaoTUe74aql9SpraswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDNzk4Q0NBODM5NTIzRkIzQzdFNEM2QTM2NUU2QTY1
RTExQzlENTAeFw0yMzEwMjAyMjUzMDJaFw0yNDEwMTgyMjU4MDJaMDMxMTAvBgNV
BAMTKEQ2QjlERTg2QkRDOEFGOEQ3MTUwNDJDODc2NTFCOEJBRDRCOTEyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiFtyRojJO8S1oPGyf6x8Z1KSK
NyPwFlQkpehyeYMTcnr9hRP/28VDHLT5k44HQZXQsia9mPBd9wi9cpFtma0B0RWk
gtZZU3urrMA/azL3hheotqrnO+IcjGsCzCA01Egc/3BnlsBg6TCID4fJKDehABm7
jrpfES7Fj6gqYQBvk0FHr2EvXN/yvVS65SpWvGWGtz1d62BNFZEHFSfZqTDzar5P
5DG44SpJtknmy3ah3pb1Q8o/u7H60wu/KPJya5Cih5gyev5XaUqfnXskdRJBgXJo
Muq4C8uxmPeM+XFZqcgFrR17tRbqefauIo5gP1eRrHP+aqR2AkEsXUvcsm6dAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1rnehr3Ir41xUELIdlG4utS5EswwHwYDVR0j
BBgwFoAU8seYzKg5Uj+zx+TGo2Xmpl4RydUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVFNRWtSUkRaalF4YmpqN2ZSWDNyelE4SEhVMlhidDZTa3lCc1BWRm5L
d0MvMC9GMkM3OThDQ0E4Mzk1MjNGQjNDN0U0QzZBMzY1RTZBNjVFMTFDOUQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyQzc5OENDQTgzOTUyM0ZC
M0M3RTRDNkEzNjVFNkE2NUUxMUM5RDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FRTUVrUlJEWmpReGJqajdmUlgzcnpROEhIVTJYYnQ2U2t5QnNQVkZuS3dDLzAv
MzEzNjM3MmUzMjM1MzAyZTMyMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMyMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKf69TANBgkqhkiG9w0BAQsFAAOCAQEAFUp6
4qTtKymRfxL8sHDRgzs6u0bZC86fEoTurK7DGKZ/vlG2csOmxh5c3rqqGqlJbAop
R5i0zxdHqtey215fWHRmypUtLtrT+KmsTS3iHJN81QExLjoYBveilbS8J8T9o3Eh
PeeNvBDBkoiveEgW6I3vkiQ/OqR2H+oaVAPT8LXFT3ziOE0eKUn0KBkV78Pkkcme
Fqzm1JPgK24QIu9zAiiZh4HGah6su4t11FE8nzSrpi3KLSLtALHPm0l8fuMp6Tty
ploDgy8/R1a76U3IswYaTVlQMLcpoZm8yQLusAcTr7z54hlPy7UJNpoxDgXYOofv
nPFmZmHefjmMUo3/HQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:39 2025 by rpki-client