Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234372e302f32342d3234203d3e20323635323338.roa
File:                     3136372e3235302e3234372e302f32342d3234203d3e20323635323338.roa (raw, json)
Hash identifier:          tVXGLJAzQeNpjnK6QxBFXIe4lFZ45/80qb4JALtqFts=
Subject key identifier:   F6:50:AB:63:02:EA:C4:2D:DB:34:5C:F0:3B:9A:AF:F3:83:3C:B1:42
Certificate issuer:       /CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
Certificate serial:       56EA40940573E71E457F706CE12FB6C0BB47C332
Authority key identifier: F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234372e302f32342d3234203d3e20323635323338.roa
Signing time:             Fri 20 Oct 2023 22:58:22 +0000
ROA not before:           Fri 20 Oct 2023 22:53:22 +0000
ROA not after:            Fri 18 Oct 2024 22:58:22 +0000
asID:                     265238
IP address blocks:        167.250.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ea:40:94:05:73:e7:1e:45:7f:70:6c:e1:2f:b6:c0:bb:47:c3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
        Validity
            Not Before: Oct 20 22:53:22 2023 GMT
            Not After : Oct 18 22:58:22 2024 GMT
        Subject: CN=F650AB6302EAC42DDB345CF03B9AAFF3833CB142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:08:dc:2d:db:9e:23:03:23:ec:b6:7b:d4:12:
                    ee:1f:61:20:1e:24:28:6a:f8:4c:25:61:2a:43:e6:
                    e0:57:64:8f:c0:d6:1f:42:35:36:73:74:85:bf:ca:
                    d8:d0:dc:12:54:0f:26:03:38:48:51:42:ce:07:9b:
                    32:43:1e:15:3a:59:ec:99:f6:42:83:b3:e4:c5:1e:
                    24:ec:6c:1e:a9:09:76:cd:13:bf:01:ba:ad:f1:a1:
                    bb:6e:6d:fe:73:e5:b6:ba:86:a9:b9:75:f5:5f:aa:
                    1b:96:31:bf:ca:0f:ee:5d:df:59:c7:b6:fe:3d:e7:
                    23:14:b3:92:9d:27:8f:d1:74:8d:56:79:fa:90:5c:
                    8a:e4:6e:cc:14:ee:00:e5:a0:53:d4:c7:f4:e0:9f:
                    de:b9:22:ed:46:cc:19:a1:49:6d:73:a9:ff:ef:c8:
                    62:bb:a0:90:ff:47:1b:fe:ba:ef:a9:3e:7c:39:84:
                    f6:95:ec:d6:45:12:d0:0f:79:3c:d3:e4:25:94:4f:
                    47:3b:55:f1:c3:25:4f:90:ba:f1:14:92:64:ff:66:
                    8e:3f:cf:95:c0:de:d6:47:4d:e1:21:09:b2:56:bf:
                    ba:74:59:b5:96:0b:43:7e:61:a9:81:7f:2c:2b:d5:
                    04:fa:25:6a:77:eb:5a:53:e5:74:92:96:6e:a6:4b:
                    fb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:50:AB:63:02:EA:C4:2D:DB:34:5C:F0:3B:9A:AF:F3:83:3C:B1:42
            X509v3 Authority Key Identifier:
                keyid:F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/3136372e3235302e3234372e302f32342d3234203d3e20323635323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:de:70:98:a5:28:55:61:ea:78:f0:86:d0:95:12:d2:31:cd:
         9e:38:66:68:3b:63:68:1b:5f:40:0b:66:d6:c8:44:5e:d6:30:
         83:aa:51:1a:e1:e0:4e:01:74:10:c1:e3:9b:71:da:f4:53:97:
         99:09:91:c9:b0:b7:a3:95:3f:6d:c5:e9:57:55:a1:d6:15:09:
         a3:80:93:48:44:5f:60:42:a3:43:eb:70:9b:ee:ed:b5:23:42:
         6e:00:ee:cb:69:15:72:89:77:cd:00:37:49:33:e8:f2:06:b3:
         59:3b:d6:73:59:ca:31:54:96:a3:1a:ec:fe:14:fb:1f:8d:2a:
         83:a2:03:b6:46:0f:a4:a7:01:1d:52:11:20:1e:d3:f3:31:45:
         98:17:2c:1e:cc:4e:c1:b0:68:57:bc:67:03:97:49:6b:16:7a:
         e3:22:61:15:93:35:69:d5:cb:df:73:75:6e:87:71:d1:c8:47:
         5d:c1:f2:b3:5f:bb:e6:6c:89:3f:a1:d1:2f:b3:c4:61:3f:d0:
         6a:e5:6d:c2:0a:bf:3a:d1:82:d2:a2:e8:2e:1f:8a:6d:03:07:
         c3:e3:c5:59:81:6c:1d:b2:10:86:5c:53:ff:c3:c8:9e:22:41:
         b5:1b:71:9e:c5:a2:ea:55:f8:71:3f:cd:52:ca:ee:a2:41:ad:
         85:de:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:57 2025 by rpki-client