Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138342e302f32342d3234203d3e20323635323135.roa
File:                     3136372e3235302e3138342e302f32342d3234203d3e20323635323135.roa (raw, json)
Hash identifier:          /Uel7RBa+C6vzra13TvtnrgqpnlsERoaRrr0QQ5D4AU=
Subject key identifier:   A8:38:A1:82:D0:D8:6E:35:B6:FB:84:50:06:5C:8A:10:3C:46:47:20
Certificate issuer:       /CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
Certificate serial:       4301F7C39DFB51E494E440CEAB9414E7B2DC1D49
Authority key identifier: 07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138342e302f32342d3234203d3e20323635323135.roa
Signing time:             Wed 08 Jan 2025 16:35:42 +0000
ROA not before:           Wed 08 Jan 2025 16:30:42 +0000
ROA not after:            Wed 07 Jan 2026 16:35:42 +0000
asID:                     265215
IP address blocks:        167.250.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:01:f7:c3:9d:fb:51:e4:94:e4:40:ce:ab:94:14:e7:b2:dc:1d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
        Validity
            Not Before: Jan  8 16:30:42 2025 GMT
            Not After : Jan  7 16:35:42 2026 GMT
        Subject: CN=A838A182D0D86E35B6FB8450065C8A103C464720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:cf:8c:5e:2a:59:e2:50:63:51:08:c7:d0:
                    ec:5d:b7:d5:c0:75:ce:c0:a3:ff:0f:fd:57:a0:24:
                    7f:1a:ae:d7:d7:3c:ff:e4:b3:7d:a9:b5:d8:8c:a5:
                    89:c1:56:e1:16:0e:d3:c6:1a:24:7f:a5:61:af:62:
                    69:7f:29:66:54:32:a5:b8:82:6a:79:2c:40:ce:e6:
                    f7:b2:77:ae:aa:10:27:b6:78:a9:75:65:b5:42:d1:
                    62:04:37:c4:8a:3a:62:65:7b:a9:20:f4:ea:33:88:
                    56:65:00:df:16:90:5f:90:fa:b6:64:01:0b:52:e1:
                    5a:4d:91:cd:88:5a:c2:34:67:99:54:91:88:32:42:
                    43:f9:d8:42:65:97:0c:29:28:72:3e:fc:71:32:5c:
                    52:c4:0c:7f:5e:d2:b7:03:f6:98:17:1b:38:a6:21:
                    99:12:99:e3:ae:d4:06:8f:3e:19:99:a9:cf:64:1e:
                    fe:de:df:94:f3:93:eb:07:fc:2f:67:33:1c:8e:40:
                    08:66:1b:0a:85:b3:16:22:8e:fd:1b:0c:b5:fd:85:
                    a0:45:fd:68:67:d6:90:32:69:80:38:43:a4:d3:53:
                    90:26:b0:23:6e:46:fb:17:3c:19:0b:86:42:e1:5d:
                    22:36:15:10:5b:83:89:b0:4c:14:f3:f8:0b:a6:5f:
                    47:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:38:A1:82:D0:D8:6E:35:B6:FB:84:50:06:5C:8A:10:3C:46:47:20
            X509v3 Authority Key Identifier:
                keyid:07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138342e302f32342d3234203d3e20323635323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:3e:ed:01:7b:2b:f2:c3:e9:35:d3:40:9e:a5:79:f8:4e:f4:
         d6:6e:eb:1f:7b:f3:79:b2:f3:43:8c:cd:df:16:c7:2c:d0:d5:
         c0:cb:80:eb:52:45:26:f5:61:e5:40:48:cb:54:b6:4a:4c:cb:
         81:1f:ba:fc:54:e2:f0:7b:9c:87:91:9c:e1:11:a2:41:05:0a:
         71:65:ae:fb:12:e8:0e:75:17:4e:e4:ac:3f:b1:dd:80:be:6b:
         d6:1b:53:00:15:78:47:43:0b:10:27:00:5a:0a:85:7a:13:c4:
         e0:ea:7e:ac:20:24:87:84:c8:c0:3b:28:3e:0a:4e:8c:77:08:
         82:76:93:d0:41:6d:23:10:b1:c8:a8:92:26:81:4c:ae:d4:5d:
         f3:75:48:90:02:b2:c3:62:04:81:80:0a:da:79:de:e6:d6:69:
         9e:1b:1f:68:3f:16:f5:b0:cd:c3:f9:02:32:ea:6c:b3:9e:5c:
         0c:24:c4:4c:d4:e2:85:f0:41:fe:47:80:b3:35:d9:c9:1e:21:
         bf:58:72:85:db:ae:89:66:ba:ba:a7:36:87:b9:3c:48:d5:85:
         dc:61:e3:34:1a:ab:9a:8f:a8:45:9a:41:a0:66:cc:36:be:e1:
         4a:1c:c3:09:09:5a:d8:45:d4:9e:89:f8:0a:be:67:75:fb:20:
         18:f4:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:06:19 2025 by rpki-client