Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138352e302f32342d3234203d3e20323635323135.roa
File:                     3136372e3235302e3138352e302f32342d3234203d3e20323635323135.roa (raw, json)
Hash identifier:          VfzIhiXkTf2vaCsroHus2I4aom4KLINgRvVbxELFEvc=
Subject key identifier:   16:2D:5C:01:45:8A:AF:D7:B8:78:B6:22:45:A2:75:AB:02:2F:4A:5C
Certificate issuer:       /CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
Certificate serial:       5B75F0A469234BC5706479D64CBB538D11A65ACF
Authority key identifier: 07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138352e302f32342d3234203d3e20323635323135.roa
Signing time:             Wed 08 Jan 2025 16:35:41 +0000
ROA not before:           Wed 08 Jan 2025 16:30:41 +0000
ROA not after:            Wed 07 Jan 2026 16:35:41 +0000
asID:                     265215
IP address blocks:        167.250.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:75:f0:a4:69:23:4b:c5:70:64:79:d6:4c:bb:53:8d:11:a6:5a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
        Validity
            Not Before: Jan  8 16:30:41 2025 GMT
            Not After : Jan  7 16:35:41 2026 GMT
        Subject: CN=162D5C01458AAFD7B878B62245A275AB022F4A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:c0:e9:56:c1:3e:d8:c3:d7:8b:a0:c9:20:
                    c9:98:8b:84:68:e5:18:9a:59:b4:6b:67:d7:b2:69:
                    31:d5:51:13:b7:c2:09:6b:e7:d1:26:ca:bc:4e:1d:
                    c0:2a:95:5e:d4:d5:c5:3a:93:73:4d:42:64:76:49:
                    eb:2c:e4:18:e4:d4:4c:25:15:dc:f7:ab:87:64:fe:
                    31:93:e4:ae:27:69:ff:d9:1f:67:47:9d:74:2b:64:
                    6c:50:7e:04:e5:f5:5f:db:7e:4d:53:5a:8e:05:07:
                    c7:93:23:c9:40:59:29:fe:e5:0e:ea:33:0a:45:73:
                    e6:ab:c1:82:26:c8:8b:ee:0e:8a:ed:b2:f6:6a:c4:
                    c7:64:cd:11:9c:58:6c:38:36:7a:b8:de:c9:47:95:
                    5c:2f:07:34:6a:ec:ac:d1:b8:0c:28:16:3a:c4:64:
                    ee:5d:a1:4c:61:ac:54:b1:3f:ee:08:84:77:52:e5:
                    f1:31:34:79:3d:7a:e5:39:fb:9e:d1:fd:b9:18:45:
                    ba:46:9e:e8:fb:53:56:64:8e:b3:9b:31:cd:86:d0:
                    fc:0c:d1:7f:cb:50:c9:33:be:e8:4b:30:8c:38:86:
                    a6:b7:bc:a6:87:89:dd:62:56:69:43:7c:30:00:cc:
                    8e:06:05:26:d7:24:a2:90:1a:c3:0c:32:8e:dd:e3:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2D:5C:01:45:8A:AF:D7:B8:78:B6:22:45:A2:75:AB:02:2F:4A:5C
            X509v3 Authority Key Identifier:
                keyid:07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138352e302f32342d3234203d3e20323635323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ef:6c:ae:b7:07:c7:8d:e2:d0:fa:27:90:07:47:92:8a:99:
         8d:15:b6:c7:25:7e:3c:f1:d6:09:58:44:25:7d:63:de:c5:9d:
         eb:19:c4:7f:8b:8f:a5:c3:b0:c1:74:2b:1f:32:bc:10:1d:85:
         f8:29:6c:aa:0a:87:66:41:e2:b8:0e:88:d3:2f:83:e8:c7:9b:
         7b:91:11:8f:e2:f1:9a:d9:37:bf:31:a3:bb:31:3a:56:b2:d2:
         f4:fc:89:65:fc:6e:42:f5:54:93:4d:fb:d2:c5:cd:11:52:e1:
         b7:06:8a:87:55:e4:ac:48:9f:cc:d9:78:b2:4f:9b:0b:0f:ff:
         18:04:e0:da:8c:94:27:b2:25:06:ea:7c:9a:0f:52:d0:02:f8:
         e1:4b:51:85:cc:40:93:ff:24:84:ea:45:70:f9:f3:34:92:35:
         65:b3:f3:c7:3f:d9:3a:48:37:65:65:d1:18:e8:4c:be:3e:1c:
         b7:e4:a1:c5:ae:ae:a6:cb:a2:92:50:f2:36:d9:3c:bf:7d:26:
         9d:0b:6e:05:e1:30:a3:05:55:68:f6:ba:dd:dc:d5:8d:f2:c0:
         c3:b0:4a:20:2a:a0:d1:92:f9:42:f4:fe:7d:0f:98:d9:36:59:
         1b:d5:cd:3a:03:7e:80:94:50:b6:cb:f7:4f:e5:21:6c:9f:ea:
         5f:5e:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:33:21 2025 by rpki-client