Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138362e302f32332d3233203d3e20323635323135.roa
File:                     3136372e3235302e3138362e302f32332d3233203d3e20323635323135.roa (raw, json)
Hash identifier:          /Pyf2YTJyFvitM1ihDlbw72M5PiK2B7sQQghketI5+U=
Subject key identifier:   EE:E9:2A:2D:6C:77:70:49:70:2A:C2:EA:DC:05:9A:42:0D:5F:42:43
Certificate issuer:       /CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
Certificate serial:       02A6550BCDDF12426943984211F4216942DCF142
Authority key identifier: 07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138362e302f32332d3233203d3e20323635323135.roa
Signing time:             Wed 08 Jan 2025 16:35:40 +0000
ROA not before:           Wed 08 Jan 2025 16:30:40 +0000
ROA not after:            Wed 07 Jan 2026 16:35:40 +0000
asID:                     265215
IP address blocks:        167.250.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a6:55:0b:cd:df:12:42:69:43:98:42:11:f4:21:69:42:dc:f1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
        Validity
            Not Before: Jan  8 16:30:40 2025 GMT
            Not After : Jan  7 16:35:40 2026 GMT
        Subject: CN=EEE92A2D6C777049702AC2EADC059A420D5F4243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:77:22:5e:ec:10:3c:42:ae:20:6a:e1:96:
                    3e:56:17:60:17:6c:6f:d8:67:3b:ea:25:b9:9d:a2:
                    03:dd:7d:b4:df:d8:54:e9:02:fa:44:d9:44:56:0e:
                    1b:5e:17:25:bc:6e:55:04:6d:75:cf:a6:77:c5:a5:
                    9e:61:2c:34:b1:a7:16:f6:2c:84:2a:3f:0a:49:d0:
                    61:c1:fd:41:91:53:78:2b:32:3d:a5:39:7b:ca:e4:
                    52:3c:ce:99:15:80:0b:2a:2a:9f:9d:66:f7:67:94:
                    3a:df:19:62:dd:b4:98:1a:6a:c2:1b:26:d2:b6:9e:
                    18:0e:c8:6d:b0:7c:14:16:d0:5e:42:c3:2e:0a:65:
                    43:a5:11:01:03:51:47:b4:84:ce:10:dd:31:1c:75:
                    5c:b1:c5:32:12:0d:10:15:38:d0:b5:23:2f:50:46:
                    cf:47:cb:30:47:6f:96:2e:b2:60:3d:c5:55:db:77:
                    ae:81:4b:d6:9a:d5:a2:4d:bd:64:5d:59:2c:cd:4a:
                    31:ef:fc:1a:ad:a4:a6:a9:f4:e7:05:58:f1:0e:82:
                    e6:46:69:b0:0f:7b:5b:26:14:66:1a:5f:d5:3d:29:
                    4f:b3:6e:10:54:52:77:76:eb:d5:35:a1:4f:2a:95:
                    f2:7e:d0:6d:cf:08:90:80:2e:aa:b0:ac:2e:d8:e3:
                    b8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E9:2A:2D:6C:77:70:49:70:2A:C2:EA:DC:05:9A:42:0D:5F:42:43
            X509v3 Authority Key Identifier:
                keyid:07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138362e302f32332d3233203d3e20323635323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:6b:db:29:85:f3:7a:10:fd:be:29:9c:2f:f7:bc:2d:ed:47:
         9f:c9:45:aa:f8:d5:d5:ad:7e:32:95:ed:89:62:2a:b0:50:4b:
         34:a4:9f:8c:ee:ab:5e:bc:5d:cb:1f:3f:4b:21:8d:97:16:49:
         c4:bf:28:38:29:17:89:e4:6c:55:36:af:36:af:02:41:45:24:
         7f:51:90:6e:c6:26:a0:5c:4a:11:e0:da:54:79:5e:49:a6:80:
         29:12:4f:07:7c:7f:a0:da:fd:bd:52:c3:eb:76:bd:10:d9:e7:
         05:28:f0:fa:25:f5:a8:3e:ed:19:2e:34:82:40:b4:3d:82:85:
         57:7b:aa:3b:0c:ca:50:f1:71:f5:c0:07:34:bb:ad:d7:20:ad:
         33:c0:0c:01:84:5d:2d:95:e1:d5:18:0c:37:4a:7e:3a:d6:e1:
         a6:52:52:16:6b:3e:12:16:4b:08:86:20:18:ee:f8:d7:0b:b2:
         49:a6:2c:7c:a7:eb:6b:07:1b:59:42:ab:e9:e1:f0:32:d3:33:
         7e:2e:96:90:a4:73:61:66:83:6a:14:f5:06:58:86:4a:85:58:
         ae:02:5a:dc:30:7e:04:d8:b0:61:9f:79:e0:3f:ce:51:7b:8b:
         6b:a1:b7:b8:4d:8d:cc:05:48:4b:d3:42:a8:17:3b:33:d9:2b:
         7f:f0:1a:e0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAqZVC83fEkJpQ5hCEfQhaULc8UIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc2NUEwQjU3MjhGMTNBMUQyODYxQTNERjRDRjFEODJG
REFFQTYxNDAeFw0yNTAxMDgxNjMwNDBaFw0yNjAxMDcxNjM1NDBaMDMxMTAvBgNV
BAMTKEVFRTkyQTJENkM3NzcwNDk3MDJBQzJFQURDMDU5QTQyMEQ1RjQyNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23XciXuwQPEKuIGrhlj5WF2AX
bG/YZzvqJbmdogPdfbTf2FTpAvpE2URWDhteFyW8blUEbXXPpnfFpZ5hLDSxpxb2
LIQqPwpJ0GHB/UGRU3grMj2lOXvK5FI8zpkVgAsqKp+dZvdnlDrfGWLdtJgaasIb
JtK2nhgOyG2wfBQW0F5Cwy4KZUOlEQEDUUe0hM4Q3TEcdVyxxTISDRAVONC1Iy9Q
Rs9HyzBHb5YusmA9xVXbd66BS9aa1aJNvWRdWSzNSjHv/BqtpKap9OcFWPEOguZG
abAPe1smFGYaX9U9KU+zbhBUUnd269U1oU8qlfJ+0G3PCJCALqqwrC7Y47hfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7ukqLWx3cElwKsLq3AWaQg1fQkMwHwYDVR0j
BBgwFoAUB2WgtXKPE6HShho99M8dgv2uphQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVhURmhCNTZzMnhaeTFrS0VHQkY4c1YydU52ZllFWFJpR1lrd2lXbmlL
TXMvMC8wNzY1QTBCNTcyOEYxM0ExRDI4NjFBM0RGNENGMUQ4MkZEQUVBNjE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3NjVBMEI1NzI4RjEzQTFE
Mjg2MUEzREY0Q0YxRDgyRkRBRUE2MTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FYVEZoQjU2czJ4Wnkxa0tFR0JGOHNWMnVOdmZZRVhSaUdZa3dpV25pS01zLzAv
MzEzNjM3MmUzMjM1MzAyZTMxMzgzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMyMzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaf6ujANBgkqhkiG9w0BAQsFAAOCAQEAlWvb
KYXzehD9vimcL/e8Le1Hn8lFqvjV1a1+MpXtiWIqsFBLNKSfjO6rXrxdyx8/SyGN
lxZJxL8oOCkXieRsVTavNq8CQUUkf1GQbsYmoFxKEeDaVHleSaaAKRJPB3x/oNr9
vVLD63a9ENnnBSjw+iX1qD7tGS40gkC0PYKFV3uqOwzKUPFx9cAHNLut1yCtM8AM
AYRdLZXh1RgMN0p+OtbhplJSFms+EhZLCIYgGO741wuySaYsfKfrawcbWUKr6eHw
MtMzfi6WkKRzYWaDahT1BliGSoVYrgJa3DB+BNiwYZ954D/OUXuLa6G3uE2NzAVI
S9NCqBc7M9krf/Aa4A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:11:50 2025 by rpki-client