Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138362e302f32342d3234203d3e20323635323135.roa
File:                     3136372e3235302e3138362e302f32342d3234203d3e20323635323135.roa (raw, json)
Hash identifier:          f9y0XGPhwQkA/Bl+hviGy2/knpqCi/O4LYTDBawa9cE=
Subject key identifier:   46:C0:E1:97:E9:46:D9:58:DE:0B:ED:DA:7A:C1:B9:B2:BC:03:A0:80
Certificate issuer:       /CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
Certificate serial:       53C6200F63F98D12CBCBB9931923EC5FBE435F7D
Authority key identifier: 07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138362e302f32342d3234203d3e20323635323135.roa
Signing time:             Wed 08 Jan 2025 16:35:41 +0000
ROA not before:           Wed 08 Jan 2025 16:30:41 +0000
ROA not after:            Wed 07 Jan 2026 16:35:41 +0000
asID:                     265215
IP address blocks:        167.250.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c6:20:0f:63:f9:8d:12:cb:cb:b9:93:19:23:ec:5f:be:43:5f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
        Validity
            Not Before: Jan  8 16:30:41 2025 GMT
            Not After : Jan  7 16:35:41 2026 GMT
        Subject: CN=46C0E197E946D958DE0BEDDA7AC1B9B2BC03A080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:85:a1:fa:75:a1:b7:4c:ab:ba:82:88:3a:d7:
                    94:2f:d5:b6:86:c7:8e:b9:5b:c9:01:76:f6:0d:b5:
                    7e:84:81:f6:89:27:de:50:41:24:c8:b5:d7:fc:76:
                    94:a8:95:3e:19:57:6d:4c:25:f2:ad:71:fc:9f:d1:
                    dd:0e:03:ed:77:36:34:75:83:39:f6:a0:1f:20:10:
                    a4:cb:50:a4:ca:a8:f6:f0:26:08:06:5e:92:f0:41:
                    1a:13:86:a0:63:76:66:16:c7:68:fd:18:39:89:9f:
                    d0:48:ca:49:d0:dd:05:06:37:a4:97:1b:c9:34:4e:
                    7a:5b:56:96:7b:5e:97:c6:f2:3a:b9:14:4e:4f:0b:
                    c2:39:6f:26:aa:df:c3:61:c1:9b:f2:ba:71:ca:c7:
                    b9:be:cb:7a:a7:03:ab:5f:d5:26:86:54:51:bd:ee:
                    71:34:38:ff:91:cc:8b:1f:26:e3:bf:3a:11:5d:23:
                    5c:85:e7:cf:66:9b:a5:2d:d6:a5:a6:47:cb:ff:e6:
                    52:ce:46:04:ba:9a:35:03:33:e1:4d:7e:49:29:99:
                    ee:fe:f8:24:24:21:47:84:9c:7d:e8:4f:e1:58:61:
                    7c:e9:f0:7e:38:86:a2:37:da:79:d4:7b:69:d0:45:
                    74:81:7c:75:00:21:51:8e:e1:5a:80:77:c0:93:da:
                    07:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C0:E1:97:E9:46:D9:58:DE:0B:ED:DA:7A:C1:B9:B2:BC:03:A0:80
            X509v3 Authority Key Identifier:
                keyid:07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138362e302f32342d3234203d3e20323635323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:94:73:8a:0c:da:59:f9:21:b1:f5:f8:c7:fe:56:11:44:e0:
         f4:4a:9e:5a:27:36:eb:c3:9f:ff:14:29:46:2d:7c:3b:f3:c0:
         ef:2f:39:a8:9c:54:c0:ee:51:1e:6d:fb:9d:49:f5:d7:e2:40:
         c3:29:81:33:ee:09:51:98:61:aa:5d:0c:74:43:50:ab:78:04:
         90:b0:22:94:8f:ae:af:36:2b:9c:27:07:3b:97:11:fb:a8:85:
         5a:5b:11:90:1d:3f:4b:f0:b5:f3:c6:1a:d8:1e:f3:72:44:8c:
         80:87:b5:9e:a4:e0:ee:b6:e4:2b:21:81:76:75:27:75:6e:1c:
         7f:e4:8f:c8:3a:ff:0a:ca:44:d6:44:3f:52:26:d7:38:63:f7:
         90:4f:ae:49:fd:2f:b7:27:4f:3d:c2:9a:c6:fc:63:08:c2:b6:
         cb:31:b4:69:b2:55:c9:09:fe:ca:58:59:ac:57:72:7d:67:05:
         0f:f9:fa:ae:f2:02:7c:60:26:c9:06:5f:5f:d2:d4:e8:6c:a8:
         a3:56:75:26:76:de:4c:cb:73:cc:49:aa:45:9e:99:92:74:48:
         dc:9a:18:6f:2d:2f:4f:ac:fc:94:31:89:8e:81:4f:16:15:3c:
         3f:b2:42:5d:45:ac:e1:a6:02:99:e5:31:c4:58:85:9a:99:00:
         e4:0e:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:32:38 2025 by rpki-client