Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138372e302f32342d3234203d3e20323635323135.roa
File:                     3136372e3235302e3138372e302f32342d3234203d3e20323635323135.roa (raw, json)
Hash identifier:          wVQfD6ZqX1kXGKRKpTz4qX+PFHelonS4lwpUOsQTRcA=
Subject key identifier:   8D:76:10:B9:35:A9:2A:D8:A1:67:97:20:85:7A:DD:FB:E3:0C:36:8E
Certificate issuer:       /CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
Certificate serial:       24B57E56709F7DC30E220F2F6FED510CBA1E043E
Authority key identifier: 07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138372e302f32342d3234203d3e20323635323135.roa
Signing time:             Wed 08 Jan 2025 16:35:43 +0000
ROA not before:           Wed 08 Jan 2025 16:30:43 +0000
ROA not after:            Wed 07 Jan 2026 16:35:43 +0000
asID:                     265215
IP address blocks:        167.250.187.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b5:7e:56:70:9f:7d:c3:0e:22:0f:2f:6f:ed:51:0c:ba:1e:04:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614
        Validity
            Not Before: Jan  8 16:30:43 2025 GMT
            Not After : Jan  7 16:35:43 2026 GMT
        Subject: CN=8D7610B935A92AD8A1679720857ADDFBE30C368E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:c9:8c:d7:40:6a:2b:92:b1:28:49:9d:24:
                    a4:06:15:0c:b8:aa:c0:78:6f:af:e7:3c:05:0d:34:
                    52:fa:20:fb:00:da:41:a3:3b:bb:10:96:60:87:f0:
                    22:09:a7:c5:a3:d3:79:ed:51:80:10:42:38:29:c1:
                    23:49:59:50:8e:a3:24:11:be:1b:0a:c9:f3:f6:38:
                    7e:e0:bc:d0:9c:56:e7:ce:f8:7b:b2:84:4a:19:2d:
                    f9:74:76:be:c1:31:8c:88:fa:7b:57:fc:dc:58:dc:
                    1b:29:9b:11:5b:f0:df:7f:b1:34:2e:20:0c:69:c6:
                    38:65:7b:55:b4:63:b7:e8:28:47:71:49:70:65:a9:
                    24:65:7d:29:a8:a2:64:42:d7:f2:47:06:a4:03:99:
                    73:c0:ac:5d:4c:3d:52:2c:02:41:79:93:72:e3:20:
                    88:bb:de:1d:ab:33:15:f2:f9:37:1f:b0:1c:51:99:
                    87:9a:29:4c:78:c7:82:2f:4c:d7:a9:c9:d6:ec:92:
                    54:a5:2d:c3:3d:02:5e:cc:d6:de:d7:a1:1a:ec:04:
                    2e:d2:ae:0a:a5:81:be:2f:ee:8c:c8:fc:b4:1b:e4:
                    97:fa:ab:7b:30:fc:b6:45:c7:57:f3:38:60:65:cc:
                    20:97:7d:f5:11:8d:33:33:c2:d2:4e:f2:f7:fb:27:
                    ea:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:76:10:B9:35:A9:2A:D8:A1:67:97:20:85:7A:DD:FB:E3:0C:36:8E
            X509v3 Authority Key Identifier:
                keyid:07:65:A0:B5:72:8F:13:A1:D2:86:1A:3D:F4:CF:1D:82:FD:AE:A6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0765A0B5728F13A1D2861A3DF4CF1D82FDAEA614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/3136372e3235302e3138372e302f32342d3234203d3e20323635323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:11:ee:90:02:80:aa:9c:73:0c:eb:38:2d:4a:50:e6:cf:
         14:e2:f5:aa:a0:04:54:12:39:55:8d:86:6d:9f:99:a9:4a:c8:
         17:6c:7a:6e:98:85:27:54:2d:ad:d1:a9:c5:6d:6a:d3:68:4c:
         1e:f0:39:a5:11:f2:6b:99:45:f9:74:4c:a4:06:d3:71:ae:9d:
         a7:c1:8f:96:d5:f7:4d:28:27:9c:84:56:56:c7:04:36:a9:b1:
         31:99:ba:37:e4:c8:2c:5b:5c:9b:14:a7:fd:b4:05:a8:ff:c9:
         01:af:f1:69:7c:bb:05:fe:76:c6:b4:56:40:6a:df:e2:ac:ac:
         ac:04:09:39:31:8e:58:79:fc:54:4f:ac:78:66:fc:e5:b8:16:
         5f:45:d9:8d:ea:8b:5e:6e:c9:b2:b4:b3:40:90:2a:04:c3:82:
         48:07:25:50:1d:d9:82:c7:51:9f:a1:91:15:84:72:a1:2b:55:
         57:a2:bd:b5:3c:f0:4b:64:a5:be:f0:8c:42:a4:2a:23:ad:40:
         e5:fb:fb:b1:ce:d2:a8:01:da:dc:a5:03:27:14:a1:5f:2a:97:
         40:9e:1c:4d:87:10:9f:0c:aa:55:9f:61:3f:e4:71:20:2b:7b:
         a6:a0:44:6d:e4:15:df:17:5a:da:c9:a3:d9:4b:8d:18:2b:29:
         c3:20:5a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:30:55 2025 by rpki-client