Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39362e302f32322d3232203d3e20323634313431.roa
File:                     3138362e3235302e39362e302f32322d3232203d3e20323634313431.roa (raw, json)
Hash identifier:          or0Hxvc2D+tZ+hHCjvm8zTkD9Jf7Z2ek0JdNqV2MqeA=
Subject key identifier:   8C:CA:07:D2:50:3E:66:9D:7C:FC:59:D4:4C:BD:56:3D:D1:17:D2:AA
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       1F92E15B561CE8C1039BB85C060AEEB64D8BAAEF
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39362e302f32322d3232203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 19:46:41 +0000
ROA not before:           Thu 02 Jan 2025 19:41:41 +0000
ROA not after:            Thu 01 Jan 2026 19:46:41 +0000
asID:                     264141
IP address blocks:        186.250.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:92:e1:5b:56:1c:e8:c1:03:9b:b8:5c:06:0a:ee:b6:4d:8b:aa:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:41:41 2025 GMT
            Not After : Jan  1 19:46:41 2026 GMT
        Subject: CN=8CCA07D2503E669D7CFC59D44CBD563DD117D2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:75:54:5d:97:a7:1f:ac:d5:84:74:2f:9f:
                    a1:97:b7:63:e3:01:84:1d:9c:c5:df:fa:88:53:4b:
                    4f:7b:45:e4:65:80:d2:36:a0:60:2a:53:03:8e:c4:
                    d2:75:1a:d4:ff:69:81:c1:04:8b:0b:b7:80:2a:8d:
                    94:b8:cd:34:78:21:a0:37:41:52:b3:73:a6:c3:31:
                    c7:d5:87:19:b6:ed:0d:fb:bd:f7:23:3a:ac:f4:53:
                    63:42:75:ad:0c:65:c3:16:3d:89:55:44:1f:94:27:
                    b5:6a:c7:ba:90:bd:86:82:66:4f:ec:be:a2:dd:6e:
                    5c:06:be:26:7b:cc:a2:98:2b:f5:11:be:f6:e9:d9:
                    64:5d:c5:d3:9c:4a:4c:ae:bd:c7:56:01:48:0c:92:
                    0f:27:af:24:d2:49:2a:c9:d6:64:39:28:31:29:a5:
                    c9:c7:74:a3:be:f5:1e:98:e2:70:89:ee:bb:3b:f7:
                    55:e3:94:1f:3f:f6:b3:46:d7:3b:e0:af:8c:42:6c:
                    e9:a2:f0:85:8a:be:1a:7a:86:c8:6b:32:2c:c1:52:
                    31:25:2c:b9:11:ce:46:17:81:99:f6:50:49:a7:22:
                    3d:c7:21:d0:ae:7f:a5:e2:78:c1:25:fe:35:61:c9:
                    62:82:9f:8a:55:86:84:11:3c:24:c4:82:d5:33:75:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CA:07:D2:50:3E:66:9D:7C:FC:59:D4:4C:BD:56:3D:D1:17:D2:AA
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39362e302f32322d3232203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:16:3c:cf:10:58:31:d0:30:c8:e4:59:e2:55:08:c1:98:
         20:60:a5:15:2f:d1:43:a8:18:56:e2:52:87:dc:1d:2e:70:55:
         fc:a9:79:d8:06:80:16:e4:99:35:e6:98:4f:4e:2c:37:f5:be:
         50:5d:f1:4d:9c:64:b8:2e:64:55:d9:a4:24:69:01:46:86:e8:
         35:63:38:a2:69:33:60:5d:2e:28:d3:26:2f:7b:ae:6d:6c:70:
         b3:83:23:55:74:a5:18:a3:03:f4:5b:b9:ba:d2:3b:c8:b4:9d:
         9d:f7:5f:38:64:a8:8c:1a:71:d9:16:0f:9e:65:e9:14:43:e1:
         71:6e:fc:da:1c:34:7c:fd:a2:08:67:5f:ef:be:e6:32:62:55:
         7c:3d:33:bb:5f:de:2b:21:68:1d:d5:a4:44:c4:28:69:ae:67:
         66:c5:57:44:db:51:94:7b:b3:d3:66:6a:e5:85:a9:9d:20:2c:
         61:75:55:4d:45:83:aa:39:8c:c3:b8:19:fd:4e:01:95:35:ea:
         7f:4b:1a:e5:f0:e4:ec:ca:88:c3:d6:ef:e2:4d:fd:10:6e:1c:
         07:da:7f:da:00:49:55:fe:5c:08:cc:12:98:16:5a:81:ca:57:
         59:ca:24:4d:00:49:4b:e5:f9:1a:e7:49:3d:ac:e3:a2:0c:36:
         08:d2:05:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:02:12 2025 by rpki-client