Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39372e302f32342d3234203d3e20323634313431.roa
File:                     3138362e3235302e39372e302f32342d3234203d3e20323634313431.roa (raw, json)
Hash identifier:          RDtXl56DdyONwkqXWmzPVveO2l1BkMYsj5nTnwskW8c=
Subject key identifier:   5F:DB:D3:5A:8B:2C:1A:14:A2:A5:98:AD:C0:33:58:0A:81:35:EB:A2
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       63EAE00BBC05DD9944DCBCF5C41F8B93B4EFCCD5
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39372e302f32342d3234203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 19:27:19 +0000
ROA not before:           Thu 02 Jan 2025 19:22:19 +0000
ROA not after:            Thu 01 Jan 2026 19:27:19 +0000
asID:                     264141
IP address blocks:        186.250.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ea:e0:0b:bc:05:dd:99:44:dc:bc:f5:c4:1f:8b:93:b4:ef:cc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:22:19 2025 GMT
            Not After : Jan  1 19:27:19 2026 GMT
        Subject: CN=5FDBD35A8B2C1A14A2A598ADC033580A8135EBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:1c:e0:98:58:2a:d2:7a:ff:15:89:26:d2:
                    3d:68:a5:cb:3a:75:97:ed:76:15:fa:a1:25:6f:32:
                    87:13:33:7e:c8:00:df:a4:ae:c4:69:43:c0:5e:d5:
                    77:5c:a3:0b:13:52:55:97:ac:d8:31:ad:e3:4c:fe:
                    3e:cc:42:ec:a7:4f:d5:4f:6f:3e:c6:c1:5a:c4:37:
                    93:75:b5:90:93:a3:3f:6d:69:0e:f6:bf:55:11:e2:
                    6c:1c:d7:63:a9:75:99:13:13:4b:bd:18:64:0f:1f:
                    6c:21:91:42:94:bf:6d:b4:92:9e:9a:4f:03:f5:df:
                    bf:24:41:21:66:bb:bf:c3:c2:98:9e:fe:10:a5:59:
                    bb:50:f2:1d:5b:a9:ab:7c:a6:26:08:be:7a:4c:54:
                    c5:f5:0f:60:ab:58:9a:df:72:b2:99:23:80:88:dc:
                    17:6e:03:7a:03:29:90:1d:cb:30:28:f0:08:72:bd:
                    ae:ab:52:68:64:2b:d5:95:a7:18:1b:7b:5b:3e:dc:
                    65:71:eb:62:34:b4:ed:4d:af:98:d0:c5:62:99:b0:
                    f4:6b:2c:9e:cf:be:84:a2:f1:92:75:26:19:ce:1e:
                    c4:04:5d:0e:cb:45:66:65:e3:b8:94:cc:ca:68:8f:
                    aa:16:90:ea:d9:48:24:5c:e1:af:b7:41:12:42:67:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DB:D3:5A:8B:2C:1A:14:A2:A5:98:AD:C0:33:58:0A:81:35:EB:A2
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39372e302f32342d3234203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d6:96:12:9d:9f:ba:82:e0:b1:43:75:06:f7:76:29:d6:c6:
         89:71:4b:23:c3:60:7a:8e:dc:01:2e:b6:3d:75:51:95:47:a2:
         5b:5a:08:65:3b:17:f1:58:86:8f:59:b5:d3:4b:5e:7d:2d:91:
         21:24:b5:47:2e:d7:d5:c1:72:d7:ab:b6:bf:f6:b7:81:8c:2f:
         ab:00:89:a1:6e:2a:f9:4b:0a:45:6e:4d:39:5b:03:dd:e1:33:
         af:0c:03:64:c1:54:eb:76:1c:af:e6:a8:61:b2:ee:64:07:f4:
         6c:55:18:57:d4:60:ea:1c:46:b8:db:f7:51:62:5a:bc:e5:b9:
         44:e8:00:12:b7:c5:08:71:1b:31:a5:80:e4:e1:6f:97:b6:73:
         d3:54:11:d4:3d:01:f3:11:83:7f:a6:78:d7:11:e3:0e:31:5d:
         53:0f:ef:49:4b:e8:5e:da:38:37:69:23:f4:57:94:97:25:13:
         73:77:7c:22:d5:33:d2:45:5f:ff:5a:c6:6c:c1:36:c6:6f:3c:
         05:c3:90:8f:f7:00:84:b8:fd:e0:db:ac:78:cb:7c:1e:1b:0d:
         c6:ad:cc:fe:5b:f1:49:fe:c3:3d:fa:fa:92:b2:5d:e9:f0:f7:
         41:79:e0:c2:e9:ee:bd:f5:b0:ec:28:13:34:eb:56:f5:e6:fc:
         de:49:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:24:06 2025 by rpki-client