Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39382e302f32342d3234203d3e20323634313431.roa
File:                     3138362e3235302e39382e302f32342d3234203d3e20323634313431.roa (raw, json)
Hash identifier:          iIi1+jG3WZADCTQzrjTGR0N1DrWMgRkepr48VkUnRms=
Subject key identifier:   95:CB:D5:79:3E:F1:27:6C:C0:95:85:EE:DF:6B:3A:66:57:1B:1E:6A
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       2B6A7783185148F38BD1F975979F3D127B43B0EC
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39382e302f32342d3234203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 19:43:45 +0000
ROA not before:           Thu 02 Jan 2025 19:38:45 +0000
ROA not after:            Thu 01 Jan 2026 19:43:45 +0000
asID:                     264141
IP address blocks:        186.250.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6a:77:83:18:51:48:f3:8b:d1:f9:75:97:9f:3d:12:7b:43:b0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:38:45 2025 GMT
            Not After : Jan  1 19:43:45 2026 GMT
        Subject: CN=95CBD5793EF1276CC09585EEDF6B3A66571B1E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:4c:df:18:fc:aa:30:1f:30:ce:e0:58:23:
                    b5:b7:47:2f:dd:c2:df:ea:a7:43:c3:72:bd:35:d7:
                    03:05:cc:95:2d:87:cd:47:97:65:cc:6b:8c:aa:5d:
                    4e:73:f6:20:24:c1:33:9b:cb:6e:00:2b:be:e2:e0:
                    27:e6:e9:0d:c0:c2:81:92:a5:ba:90:7f:12:5e:9a:
                    21:70:c9:14:78:98:a9:99:67:2c:79:e2:d2:d7:a4:
                    f0:6b:ad:2b:20:67:59:c9:d1:ad:93:ec:b7:d4:21:
                    a0:d1:9c:09:f9:82:f1:c3:57:43:4a:e1:b3:f6:fa:
                    11:57:ea:9e:4e:cb:1b:b6:8e:b3:f4:af:54:29:ac:
                    1b:84:e9:f0:35:2e:ae:93:72:b5:f1:da:37:f9:09:
                    45:fe:1b:37:1f:e0:8e:f8:c7:57:81:ce:1a:29:ab:
                    99:fa:fc:3b:64:80:aa:85:ab:e2:7b:1f:ad:85:3d:
                    09:ca:be:4d:dc:46:6f:0e:64:2f:f3:ca:77:12:be:
                    14:3b:c2:5f:23:c9:ee:e6:70:c2:c1:25:6d:a3:65:
                    de:37:c4:b9:19:3a:4d:4b:6f:5d:2a:66:f9:ef:5f:
                    c1:5b:6f:d0:a4:ba:f7:74:3b:ca:3e:a0:b4:96:95:
                    42:f4:9d:67:c1:83:ef:6a:93:c9:80:39:d3:25:9b:
                    bd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CB:D5:79:3E:F1:27:6C:C0:95:85:EE:DF:6B:3A:66:57:1B:1E:6A
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39382e302f32342d3234203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:51:a4:5b:f3:ad:e9:6b:da:40:1b:c4:b4:ac:1e:3a:df:26:
         85:01:fc:4b:ec:4d:7e:dc:65:f2:9a:89:5b:33:04:15:ae:48:
         49:76:db:92:58:94:48:02:29:19:95:74:8a:da:1b:4e:1d:86:
         7e:e5:9e:28:02:09:22:bb:a1:c7:90:e1:9a:12:42:5e:f9:68:
         74:b9:43:57:ba:bf:91:e0:ee:73:2f:72:61:9e:67:9c:c0:60:
         e9:33:36:38:5f:ae:38:ea:33:7f:c3:30:3c:59:2e:47:a0:ee:
         96:fd:34:36:4a:c2:77:be:5c:32:b7:a9:39:58:73:d0:0b:fb:
         ee:01:a6:a8:7c:1e:6f:33:66:2d:71:f0:0f:a8:7a:ed:dd:9e:
         83:0d:6c:8c:18:b8:7f:2d:3f:cc:de:5e:7e:d1:a2:6d:81:98:
         e0:f3:c8:da:04:b9:10:0c:21:11:9d:8c:77:62:24:1f:fa:9d:
         b2:6d:b0:b7:fe:f2:7c:ee:c8:45:9c:ae:ac:75:88:f6:27:1a:
         93:a2:b8:41:8b:f7:2f:d0:d6:c0:9b:86:2b:39:bc:75:ff:1c:
         43:e9:b5:79:4c:2d:2f:58:45:b8:03:03:13:e2:e4:43:9c:18:
         66:ea:c4:31:58:fd:84:11:70:93:78:38:df:69:0c:44:4e:9b:
         39:4a:8a:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUK2p3gxhRSPOL0fl1l589EntDsOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJCOTZGOEI1M0IwNkVFNDQ4QTUxNzA5QjhEMjMwQUU0
OURCRjMwRDAeFw0yNTAxMDIxOTM4NDVaFw0yNjAxMDExOTQzNDVaMDMxMTAvBgNV
BAMTKDk1Q0JENTc5M0VGMTI3NkNDMDk1ODVFRURGNkIzQTY2NTcxQjFFNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GEzfGPyqMB8wzuBYI7W3Ry/d
wt/qp0PDcr011wMFzJUth81Hl2XMa4yqXU5z9iAkwTOby24AK77i4Cfm6Q3AwoGS
pbqQfxJemiFwyRR4mKmZZyx54tLXpPBrrSsgZ1nJ0a2T7LfUIaDRnAn5gvHDV0NK
4bP2+hFX6p5Oyxu2jrP0r1QprBuE6fA1Lq6TcrXx2jf5CUX+Gzcf4I74x1eBzhop
q5n6/DtkgKqFq+J7H62FPQnKvk3cRm8OZC/zyncSvhQ7wl8jye7mcMLBJW2jZd43
xLkZOk1Lb10qZvnvX8Fbb9Ckuvd0O8o+oLSWlUL0nWfBg+9qk8mAOdMlm73bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlcvVeT7xJ2zAlYXu32s6ZlcbHmowHwYDVR0j
BBgwFoAUorlvi1OwbuRIpRcJuNIwrknb8w0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjVrQVVZanBwS2ppOWNWY01kTlR4d052ZGtZbzEzejJqRnV5Wm81OHVY
ZmkvMC9BMkI5NkY4QjUzQjA2RUU0NDhBNTE3MDlCOEQyMzBBRTQ5REJGMzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQjk2RjhCNTNCMDZFRTQ0
OEE1MTcwOUI4RDIzMEFFNDlEQkYzMEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I1a0FVWWpwcEtqaTljVmNNZE5UeHdOdmRrWW8xM3oyakZ1eVpvNTh1WGZpLzAv
MzEzODM2MmUzMjM1MzAyZTM5MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+mIwDQYJKoZIhvcNAQELBQADggEBAHhRpFvz
relr2kAbxLSsHjrfJoUB/EvsTX7cZfKaiVszBBWuSEl225JYlEgCKRmVdIraG04d
hn7lnigCCSK7oceQ4ZoSQl75aHS5Q1e6v5Hg7nMvcmGeZ5zAYOkzNjhfrjjqM3/D
MDxZLkeg7pb9NDZKwne+XDK3qTlYc9AL++4Bpqh8Hm8zZi1x8A+oeu3dnoMNbIwY
uH8tP8zeXn7Rom2BmODzyNoEuRAMIRGdjHdiJB/6nbJtsLf+8nzuyEWcrqx1iPYn
GpOiuEGL9y/Q1sCbhis5vHX/HEPptXlMLS9YRbgDAxPi5EOcGGbqxDFY/YQRcJN4
ON9pDEROmzlKihI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:14:30 2025 by rpki-client