Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3235302e302f32342d3234203d3e20323633363239.roa
File:                     3133382e302e3235302e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          6PIRL+bAcB4raOaOai3zYAxIm9zXWzR6yr+rVatBqo0=
Subject key identifier:   D3:FF:DC:5C:A0:F6:CB:5E:36:CC:0A:1F:A9:41:33:EB:AB:10:F3:02
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       702680CD078721F8B59C85B2817E3EBADA20A6EE
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3235302e302f32342d3234203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:23 +0000
ROA not before:           Mon 17 Mar 2025 17:52:23 +0000
ROA not after:            Mon 16 Mar 2026 17:57:23 +0000
asID:                     263629
IP address blocks:        138.0.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:26:80:cd:07:87:21:f8:b5:9c:85:b2:81:7e:3e:ba:da:20:a6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:23 2025 GMT
            Not After : Mar 16 17:57:23 2026 GMT
        Subject: CN=D3FFDC5CA0F6CB5E36CC0A1FA94133EBAB10F302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2d:72:2b:18:72:e3:cf:ab:9c:20:af:16:48:
                    47:dd:7e:f2:a4:18:f1:11:98:4c:a4:80:a9:e3:38:
                    52:87:11:6d:7e:99:13:54:aa:6a:1a:2b:50:86:f7:
                    3d:8b:f2:fe:61:75:e3:e9:f0:b9:df:c9:18:9b:7f:
                    fb:e1:bc:78:69:4d:d5:58:50:2d:d0:83:d4:36:11:
                    b6:e3:64:f0:5a:0a:4f:cc:8d:92:bd:fa:e5:d4:3d:
                    a6:f0:fd:d8:81:f8:51:07:e9:c9:20:39:15:02:6a:
                    30:6c:68:65:95:18:b4:a2:27:d0:53:04:4e:6b:d6:
                    45:f6:bc:6f:a3:c3:25:9d:f0:32:61:8e:c7:0b:04:
                    79:1c:cf:b3:da:7b:f4:00:37:d4:0a:09:2d:81:67:
                    a1:05:44:95:52:49:79:6b:4e:45:bf:c9:cb:95:fa:
                    3f:3e:c5:83:e6:9f:96:a2:07:4c:16:58:38:76:2b:
                    f0:09:9e:64:b7:0a:25:88:3c:c4:30:16:a7:8b:74:
                    92:ff:2a:cc:7e:c7:8c:03:61:f0:a9:2d:d6:4d:a6:
                    85:26:a9:39:98:83:ca:52:78:a0:7e:e3:95:31:3b:
                    10:73:35:b1:d4:3e:c6:e4:02:48:65:89:75:b1:ee:
                    ef:f7:58:24:8c:ee:40:33:05:33:b4:cf:49:4f:a7:
                    9b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FF:DC:5C:A0:F6:CB:5E:36:CC:0A:1F:A9:41:33:EB:AB:10:F3:02
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3235302e302f32342d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:46:ad:8f:6f:19:cb:51:b4:da:da:8a:cc:15:9a:44:38:cb:
         6e:c1:5e:2e:9c:b1:3b:d4:48:ac:80:9c:11:4e:47:80:00:93:
         c7:61:9c:e4:fa:bc:f3:be:d9:6c:9f:ba:f3:e4:e3:0d:9c:87:
         71:2e:fb:e6:8f:77:ff:31:e9:ef:cb:91:ee:35:b8:4b:ac:10:
         a8:3f:e2:44:bf:8c:d7:89:36:48:a3:80:cf:50:55:ff:be:54:
         19:4c:9d:92:e7:7d:70:82:c5:52:7f:0c:36:0c:59:4c:88:dc:
         cf:31:9f:e6:43:65:b6:99:bc:97:a0:60:1c:e1:7f:96:d9:da:
         6e:2f:10:6a:c8:d1:52:36:9a:7e:e8:51:99:2b:86:65:82:d3:
         1f:a5:6b:98:5f:27:e1:39:e5:fb:8c:c0:92:31:e9:e4:50:a4:
         b6:0c:b3:1c:53:10:3c:97:cd:ae:37:4c:d5:3a:a4:96:98:e0:
         70:f6:9e:13:1c:7e:b9:e3:3d:1e:ac:ce:43:d8:dc:69:a3:a5:
         9a:4d:dc:3b:62:ff:4c:d5:59:dd:3c:b5:47:2f:11:e4:59:29:
         1b:92:57:33:58:ec:64:47:a8:7d:88:1e:8f:02:0a:29:3b:d3:
         7b:fd:10:03:c1:85:59:02:af:bc:bf:82:0a:7e:25:9b:f4:f5:
         fc:55:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:01:25 2025 by rpki-client