Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3235302e302f32342d3234203d3e20323633303836.roa
File:                     3138362e3230382e3235302e302f32342d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          PEMXNxkavX4eHS2Catj0HpJIi17CaBFsZBPSVjdGcnM=
Subject key identifier:   C0:6F:3E:C1:38:20:55:50:11:C8:D6:DD:3E:81:A3:20:75:60:F8:AA
Certificate issuer:       /CN=1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B
Certificate serial:       6F9924FFBDE01985F86D42869BC32056CA086FB4
Authority key identifier: 1C:5F:E8:A7:A5:CA:F8:C0:33:2E:DF:71:1A:BD:C0:80:5B:20:8F:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3235302e302f32342d3234203d3e20323633303836.roa
Signing time:             Tue 07 Mar 2023 15:52:09 +0000
ROA not before:           Tue 07 Mar 2023 15:47:09 +0000
ROA not after:            Tue 05 Mar 2024 15:52:09 +0000
asID:                     263086
IP address blocks:        186.208.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:99:24:ff:bd:e0:19:85:f8:6d:42:86:9b:c3:20:56:ca:08:6f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B
        Validity
            Not Before: Mar  7 15:47:09 2023 GMT
            Not After : Mar  5 15:52:09 2024 GMT
        Subject: CN=C06F3EC13820555011C8D6DD3E81A3207560F8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:68:73:08:ac:d5:05:cf:82:0a:80:73:09:
                    db:b4:b9:be:84:5f:ef:f9:92:cf:8d:9b:40:17:e6:
                    b9:f2:96:97:a3:d2:89:1f:a5:1c:65:99:c1:5b:e5:
                    23:cd:3b:89:c9:3e:49:53:20:d9:f7:47:e5:e6:91:
                    1c:19:9d:4d:18:dd:c3:3c:e3:2e:ac:1d:d9:b6:a5:
                    96:55:ac:f3:a6:0b:45:90:cd:f7:2c:05:56:c6:8d:
                    ff:d0:44:91:5d:e5:82:d3:ec:f6:3b:18:08:68:b0:
                    b6:14:78:22:f5:f9:0a:47:bd:7c:4a:ac:3a:71:9b:
                    1f:3a:b9:e7:c5:a8:64:01:87:a3:79:eb:e3:24:ce:
                    20:b2:44:cc:1b:a3:77:c4:00:d5:9b:74:27:7e:31:
                    48:8d:27:0f:02:3d:4c:d5:e9:cf:67:26:8a:8f:1e:
                    b2:1a:cd:17:68:42:06:8e:c0:4c:ed:d4:c9:6d:a9:
                    fb:6b:84:ac:61:84:46:23:07:7c:7b:3f:25:1d:3e:
                    49:99:ce:f3:9a:e0:19:13:b9:72:f7:f4:b3:70:39:
                    1d:4f:6e:6c:41:73:eb:e2:58:e6:33:4b:b2:2c:58:
                    c1:9d:17:3b:21:14:54:70:00:5c:10:95:ac:81:89:
                    e9:7c:d2:11:eb:c8:ba:3d:4d:c1:16:91:20:5d:cd:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6F:3E:C1:38:20:55:50:11:C8:D6:DD:3E:81:A3:20:75:60:F8:AA
            X509v3 Authority Key Identifier:
                keyid:1C:5F:E8:A7:A5:CA:F8:C0:33:2E:DF:71:1A:BD:C0:80:5B:20:8F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3235302e302f32342d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:e5:fc:89:b0:89:ad:bc:e7:7b:c9:bb:99:08:07:dc:58:8e:
         53:78:4d:8b:94:68:06:44:71:2e:37:a5:5f:71:fe:ef:c1:a8:
         d6:e2:fa:48:3b:1b:52:fb:56:65:3a:68:f3:fd:55:81:f6:29:
         08:7b:15:2a:02:2c:f1:20:e0:e1:34:57:1f:17:9b:d1:d4:97:
         6d:37:d1:ec:0d:73:43:8f:c3:ce:51:44:80:07:1a:52:d9:2b:
         bb:cd:f0:04:7b:e2:a5:c0:e9:79:23:35:a4:ca:df:f9:81:1c:
         db:e2:a6:1b:6d:10:f5:0f:1b:1d:0d:59:53:c5:4e:a8:ab:ef:
         63:42:31:b3:28:00:69:5c:63:ce:83:58:15:5d:12:a6:8d:c8:
         36:90:31:7a:f8:45:18:77:64:d3:f7:f7:5d:f4:c9:87:cd:aa:
         3b:c3:e7:9a:08:e7:c8:70:04:2f:52:20:38:84:8d:60:b4:ba:
         34:e1:9a:12:0c:b0:38:9b:ee:59:63:ce:7a:93:99:e8:21:70:
         ab:0c:ee:01:37:2e:09:ac:07:73:2b:cf:e4:49:83:07:44:57:
         90:c7:6d:e9:55:6c:9a:a8:7f:b9:1e:f5:ec:21:ef:86:59:15:
         9a:c9:9e:69:66:75:aa:d3:70:3a:c4:10:12:40:fd:7a:43:32:
         c6:a8:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:57 2025 by rpki-client