Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130302e302f32322d3232203d3e20323632383238.roa
File:                     3138362e3235312e3130302e302f32322d3232203d3e20323632383238.roa (raw, json)
Hash identifier:          DuBtaSM0Pvp6ZZN0Je92GSqauIpwngPcX/d9JnpeLEs=
Subject key identifier:   F0:BE:69:AF:E1:00:B3:A4:92:3B:AE:A7:E0:8C:FB:03:64:17:61:E8
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       3E10052F1530EF0ED0499225F821AB26C63B7A76
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130302e302f32322d3232203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 18:00:43 +0000
ROA not before:           Tue 11 Mar 2025 17:55:43 +0000
ROA not after:            Tue 10 Mar 2026 18:00:43 +0000
asID:                     262828
IP address blocks:        186.251.100.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:10:05:2f:15:30:ef:0e:d0:49:92:25:f8:21:ab:26:c6:3b:7a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:55:43 2025 GMT
            Not After : Mar 10 18:00:43 2026 GMT
        Subject: CN=F0BE69AFE100B3A4923BAEA7E08CFB03641761E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:44:49:8b:9a:59:a1:c3:a2:f2:6e:05:5c:
                    36:fe:2e:87:b9:4c:38:6a:63:c8:fc:89:fe:f9:77:
                    14:a2:0f:8e:9a:07:83:98:34:78:25:f3:b6:1e:43:
                    de:1f:7f:cd:9f:8a:7f:a1:c2:e9:d4:8b:27:3e:e8:
                    1c:ba:c7:09:8a:7e:e2:97:cb:22:e6:93:aa:2a:ce:
                    87:26:86:c3:dd:2b:20:38:f1:f5:7f:da:b5:30:7e:
                    95:7c:59:fd:83:32:d5:e5:bd:50:44:77:e5:89:a9:
                    88:ab:e3:4d:77:71:48:f7:5c:d5:17:bc:e6:d2:6c:
                    ad:d6:82:7a:25:f3:2a:f0:e8:01:70:44:67:73:4d:
                    a0:e9:f1:a6:ba:d3:a9:16:59:a7:2a:0d:db:fc:c2:
                    c5:7f:a2:25:86:f4:e6:5b:a1:30:28:48:fd:d6:54:
                    62:38:35:4b:47:b0:db:7e:71:af:b8:3b:1b:8b:cf:
                    de:57:0e:fe:b3:c7:1b:79:07:d9:42:bd:9a:32:bf:
                    07:eb:0a:98:ac:12:1b:3a:2b:1a:b9:14:a5:35:94:
                    10:9e:0d:95:f9:c0:fb:5c:04:da:31:16:8a:66:80:
                    1b:0f:dd:4b:6c:45:b8:93:35:e2:73:73:bf:f3:11:
                    de:7f:69:47:41:c3:26:f8:d4:6f:3f:ae:17:ab:6e:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BE:69:AF:E1:00:B3:A4:92:3B:AE:A7:E0:8C:FB:03:64:17:61:E8
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130302e302f32322d3232203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:2d:1f:35:10:7c:48:85:82:e1:4f:ac:bb:09:c8:ac:5e:51:
         4b:5a:98:bf:5e:b1:78:d1:1e:ee:5f:17:2b:b2:c7:81:43:c7:
         01:cc:b9:d3:86:dc:9c:31:06:09:cf:ba:24:9a:c4:d7:8c:18:
         bf:dc:5a:88:7a:8a:de:4e:f7:d9:34:77:5e:e9:af:f1:b8:5e:
         ab:e8:5c:0b:fb:a0:34:8e:69:5e:57:06:bb:a1:4e:2a:cd:bc:
         96:7f:9a:3f:82:23:a7:df:27:cb:af:4a:2f:81:2f:22:9b:a5:
         15:7b:f8:97:18:07:b7:7c:d7:96:0e:60:a3:83:51:d7:8c:19:
         e7:3e:cd:14:18:76:8d:5a:db:fd:e2:cd:7b:3b:2b:31:d5:c5:
         a0:86:26:99:5f:d2:20:c5:57:d0:8a:31:06:23:fa:72:1e:99:
         9e:f8:c8:7e:96:f6:6c:a2:00:d0:8f:f0:2a:80:80:d7:af:c4:
         0f:7e:e0:c3:c1:c9:c8:e8:a4:4a:8a:e1:83:d8:34:e9:12:db:
         a0:f3:29:14:88:90:50:75:fb:77:9f:73:d1:16:30:dd:84:6c:
         35:db:da:aa:a3:00:34:f5:84:ca:42:8e:3c:cb:f0:9d:70:5b:
         1f:7d:2c:cd:f5:c0:d1:8f:ae:7b:7a:02:c8:74:91:fa:1d:59:
         cd:58:18:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:33:37 2025 by rpki-client