Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130302e302f32342d3234203d3e20323632383238.roa
File:                     3138362e3235312e3130302e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          ZYidHHQ/KX7Bcl3V9eJO2JW6Kpoyr/pSLkvbVd3WSPA=
Subject key identifier:   B4:93:8C:E0:97:EE:3C:37:7D:19:F6:8C:A4:7B:86:A2:C3:75:7C:BF
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       453CA243774A94063DBAC7C088E936903EE03EAA
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130302e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:53:23 +0000
ROA not before:           Tue 11 Mar 2025 17:48:23 +0000
ROA not after:            Tue 10 Mar 2026 17:53:23 +0000
asID:                     262828
IP address blocks:        186.251.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3c:a2:43:77:4a:94:06:3d:ba:c7:c0:88:e9:36:90:3e:e0:3e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:48:23 2025 GMT
            Not After : Mar 10 17:53:23 2026 GMT
        Subject: CN=B4938CE097EE3C377D19F68CA47B86A2C3757CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:43:cd:14:6e:65:dc:85:9e:d2:5e:72:c7:
                    eb:a0:2d:0d:4b:60:57:bd:fc:57:0d:11:cd:1c:da:
                    b4:5a:b9:7d:2f:9a:8e:cb:8d:52:64:a2:41:97:91:
                    a6:96:db:3a:fe:23:ab:90:8c:66:83:91:50:df:d7:
                    69:e9:84:23:c6:d7:e4:ff:5f:e4:a2:e5:33:eb:db:
                    f6:50:12:58:d9:e3:62:1b:7a:ec:56:c6:c5:73:90:
                    95:b2:df:b9:82:1e:b0:50:27:49:ea:f4:b7:a6:aa:
                    ae:06:f9:1f:07:05:5f:a7:c2:0d:6c:82:2f:8b:cf:
                    bb:09:f5:4d:b1:e6:2d:79:da:8c:d9:26:08:f0:de:
                    76:d5:89:1a:06:9f:d3:7f:5a:19:21:fe:a1:57:d8:
                    40:ef:67:3d:7f:99:d3:d5:bb:4c:a6:ac:47:90:d6:
                    d0:ed:62:58:72:c9:a1:ee:b4:a9:1d:07:8a:75:f5:
                    83:78:ca:7d:a4:62:f3:61:36:54:59:df:cc:bb:c6:
                    b7:0f:f6:bd:a3:cf:de:80:d4:6f:be:de:1a:16:48:
                    c5:4c:d8:d6:f2:39:35:d9:95:13:01:79:ae:27:d1:
                    03:5b:e3:2c:1f:9f:4e:fe:df:f9:f2:88:2f:7f:44:
                    80:6b:6c:c8:03:1d:59:13:98:6a:36:ad:56:8d:08:
                    a1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:93:8C:E0:97:EE:3C:37:7D:19:F6:8C:A4:7B:86:A2:C3:75:7C:BF
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130302e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:9e:78:b8:97:5b:a8:bc:4b:a3:0f:df:6e:d6:a3:38:f5:ea:
         7e:9f:73:bd:be:83:89:ea:91:26:58:70:4d:24:b3:8b:82:47:
         ae:eb:bf:82:19:02:ae:5a:d6:fe:b8:fc:62:f4:8a:7d:04:98:
         8e:51:a0:b0:71:2a:a8:51:94:1c:4f:d5:7e:d7:8d:5a:af:26:
         75:85:bc:5d:8b:d6:f6:56:7e:02:54:bf:2c:f9:88:b4:ae:49:
         7c:9f:ba:11:ff:b7:aa:e1:17:61:94:eb:a9:75:94:c6:02:41:
         33:ee:6b:6d:52:f9:1e:03:02:b0:d7:15:89:d6:30:9e:29:f6:
         95:22:e7:44:d7:f5:fe:2a:56:0d:53:0d:3d:bf:26:98:49:dc:
         40:2f:e8:12:87:58:37:12:b2:58:66:9f:05:f7:43:14:bd:1f:
         9f:ea:d0:7c:69:37:0e:c9:e3:60:43:93:15:5a:dc:89:18:5a:
         b3:49:32:72:26:f2:92:cc:93:88:73:31:c6:01:fd:4e:84:ca:
         eb:65:43:4b:73:9e:f9:a8:67:f2:e7:e6:e3:64:7d:c6:be:7f:
         b4:92:a8:07:99:61:c9:d0:a2:09:7d:5e:87:66:ff:39:d2:e1:
         7a:50:3a:1d:db:73:e7:9c:89:5e:6c:99:a2:9e:b9:9f:bb:cd:
         3b:8a:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:47 2025 by rpki-client