Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e3130342e302f32312d3234203d3e20323632383035.roa
File:                     3138362e3235302e3130342e302f32312d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          jrGP3m6b/Bq6KUc+TBtbzQu0YOYpzz33iBVdPXFItwk=
Subject key identifier:   75:5C:63:39:0D:7C:4C:8C:3D:95:91:CD:E4:3A:6D:37:33:9C:02:70
Certificate issuer:       /CN=63CBF60AF09501B61AE4A78C985BDCC1DE3E483D
Certificate serial:       31E1E664A55CC0CB82C8FE2E1B2A5EC9DE1A17E5
Authority key identifier: 63:CB:F6:0A:F0:95:01:B6:1A:E4:A7:8C:98:5B:DC:C1:DE:3E:48:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63CBF60AF09501B61AE4A78C985BDCC1DE3E483D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e3130342e302f32312d3234203d3e20323632383035.roa
Signing time:             Tue 18 Feb 2025 10:13:14 +0000
ROA not before:           Tue 18 Feb 2025 10:08:14 +0000
ROA not after:            Tue 17 Feb 2026 10:13:14 +0000
asID:                     262805
IP address blocks:        186.250.104.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:e6:64:a5:5c:c0:cb:82:c8:fe:2e:1b:2a:5e:c9:de:1a:17:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63CBF60AF09501B61AE4A78C985BDCC1DE3E483D
        Validity
            Not Before: Feb 18 10:08:14 2025 GMT
            Not After : Feb 17 10:13:14 2026 GMT
        Subject: CN=755C63390D7C4C8C3D9591CDE43A6D37339C0270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:22:63:f7:d9:fa:a9:d5:ad:10:96:15:c0:
                    f6:dd:7d:47:cf:b5:62:8a:00:2f:12:3d:77:f9:96:
                    27:b1:c1:c2:a0:a7:ed:de:92:de:0c:1b:41:9f:04:
                    3c:b7:b3:a3:54:8b:66:1b:8c:dd:eb:d2:44:32:b3:
                    a9:20:8b:1a:af:1c:c7:23:aa:27:6e:06:32:83:c5:
                    83:d1:d6:8d:a0:06:c4:66:5e:7e:22:61:6f:af:24:
                    54:58:73:6c:8f:81:1c:0a:d6:6d:bb:64:4b:4f:99:
                    a8:12:fa:58:ad:42:fb:6e:38:e6:d5:50:43:1f:3b:
                    b5:ba:3e:db:7c:8d:95:f6:09:f2:b3:e0:8e:4b:08:
                    f1:f5:e8:97:0b:52:c1:d4:b1:dc:44:5d:89:5f:54:
                    80:eb:0a:9d:60:16:68:ba:49:41:13:9a:6a:d6:5e:
                    c2:c3:69:f1:a0:e2:44:45:d2:72:e3:ed:6a:38:71:
                    47:22:c6:d6:50:e6:b4:d2:65:2b:d8:0f:c3:a1:97:
                    37:e5:95:40:38:bd:14:a0:25:7a:81:df:38:3e:2c:
                    a5:a0:44:b6:64:54:98:06:b1:e5:9a:54:04:96:ac:
                    fb:eb:c7:e6:6c:03:89:44:92:d6:76:85:68:ee:19:
                    21:c5:96:ad:d7:a1:03:06:dc:be:9c:0f:16:71:b0:
                    be:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5C:63:39:0D:7C:4C:8C:3D:95:91:CD:E4:3A:6D:37:33:9C:02:70
            X509v3 Authority Key Identifier:
                keyid:63:CB:F6:0A:F0:95:01:B6:1A:E4:A7:8C:98:5B:DC:C1:DE:3E:48:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/63CBF60AF09501B61AE4A78C985BDCC1DE3E483D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63CBF60AF09501B61AE4A78C985BDCC1DE3E483D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e3130342e302f32312d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:26:7f:75:22:b3:08:58:30:a7:e5:42:f9:e0:a7:f3:ca:e1:
         f6:c3:e2:69:88:3b:20:4b:0f:08:62:fe:bf:00:56:10:46:1d:
         65:f7:73:33:3f:34:d1:54:9c:63:4b:91:13:70:66:32:09:43:
         0e:1e:14:0e:03:ba:fc:6a:54:8e:60:df:3a:95:bf:8e:aa:68:
         bd:98:5d:a7:75:45:72:f5:bf:ff:de:3f:59:1b:76:1c:81:d9:
         ae:68:aa:a6:6e:3a:6d:b3:59:f9:17:ae:05:6a:56:69:55:62:
         39:d5:0c:aa:4f:7b:97:9b:d4:8e:e6:cc:32:63:e7:7d:3d:ac:
         17:0b:d5:3f:8c:4c:ea:ba:df:98:9d:e4:8b:09:58:d7:e6:db:
         31:a4:74:fb:8c:8e:3c:d6:96:27:01:d1:92:fb:de:ca:15:30:
         07:6f:d0:fd:81:d7:63:18:95:ad:12:2e:ed:26:16:38:88:3b:
         f2:6a:55:67:8a:bb:93:e5:68:56:a2:30:20:a5:3e:46:71:31:
         bb:e9:fb:20:df:89:2c:ee:dd:0c:0b:d7:b4:bc:7e:1d:fb:36:
         35:8c:ae:82:41:98:cf:c9:6a:8b:15:0c:f6:d5:c4:61:91:37:
         fa:c7:9a:a6:e9:7c:90:c9:00:a9:14:43:ed:04:e7:7b:d7:51:
         69:70:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:04:49 2025 by rpki-client