Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34352e302f32342d3234203d3e20323632383035.roa
File:                     3138362e3235302e34352e302f32342d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          C/cJ3x/dDpvwiZDPvAuio6Oc1mpXtoCBW6vGuE5JB/c=
Subject key identifier:   94:4F:8D:C9:06:6B:1A:19:30:8F:2F:33:49:81:DC:C5:09:0D:85:51
Certificate issuer:       /CN=29B71DADE937BB0D8F9E2E96A8069DE115FCBC68
Certificate serial:       096671CFDF577A4C88AA539BA067AD13E378AD6B
Authority key identifier: 29:B7:1D:AD:E9:37:BB:0D:8F:9E:2E:96:A8:06:9D:E1:15:FC:BC:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29B71DADE937BB0D8F9E2E96A8069DE115FCBC68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34352e302f32342d3234203d3e20323632383035.roa
Signing time:             Fri 08 Mar 2024 20:10:41 +0000
ROA not before:           Fri 08 Mar 2024 20:05:41 +0000
ROA not after:            Fri 07 Mar 2025 20:10:41 +0000
asID:                     262805
IP address blocks:        186.250.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:66:71:cf:df:57:7a:4c:88:aa:53:9b:a0:67:ad:13:e3:78:ad:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B71DADE937BB0D8F9E2E96A8069DE115FCBC68
        Validity
            Not Before: Mar  8 20:05:41 2024 GMT
            Not After : Mar  7 20:10:41 2025 GMT
        Subject: CN=944F8DC9066B1A19308F2F334981DCC5090D8551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:25:05:ea:68:bb:d5:45:68:2e:2a:f6:5c:28:
                    72:02:57:23:60:ee:fb:c0:c2:d4:2e:6b:92:47:88:
                    3d:79:0b:3c:86:2b:3f:7f:dc:25:8b:24:13:37:85:
                    68:84:f7:20:9f:0c:e7:24:3c:59:31:3e:51:94:2c:
                    e3:07:b8:80:67:ac:13:63:73:48:99:ec:3c:d6:b9:
                    74:fd:df:ce:23:f7:9c:53:e3:d8:83:90:00:99:00:
                    a9:4d:a9:8c:aa:02:50:e1:97:71:87:72:c8:e0:22:
                    83:a3:3f:fc:f2:17:73:2a:5b:b5:d8:f3:91:16:c1:
                    48:06:81:5d:b6:3c:b6:58:b2:27:49:23:93:d9:72:
                    42:ef:f8:4c:66:37:42:08:50:35:c8:c9:24:55:80:
                    bb:ad:c8:2e:65:1b:1e:a7:a8:1a:25:f6:be:dd:2b:
                    18:ba:17:a7:4f:a5:61:04:c0:a6:7f:35:d0:46:46:
                    9a:84:fe:f6:45:66:e5:cf:91:ec:64:0f:ed:a3:e9:
                    62:28:66:de:f6:c6:83:43:68:45:eb:3c:8e:94:86:
                    b2:2e:5d:b9:69:40:68:fb:de:c5:44:de:5c:07:8e:
                    7a:c0:42:80:7b:47:b0:ed:ef:2b:37:6d:02:87:e2:
                    49:10:7f:03:4a:76:bf:db:ce:8e:c3:75:8a:ff:24:
                    b1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4F:8D:C9:06:6B:1A:19:30:8F:2F:33:49:81:DC:C5:09:0D:85:51
            X509v3 Authority Key Identifier:
                keyid:29:B7:1D:AD:E9:37:BB:0D:8F:9E:2E:96:A8:06:9D:E1:15:FC:BC:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/29B71DADE937BB0D8F9E2E96A8069DE115FCBC68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29B71DADE937BB0D8F9E2E96A8069DE115FCBC68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34352e302f32342d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:87:ef:d0:4e:5e:13:02:34:35:39:32:2b:dc:27:f6:2e:96:
         af:aa:df:8f:31:a2:25:b5:ff:0e:c5:62:e6:3b:31:9d:8f:de:
         f7:fd:03:b4:04:ce:55:69:e3:c6:31:a9:7f:3b:8e:28:91:6c:
         bb:d3:0a:e7:de:6a:34:0b:a5:89:99:50:90:d6:9e:4b:95:13:
         ae:7e:40:a8:9d:29:66:c0:9e:e2:69:b8:e0:88:d8:40:1e:f2:
         e8:d1:f7:6d:0f:78:68:88:bd:45:cf:06:93:58:8f:c3:51:61:
         21:fc:e7:65:5d:d1:ac:2a:9b:e5:9d:bf:f4:f6:eb:c6:3e:21:
         86:50:28:6d:43:82:82:a0:bc:58:a9:fa:ac:6e:31:35:32:94:
         99:34:10:4a:d2:f6:01:20:af:07:4b:4d:95:b2:63:5c:b0:f3:
         83:4e:b4:75:62:25:ae:6d:da:29:ff:2b:78:d9:f7:95:37:47:
         d2:81:c5:c3:07:76:7c:6a:5a:48:a7:e9:18:01:14:69:c7:ef:
         09:31:ff:96:09:56:be:82:d2:93:9a:8e:9b:f7:39:38:79:66:
         72:ee:ec:7c:b6:f1:74:9a:2e:2f:33:ac:40:6e:15:67:86:64:
         41:76:63:e1:92:f5:ff:b6:2c:a6:65:66:6e:20:da:fb:4a:49:
         a4:53:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:33 2025 by rpki-client