Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e3130342e302f32312d3234203d3e20323632383035.roa
File:                     3138362e3235302e3130342e302f32312d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          vANUZWFZsUdAeO4wEQmVDb1rvgFZM+qfM6AVhBC/fIA=
Subject key identifier:   2F:F3:22:0D:8E:49:FD:B7:7C:81:7B:8B:36:5E:05:67:37:F3:C6:47
Certificate issuer:       /CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
Certificate serial:       6D36B8AA6DC053A869CBD8AF47006760C865B978
Authority key identifier: 03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e3130342e302f32312d3234203d3e20323632383035.roa
Signing time:             Tue 11 Feb 2025 17:07:38 +0000
ROA not before:           Tue 11 Feb 2025 17:02:38 +0000
ROA not after:            Tue 10 Feb 2026 17:07:38 +0000
asID:                     262805
IP address blocks:        186.250.104.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:36:b8:aa:6d:c0:53:a8:69:cb:d8:af:47:00:67:60:c8:65:b9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
        Validity
            Not Before: Feb 11 17:02:38 2025 GMT
            Not After : Feb 10 17:07:38 2026 GMT
        Subject: CN=2FF3220D8E49FDB77C817B8B365E056737F3C647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d1:f5:c1:ba:36:36:cd:7a:39:f5:9e:75:0e:
                    aa:16:ea:9e:d3:e6:6e:a8:54:1b:49:da:45:70:34:
                    a6:85:a7:a2:a9:6c:1f:05:a4:c9:51:1e:7d:c5:bb:
                    58:d7:d3:3d:ac:8a:46:0b:09:94:4e:28:bc:23:47:
                    ef:b7:45:fb:b5:43:96:78:cd:4c:93:82:da:52:17:
                    e7:22:c6:dd:c8:ad:a8:90:3b:bf:c2:fb:6e:86:0d:
                    58:3d:a6:3f:fe:b9:13:b7:a1:92:92:f2:89:d3:28:
                    eb:a3:00:48:84:02:8d:45:da:4c:c4:c1:ad:6a:a4:
                    dd:63:87:53:9f:7c:5d:d2:9b:93:48:8a:e2:50:b8:
                    eb:24:2b:4c:c0:e9:33:2d:81:c3:72:d4:0d:da:a2:
                    c9:93:e8:d1:85:29:94:08:d3:ab:94:fa:97:8c:86:
                    69:da:84:85:b9:bd:79:20:db:20:be:20:66:1f:d7:
                    01:ac:26:95:ce:cc:d4:ca:86:ae:53:02:1f:db:33:
                    49:3a:80:75:a6:8f:4d:1e:10:e0:6f:08:05:30:63:
                    11:e9:bf:ea:e2:54:40:c4:c3:15:2a:41:47:17:1a:
                    07:88:b4:cd:2b:da:b1:e1:06:38:7f:f1:04:41:4b:
                    0d:f2:61:ca:95:e4:b8:5b:3f:ae:23:ea:ae:41:e8:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F3:22:0D:8E:49:FD:B7:7C:81:7B:8B:36:5E:05:67:37:F3:C6:47
            X509v3 Authority Key Identifier:
                keyid:03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e3130342e302f32312d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:58:0a:eb:95:17:4d:71:7f:ee:e0:db:53:b0:a8:cf:4e:82:
         b5:a5:2d:22:e1:0e:95:06:41:5c:6e:8c:35:1f:a0:91:99:04:
         98:a9:d4:2d:d6:6b:1c:66:39:f5:0b:24:d5:23:b2:9a:6e:e9:
         a1:3e:fe:a0:52:73:3f:c5:d8:b1:71:d9:85:b0:60:01:33:4c:
         d8:6d:92:04:56:8b:ae:7c:68:2a:1b:27:2f:60:f1:b8:ee:5a:
         66:cc:24:9c:85:bf:74:b5:04:6a:9d:0e:88:15:22:ea:45:97:
         8a:26:b4:53:91:00:50:05:dd:68:48:bb:59:9d:47:90:c5:89:
         6b:93:8c:f0:7a:78:c0:ec:cb:a9:07:de:97:18:a4:4b:c0:73:
         6d:b5:16:d1:03:75:eb:06:9e:28:90:b1:75:21:6f:97:d7:fa:
         4f:1a:fc:79:f7:e0:2c:09:ff:3a:2d:96:24:86:49:a0:a8:92:
         7b:0b:fa:74:88:3d:a1:c9:c2:78:f8:85:22:9d:74:b0:44:21:
         8f:0f:b0:79:04:e6:5f:45:7b:86:2d:8e:8f:f2:5c:8a:ba:bc:
         d1:2d:7f:e7:f0:8e:35:b7:94:32:a7:26:dc:f2:ce:ee:7d:73:
         a5:a5:86:3e:8c:5c:1e:64:d0:af:2a:07:9b:9b:fa:36:90:88:
         b3:97:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:50:59 2025 by rpki-client