Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
File:                     3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          MeXuBWgxPLkbfQGuXDah2hjBqr1LKTn3NxzADaqeaAc=
Subject key identifier:   9F:7B:09:7A:F7:9F:7D:BB:77:D0:5D:5F:6E:98:49:8B:58:B6:08:CD
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       43895ECD5632F7B5177A3CE1083338DBC8A21080
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 27 Mar 2025 17:28:45 +0000
ROA not before:           Thu 27 Mar 2025 17:23:45 +0000
ROA not after:            Thu 26 Mar 2026 17:28:45 +0000
asID:                     263518
IP address blocks:        168.197.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:89:5e:cd:56:32:f7:b5:17:7a:3c:e1:08:33:38:db:c8:a2:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Mar 27 17:23:45 2025 GMT
            Not After : Mar 26 17:28:45 2026 GMT
        Subject: CN=9F7B097AF79F7DBB77D05D5F6E98498B58B608CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:9b:03:48:84:fb:fc:b6:e1:72:a7:66:27:
                    a2:11:95:b5:cf:ef:8f:2d:97:00:f8:e1:21:d4:d2:
                    63:eb:85:28:c0:a4:32:de:67:78:6b:f9:87:e7:74:
                    11:1d:ee:36:c3:10:91:2c:16:ce:b1:2d:e5:16:5f:
                    ab:6b:76:57:76:85:37:58:53:80:ae:cf:05:56:3a:
                    31:0e:a7:2c:4a:31:33:de:26:19:9c:84:e8:6c:c5:
                    8d:58:f0:1b:77:9f:01:fb:cf:cf:f5:9a:16:ce:b6:
                    c4:72:c1:3b:9b:1e:51:72:6c:1c:9e:4d:fc:bf:dc:
                    14:0e:4f:9b:6c:b9:8a:d5:7f:b4:a1:d0:b5:f7:a1:
                    f0:9f:00:5c:c4:41:bc:44:0c:43:47:37:25:74:a7:
                    29:ee:3f:e8:b0:ec:c3:ed:6c:44:ab:d8:dd:75:fc:
                    5e:b7:e0:ff:18:68:45:db:00:d7:07:e8:b2:fe:c4:
                    4f:b5:7d:ea:86:f3:6d:11:47:23:ea:83:52:b7:93:
                    2b:09:02:e0:4f:9c:68:48:f9:b8:0a:50:29:94:5a:
                    61:46:28:f4:fd:ed:71:c3:f9:a4:84:3d:bf:66:26:
                    e5:0a:39:3b:09:ca:7e:2c:bc:b5:4e:57:9d:1b:58:
                    85:10:55:ab:b2:68:3a:d8:75:d1:e3:aa:55:7a:6a:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7B:09:7A:F7:9F:7D:BB:77:D0:5D:5F:6E:98:49:8B:58:B6:08:CD
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:8a:61:3a:e3:cc:94:aa:02:04:fd:b5:03:6c:1f:58:39:5c:
         de:82:97:8c:bf:33:27:a7:5f:23:82:e0:81:5d:ff:28:78:f0:
         bb:6b:f0:cd:1b:88:a3:5c:52:57:55:be:23:c0:1c:08:c0:09:
         c2:7c:98:31:cd:83:5d:f7:58:22:4e:86:87:67:d4:c6:4e:78:
         ac:fa:f0:4a:d9:f1:62:c4:e5:3f:22:aa:b2:7c:99:d0:6d:8b:
         f2:fc:af:21:1c:e0:4e:65:15:51:e7:e6:21:bd:33:ff:4c:20:
         6b:dc:50:e8:a8:64:e3:a2:34:f2:ac:79:10:f0:ec:f7:ce:26:
         7f:fc:f4:3b:28:7c:b6:a7:f5:f6:22:13:41:6e:3c:61:e4:e4:
         d0:a1:f0:63:b2:c9:1c:de:e8:c6:7d:ec:1f:5c:34:7f:8b:35:
         ad:d9:e0:ac:ee:3c:97:5a:58:3c:be:db:ce:2b:5e:5e:b7:2e:
         07:bb:21:44:39:ee:b1:07:1e:ea:0a:e9:f3:78:15:d0:d4:26:
         13:5b:83:83:5e:d6:9b:4f:37:6c:26:dc:9b:d1:2a:e4:0f:0b:
         47:08:7f:95:79:d4:0b:a2:e5:aa:4e:e8:74:31:ab:40:6b:0d:
         37:b5:4e:ea:11:90:22:b9:32:62:34:3b:05:ac:4f:95:69:c5:
         16:0b:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:56:03 2025 by rpki-client