Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133392e302f32342d3234203d3e203238353938.roa
File:                     3136372e3235302e3133392e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          mBT4C4xXEaJib/amECAAYgwEQbEAiBxTYByzCECN3W4=
Subject key identifier:   F1:78:4D:45:0D:3F:9D:56:3E:99:92:A8:09:17:53:FC:94:1F:AE:A6
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       0522EDAB1D99882E1D475B4B644BA52627FD987E
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133392e302f32342d3234203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:00:59 +0000
ROA not before:           Mon 23 Oct 2023 12:55:59 +0000
ROA not after:            Mon 21 Oct 2024 13:00:59 +0000
asID:                     28598
IP address blocks:        167.250.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:22:ed:ab:1d:99:88:2e:1d:47:5b:4b:64:4b:a5:26:27:fd:98:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:55:59 2023 GMT
            Not After : Oct 21 13:00:59 2024 GMT
        Subject: CN=F1784D450D3F9D563E9992A8091753FC941FAEA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:f8:ee:9a:f7:79:8b:ed:79:13:56:12:f5:
                    37:50:2a:63:2d:b8:c6:d2:ff:8e:c5:c5:1b:b3:24:
                    8d:e4:91:20:f5:97:b3:aa:d3:70:3d:5e:72:4e:45:
                    be:8d:42:e7:84:e2:c9:f6:87:47:8c:52:c6:b4:37:
                    b3:6a:c6:23:45:78:85:fd:e3:36:7a:b3:6b:7b:0c:
                    81:6a:71:89:70:7b:45:4f:af:a2:7c:04:54:3a:5d:
                    0f:7b:a2:18:97:fd:0d:9d:3d:a0:31:4d:d7:86:01:
                    95:1b:52:c5:f1:34:e1:e0:48:43:63:89:39:85:66:
                    06:2f:73:32:75:ca:76:db:25:06:f1:ac:88:1f:4a:
                    f9:e0:9c:93:a6:c6:92:19:31:cf:0e:68:79:1e:e5:
                    9d:ad:29:df:45:6f:79:22:3b:0f:c8:82:2e:1e:a8:
                    f8:d4:2b:7f:46:3b:e4:4d:e8:c5:ef:ea:ac:12:38:
                    4f:74:63:93:0d:66:d1:ab:3b:ec:0c:4a:dc:97:38:
                    25:63:cd:05:9e:46:78:18:9e:4d:80:6f:35:d3:5a:
                    2a:ed:29:96:d1:8d:ea:c0:b2:56:d1:62:d8:f4:77:
                    4a:d4:98:ef:fe:d1:39:29:b9:21:ea:69:15:cf:2d:
                    32:5b:5e:4d:f3:5a:09:49:6c:9e:cf:96:d1:23:d3:
                    b9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:78:4D:45:0D:3F:9D:56:3E:99:92:A8:09:17:53:FC:94:1F:AE:A6
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133392e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:03:a5:59:69:df:57:22:74:4f:af:ab:52:3c:be:83:ab:13:
         7c:83:94:db:9c:61:02:fd:9c:7e:df:e1:e8:c5:72:c4:48:b8:
         4b:c7:6e:dd:04:6f:ad:dd:ab:16:85:cb:88:9a:03:b0:19:04:
         c0:c7:69:ac:a6:eb:67:bf:23:94:46:b4:02:16:46:1c:8a:e7:
         44:ca:75:90:f8:2d:1e:d8:98:b5:8f:34:d2:90:74:97:ad:ee:
         e5:bb:3a:78:b6:61:41:4d:8b:d3:0c:a6:a2:9c:fa:22:5c:b7:
         b4:e9:42:6c:2d:6a:f8:ff:8f:ea:82:92:24:5b:b9:0b:92:92:
         38:b1:47:b7:21:44:96:8c:4f:88:62:f7:e2:65:fc:17:af:df:
         c1:df:99:b6:ca:26:d8:24:65:71:7c:9d:a7:d8:ca:ab:85:46:
         9f:10:f9:04:65:9e:bf:5e:e9:ff:8f:dc:2c:98:2d:07:2c:6c:
         03:75:43:76:3b:62:04:47:9d:15:f8:e1:0b:44:cc:d7:80:9b:
         67:bc:65:a1:5b:dd:31:31:26:93:f2:60:d5:07:bd:07:b9:86:
         e0:12:56:09:2f:bc:99:be:2e:f5:48:88:cc:12:5e:8e:44:eb:
         30:62:fe:6d:d7:46:07:a8:e3:34:83:01:e9:95:b1:ff:85:1c:
         03:0e:d9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:45:24 2025 by rpki-client