Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235342e302f32342d3234203d3e20323633353730.roa
File:                     3138362e3234392e3235342e302f32342d3234203d3e20323633353730.roa (raw, json)
Hash identifier:          4Pplp8nNH35fKZggcQAd7QR9pWTrkjJzQ8MqkV5N5Fc=
Subject key identifier:   DB:5D:9F:82:73:3E:DE:43:80:F4:19:C9:E9:EE:CB:9A:6C:F7:A5:82
Certificate issuer:       /CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
Certificate serial:       06D4605DB7A1D1E6ACE6D6D936702567A7F66B45
Authority key identifier: 9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235342e302f32342d3234203d3e20323633353730.roa
Signing time:             Thu 06 Feb 2025 13:57:37 +0000
ROA not before:           Thu 06 Feb 2025 13:52:37 +0000
ROA not after:            Thu 05 Feb 2026 13:57:37 +0000
asID:                     263570
IP address blocks:        186.249.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d4:60:5d:b7:a1:d1:e6:ac:e6:d6:d9:36:70:25:67:a7:f6:6b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
        Validity
            Not Before: Feb  6 13:52:37 2025 GMT
            Not After : Feb  5 13:57:37 2026 GMT
        Subject: CN=DB5D9F82733EDE4380F419C9E9EECB9A6CF7A582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:32:11:e5:30:47:23:ef:2e:cc:f8:41:d3:
                    10:40:bf:f1:55:f5:0d:1b:f3:18:be:4d:29:68:37:
                    96:eb:3e:74:54:3f:28:1b:01:c1:a9:18:f4:5c:c9:
                    6a:10:b6:4a:92:db:a9:00:2a:d2:05:1a:b4:93:e5:
                    a9:2b:4f:5d:e1:92:be:54:92:33:87:94:e9:8b:5e:
                    73:eb:9f:b7:14:21:11:e6:7c:c9:1c:36:5f:2d:1c:
                    80:31:16:b7:e2:6e:99:d3:c1:8b:d2:56:cf:08:77:
                    88:d5:68:7f:c1:ee:01:80:9c:c1:d0:91:9c:86:56:
                    9b:39:02:76:1e:bb:e3:21:34:88:b5:eb:a0:5a:21:
                    fb:f9:83:2d:7a:07:73:ff:e3:40:64:b3:2c:32:85:
                    3b:54:51:c7:48:e3:ed:f2:b2:b7:e2:88:9d:e0:d1:
                    02:7e:2d:f8:d5:a8:9e:eb:19:9c:46:bf:ec:78:57:
                    cf:80:fe:94:63:ef:33:c2:e6:73:10:b5:8c:6a:82:
                    75:fb:93:12:a3:01:20:86:05:08:12:4f:2b:11:d1:
                    15:27:c3:e7:b0:1d:9d:d7:fe:db:dd:a2:5b:46:79:
                    2f:f3:50:c3:24:02:b7:3a:28:1c:20:af:29:60:2c:
                    dc:60:4c:81:48:1d:7b:60:86:aa:48:4f:88:a8:34:
                    3b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5D:9F:82:73:3E:DE:43:80:F4:19:C9:E9:EE:CB:9A:6C:F7:A5:82
            X509v3 Authority Key Identifier:
                keyid:9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235342e302f32342d3234203d3e20323633353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d9:93:03:c0:84:c1:ff:02:b5:cc:74:f9:ac:36:19:49:f0:
         d5:b3:71:da:7d:12:06:87:11:4d:4d:b5:a0:c4:4d:eb:39:3f:
         99:e7:17:79:f7:d7:db:03:96:87:fd:8c:f3:e7:60:d4:f7:61:
         48:c3:1f:f7:38:9b:9a:34:5f:16:49:f1:a6:a0:22:c8:d8:89:
         cd:8f:44:e5:27:c7:25:49:43:02:47:4c:60:58:fb:ae:5e:2c:
         6f:60:05:9c:45:22:1c:94:aa:8c:7b:f2:fb:2b:bd:03:1a:3e:
         42:a3:3f:64:0e:04:f5:ae:c8:28:5f:64:8d:80:43:2f:ed:e9:
         a5:a4:65:1b:fb:6a:9d:1c:31:14:18:15:94:b3:b5:fb:20:87:
         7c:9d:84:f9:c7:63:bf:d9:d5:b8:35:6c:09:9d:52:f7:d6:50:
         08:a1:0d:cd:ee:1e:28:8d:bf:46:81:21:1c:35:18:6b:25:69:
         da:77:ab:46:38:b1:92:cb:95:da:e3:41:5d:45:10:5e:13:2d:
         e4:e6:8c:12:24:fa:8c:51:31:63:3f:0d:94:9c:e2:ee:3c:6c:
         af:8e:04:55:42:20:f9:15:2c:12:71:32:e3:b0:e5:4a:01:53:
         fe:1a:6c:65:c9:dd:b3:24:79:90:4c:5b:e2:8c:02:fa:be:ae:
         79:f0:86:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:57:52 2025 by rpki-client