Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235352e302f32342d3234203d3e20323633353730.roa
File:                     3138362e3234392e3235352e302f32342d3234203d3e20323633353730.roa (raw, json)
Hash identifier:          omZlu3E2uUSlHJcbmifiQsb+UiZjWq+qbC+lzf6mw7U=
Subject key identifier:   72:E5:22:CB:17:C6:8A:2A:DF:27:6E:DF:56:E6:67:18:66:C9:27:15
Certificate issuer:       /CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
Certificate serial:       20BAC97ED2CF8BB7F76C768ED18859C432061735
Authority key identifier: 9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235352e302f32342d3234203d3e20323633353730.roa
Signing time:             Thu 06 Feb 2025 13:57:36 +0000
ROA not before:           Thu 06 Feb 2025 13:52:36 +0000
ROA not after:            Thu 05 Feb 2026 13:57:36 +0000
asID:                     263570
IP address blocks:        186.249.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ba:c9:7e:d2:cf:8b:b7:f7:6c:76:8e:d1:88:59:c4:32:06:17:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
        Validity
            Not Before: Feb  6 13:52:36 2025 GMT
            Not After : Feb  5 13:57:36 2026 GMT
        Subject: CN=72E522CB17C68A2ADF276EDF56E6671866C92715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3c:2c:16:04:87:a9:79:e8:f2:56:96:02:e5:
                    fa:6d:0e:95:2f:0b:f1:ed:3d:a9:31:96:31:d3:bc:
                    1d:8d:80:4c:1b:75:2b:fd:55:64:4e:08:40:01:43:
                    fd:82:24:ba:e9:9c:93:d5:ca:14:73:58:3f:d0:50:
                    43:b7:2d:7e:59:b9:87:64:de:f8:80:54:01:8c:1c:
                    85:45:7d:9b:4d:23:c9:5f:35:df:09:65:d2:5c:82:
                    eb:af:fb:19:13:a9:00:d2:a1:e4:0c:7e:78:db:5e:
                    d1:f1:33:82:e7:41:68:42:83:e2:67:f1:3f:a9:fc:
                    dd:ef:af:be:78:60:9e:9b:1e:c6:d6:b1:4c:c8:59:
                    ca:fc:02:9b:85:d0:98:3a:c7:cb:03:ad:89:12:c2:
                    9e:d5:ae:2c:5b:18:ef:c6:5b:40:81:b0:1c:36:d3:
                    10:7d:35:77:07:a3:77:b5:26:68:2a:10:ca:de:52:
                    a9:a4:e9:f1:d9:d1:8c:e6:9f:87:09:b8:1b:36:b8:
                    3d:49:e0:cb:75:5d:ee:70:f7:6a:47:a2:ba:17:0e:
                    47:e6:cd:88:25:51:06:1e:23:0c:09:23:ad:90:f3:
                    be:4d:4d:4e:53:c5:2d:14:8e:bb:3c:ed:a7:a2:9f:
                    11:5f:6d:99:17:64:97:04:0e:a5:ee:5b:46:9b:79:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E5:22:CB:17:C6:8A:2A:DF:27:6E:DF:56:E6:67:18:66:C9:27:15
            X509v3 Authority Key Identifier:
                keyid:9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235352e302f32342d3234203d3e20323633353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:3d:f1:8d:ca:52:56:9c:dd:31:a2:0a:c1:d8:19:a4:3f:81:
         3e:4b:97:97:4f:c0:aa:6b:e6:13:39:a6:f4:93:0e:f9:ec:55:
         37:01:ce:5d:af:bc:5e:f5:51:53:89:33:2d:c4:a6:6a:16:4f:
         46:2d:e5:75:af:2b:06:c9:81:d6:6f:a5:6c:16:47:3f:38:82:
         b1:cd:b2:bd:e9:bf:9c:57:ac:a2:54:bc:79:98:be:f5:22:f3:
         13:0e:16:b9:66:13:12:b2:40:57:33:8f:4a:1b:ce:ea:3c:d5:
         e0:b9:9e:04:82:59:10:2b:17:93:d8:9a:26:a2:03:50:82:df:
         01:0c:37:c1:86:ab:40:65:e4:ea:1c:d1:9a:43:20:b2:43:27:
         f9:06:7b:b3:17:da:a0:10:db:3d:9c:fc:10:b0:d9:45:d1:3d:
         34:3a:95:73:5d:f2:32:6e:3b:84:2d:da:20:94:fd:a6:c6:c1:
         6d:90:b1:95:b4:1d:da:93:f3:ec:7d:2e:7d:6c:61:0e:4a:11:
         99:ed:12:16:5e:6c:08:f7:4c:72:6b:9a:44:4a:ff:38:f0:d6:
         cd:07:28:37:91:27:51:03:20:86:70:f9:10:fb:b6:34:17:26:
         8c:dd:74:7e:52:58:38:9d:0a:78:9b:6c:59:bf:4b:3e:1e:cd:
         12:b8:54:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:59:40 2025 by rpki-client