Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa
File:                     3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          LkgveWYSUcYClX/3N1HGNilH0ey2uDemcm0I0I8Glsw=
Subject key identifier:   03:1D:27:B4:E7:B1:C8:E8:AC:72:5B:F1:CF:C5:4C:C7:2A:4F:43:B8
Certificate issuer:       /CN=3F50B1080599A7B91D805ADC9C3E7B90AE734736
Certificate serial:       44F7D3B2E2A69C4483766E44F15D4DE5B4E302BB
Authority key identifier: 3F:50:B1:08:05:99:A7:B9:1D:80:5A:DC:9C:3E:7B:90:AE:73:47:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F50B1080599A7B91D805ADC9C3E7B90AE734736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa
Signing time:             Fri 03 Jan 2025 14:21:43 +0000
ROA not before:           Fri 03 Jan 2025 14:16:43 +0000
ROA not after:            Fri 02 Jan 2026 14:21:43 +0000
asID:                     263026
IP address blocks:        186.249.208.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f7:d3:b2:e2:a6:9c:44:83:76:6e:44:f1:5d:4d:e5:b4:e3:02:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F50B1080599A7B91D805ADC9C3E7B90AE734736
        Validity
            Not Before: Jan  3 14:16:43 2025 GMT
            Not After : Jan  2 14:21:43 2026 GMT
        Subject: CN=031D27B4E7B1C8E8AC725BF1CFC54CC72A4F43B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:38:4b:69:c1:3e:9c:f8:9c:e9:3c:e0:b1:
                    53:db:89:97:f1:4f:f8:d4:27:cb:00:97:b0:4b:c6:
                    45:2b:65:7e:e0:67:96:fe:3f:89:08:4f:97:c8:77:
                    fe:75:a6:d3:55:d7:f2:18:dc:16:c1:56:2b:39:f1:
                    33:14:b9:88:c9:74:ad:11:48:48:a0:78:9a:37:e9:
                    a7:b0:c3:5b:e5:54:e0:2e:fb:95:c1:b3:d8:48:da:
                    41:da:70:14:a3:b3:09:bf:46:a1:fe:05:6f:70:d6:
                    f5:30:36:e5:be:63:ed:15:ee:dd:44:3d:74:a4:e2:
                    c9:d0:92:f6:63:f3:1e:df:e4:fa:0a:f6:10:5c:01:
                    26:96:e4:20:28:86:12:2a:7d:6d:f0:16:5f:20:cd:
                    25:dc:a1:cf:08:c7:e8:35:cf:c3:f5:3a:c5:54:09:
                    93:96:f3:d7:09:59:01:bc:65:5e:83:2a:2e:a4:1c:
                    8b:8a:63:27:b0:a0:9b:52:e1:58:6a:a6:80:99:8b:
                    85:e4:39:b7:45:c8:c0:14:1f:d7:ce:78:15:d0:b6:
                    1d:2a:0e:09:25:7e:b9:aa:52:3c:06:d1:d0:f2:db:
                    55:46:fc:91:f6:30:8e:e2:78:9b:4a:78:9a:e2:fb:
                    16:7a:b8:17:5c:58:25:d0:03:80:f7:ae:12:32:91:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1D:27:B4:E7:B1:C8:E8:AC:72:5B:F1:CF:C5:4C:C7:2A:4F:43:B8
            X509v3 Authority Key Identifier:
                keyid:3F:50:B1:08:05:99:A7:B9:1D:80:5A:DC:9C:3E:7B:90:AE:73:47:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3F50B1080599A7B91D805ADC9C3E7B90AE734736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F50B1080599A7B91D805ADC9C3E7B90AE734736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:cb:d6:26:ea:2c:ee:8d:5b:b5:88:20:f1:6f:8e:b7:ce:
         96:e9:cd:5e:f2:38:57:05:a9:c8:24:d8:09:4d:12:b3:e5:b5:
         53:0f:f8:34:71:f9:45:5a:d2:ef:73:39:18:ad:28:80:23:85:
         3f:b5:87:fe:a6:26:db:15:b2:f5:30:b1:a1:e9:53:37:c9:81:
         08:76:a4:7b:36:65:c7:25:64:e6:3f:a4:92:fb:2f:4f:3a:e2:
         8b:b1:99:31:3e:ce:6e:f4:f0:5f:ff:a1:63:94:d4:4a:7f:48:
         96:78:93:85:1a:c0:2d:bb:2b:e7:86:0f:af:67:c1:be:91:2a:
         a1:6c:cd:cc:f5:51:76:12:4a:26:91:6b:cd:3b:c6:8f:68:a5:
         7f:06:a7:25:7a:cd:13:dc:c0:4b:f5:e8:a4:77:07:99:22:1f:
         68:c7:c5:99:d7:70:6c:76:c6:50:3b:45:4e:1c:b0:76:d7:68:
         97:9c:7d:dc:ea:18:7e:6b:04:b7:d7:9b:f2:e5:cc:9b:dd:5d:
         d8:40:32:e9:a0:b3:76:68:e8:e1:fa:50:fa:1e:dc:29:1f:d0:
         28:7b:5b:ef:72:99:63:c2:03:50:f0:07:6d:a4:1b:22:4b:2e:
         86:1b:84:10:c6:23:59:97:1e:47:bc:7c:9e:fd:a2:03:f8:3b:
         fd:8c:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:47:09 2025 by rpki-client