Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa
File:                     3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa (raw, json)
Hash identifier:          +EL9N8Kkyxh/h6Yu6nkKSNBOQxAiEN0kM3VLnapBiMk=
Subject key identifier:   A5:C6:3D:9E:7B:22:E5:C2:2B:21:D3:4A:4F:25:7C:75:61:73:1D:37
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       229380D185435DC2950E531375ACE8D4A172BCE0
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa
Signing time:             Thu 06 Mar 2025 22:34:05 +0000
ROA not before:           Thu 06 Mar 2025 22:29:05 +0000
ROA not after:            Thu 05 Mar 2026 22:34:05 +0000
asID:                     263143
IP address blocks:        191.242.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:93:80:d1:85:43:5d:c2:95:0e:53:13:75:ac:e8:d4:a1:72:bc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Mar  6 22:29:05 2025 GMT
            Not After : Mar  5 22:34:05 2026 GMT
        Subject: CN=A5C63D9E7B22E5C22B21D34A4F257C7561731D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:14:b3:05:7d:81:e3:00:ac:0c:4f:a5:ad:
                    96:8e:5b:87:18:3c:d4:60:e2:cf:1b:84:5a:11:8b:
                    a5:4f:2c:1b:61:ab:ea:89:af:27:d6:c0:db:af:2b:
                    78:76:f8:35:ea:3f:03:7c:fa:a5:c8:0b:39:a5:2c:
                    9a:98:a3:ea:25:d4:93:a6:7b:bf:8e:ca:61:19:c8:
                    c9:82:42:01:43:ab:e0:d3:f5:48:6d:3c:2d:2a:2b:
                    94:00:9c:b6:ba:0f:e5:22:b1:ba:11:f7:45:a6:db:
                    39:dc:90:3c:33:89:45:29:f1:a7:24:f2:2d:fe:46:
                    ee:69:fc:6f:76:6f:34:fc:c5:97:d4:77:36:13:3d:
                    20:25:89:4f:06:49:6d:20:64:fa:f8:e3:c0:99:41:
                    5f:bf:7d:6a:86:3b:f6:f1:8d:9a:a6:3b:a1:88:09:
                    f5:9a:3b:ae:a9:66:6b:92:54:38:5d:90:cb:47:c8:
                    64:8c:3a:95:ec:7f:d5:4f:c8:99:e0:40:3c:7a:65:
                    54:43:36:04:69:0a:e6:d8:8a:1c:4f:24:3f:61:6f:
                    f3:a1:ef:06:e6:06:3e:59:07:5b:72:49:27:c6:75:
                    2b:23:62:ad:f5:34:b3:6e:25:79:e2:1a:59:e6:a7:
                    e7:29:6d:83:8c:b7:cb:3c:13:71:77:d0:ce:cd:3f:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C6:3D:9E:7B:22:E5:C2:2B:21:D3:4A:4F:25:7C:75:61:73:1D:37
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:6b:ac:e9:2b:0f:57:7a:69:eb:85:0c:4c:06:62:69:5b:35:
         cd:b7:57:36:52:06:53:69:d9:6f:9c:69:53:a3:79:44:92:eb:
         1d:89:4e:ec:4e:d0:f2:ee:f7:3e:3f:7c:c3:77:32:7f:69:5c:
         81:6c:b7:ad:0c:bb:5e:0a:b7:62:46:79:21:b6:4c:c0:b9:c3:
         ea:f5:b2:e1:94:ca:1f:fc:c4:de:ee:43:30:a8:4b:f5:ec:1b:
         c6:0d:20:3f:ca:90:cc:58:73:95:c9:d1:39:7e:6c:18:77:58:
         c6:f5:01:47:71:67:3a:72:d2:57:f9:86:a7:12:0c:aa:71:f1:
         ed:26:cc:79:10:8d:78:97:c5:30:fc:24:91:20:d7:2e:7a:2f:
         98:a1:09:be:d8:31:d1:b2:b4:e1:1f:8d:39:4a:80:1e:9a:54:
         91:c4:be:0f:8f:73:4a:ad:89:d3:b5:81:d3:b5:f3:b9:3f:9c:
         fb:a1:c5:ad:35:35:78:ed:00:62:25:da:28:d2:19:34:a0:30:
         8c:8e:7a:ce:2a:3d:36:36:f7:bd:b6:d9:71:35:1b:16:00:6b:
         f0:bd:53:6a:53:27:9d:60:50:dd:6b:85:de:00:c5:47:0a:74:
         78:d8:1b:fa:cf:82:eb:55:47:e3:d3:8b:d5:ef:24:57:03:52:
         1c:19:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:47 2025 by rpki-client