Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          xHmaTjEPF83hJJTiyMXhe4PPfpHrwkM53Yy7Uqk0wlA=
Subject key identifier:   6E:EE:F7:8B:5F:90:1E:FC:10:00:BF:D5:75:0A:30:6C:15:E5:C5:18
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       65C5A69F0296AA6FDDE26C4BDB0B6C4302C03230
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa
Signing time:             Tue 24 Dec 2024 13:49:28 +0000
ROA not before:           Tue 24 Dec 2024 13:44:28 +0000
ROA not after:            Tue 23 Dec 2025 13:49:28 +0000
asID:                     267513
IP address blocks:        186.251.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c5:a6:9f:02:96:aa:6f:dd:e2:6c:4b:db:0b:6c:43:02:c0:32:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Dec 24 13:44:28 2024 GMT
            Not After : Dec 23 13:49:28 2025 GMT
        Subject: CN=6EEEF78B5F901EFC1000BFD5750A306C15E5C518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:1d:ad:dd:19:3e:30:19:9c:54:25:4b:92:
                    c9:7d:59:3e:6b:8d:e6:5c:58:10:1c:e2:54:6d:93:
                    27:e9:b7:81:ed:ce:66:2e:04:df:67:de:b8:dc:4c:
                    8e:91:8c:c6:b7:ef:14:36:c2:3e:64:bc:46:e7:11:
                    4e:12:97:db:3a:7b:d8:ec:be:a6:8c:07:6a:81:3e:
                    fc:ab:eb:d4:ff:07:f7:d8:c1:be:17:5f:78:9e:00:
                    47:52:2e:68:54:27:bf:91:da:a9:a8:f1:7e:ad:e1:
                    bf:16:d5:3b:fd:d8:8a:d1:12:b3:b2:18:7d:e0:ed:
                    e3:73:a0:8c:09:7c:34:8b:d3:d0:3a:5b:b6:d0:a1:
                    30:43:a7:4f:2b:31:28:fe:21:b3:ab:2d:84:9e:09:
                    84:ef:10:d4:ba:83:74:c7:f1:05:ca:dd:da:3e:a2:
                    ce:46:dc:1f:a2:97:e2:90:0e:b2:61:c4:d3:22:5a:
                    43:8c:04:62:3e:3c:80:b7:2a:3e:e2:ae:e9:10:8a:
                    95:bc:3e:f4:9b:17:0d:e8:63:c8:13:03:40:39:be:
                    f2:ac:85:0b:a5:8c:3e:9d:fc:c3:37:f4:80:04:16:
                    b3:ea:51:ab:08:2a:ea:d5:dd:d0:7f:2e:b5:e8:2e:
                    ab:d5:e4:8a:0a:61:33:cc:8a:70:3e:40:c8:27:a3:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EE:F7:8B:5F:90:1E:FC:10:00:BF:D5:75:0A:30:6C:15:E5:C5:18
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:e0:b8:16:7c:cd:7a:b5:90:7c:11:93:e3:20:75:0a:9f:
         68:a8:5a:6f:2e:26:aa:da:25:e1:64:29:ed:0d:11:75:ea:72:
         10:91:c0:e5:c8:9d:9a:9e:75:00:54:72:4a:d1:8e:cd:28:c4:
         a3:d4:8b:88:ae:15:e4:fd:94:62:dd:1f:3a:89:54:b5:a2:5c:
         d2:65:84:eb:45:f1:47:1e:6c:da:96:63:b8:37:10:2f:22:4a:
         06:cb:c7:b6:ee:43:8d:cc:f1:de:2b:6e:89:d8:86:7a:e3:e9:
         90:23:01:a9:99:80:7e:8f:7c:fd:54:63:a7:ac:8a:87:d0:04:
         af:45:db:27:c3:5c:35:28:a0:7d:84:78:a1:b5:7a:db:a3:c0:
         f9:2c:c4:78:18:d6:a5:c3:11:4e:79:3e:97:be:1e:c0:2d:06:
         fd:e9:0e:28:53:c3:f5:14:3a:04:95:be:90:5d:7c:de:ae:f7:
         0b:48:b8:13:36:2c:f8:56:9a:cf:5b:88:f3:3d:b0:9f:f0:ea:
         8e:09:6c:65:f6:41:88:33:e0:5d:79:a9:86:9b:6e:75:11:33:
         af:c2:93:9e:f0:b8:00:c9:af:8c:4d:c5:56:b4:77:44:43:d9:
         dd:91:5f:dc:ea:8f:2a:3e:26:58:be:20:c9:20:3b:22:a9:af:
         8a:ea:63:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:39:45 2025 by rpki-client