Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235302e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3235302e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          dSxB5ttB9Qzn8GABnAhsxLhKVvSEaNu8dYOFnwAf7bE=
Subject key identifier:   EA:D2:D2:CB:5C:F7:ED:EC:44:0F:5D:FB:DF:CF:24:9E:7A:AA:DC:D7
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       4165DA32B49FACA4C375321A4F3F9C0D5055A138
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235302e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:58 +0000
ROA not before:           Thu 04 Apr 2024 02:13:58 +0000
ROA not after:            Thu 03 Apr 2025 02:18:58 +0000
asID:                     262663
IP address blocks:        187.62.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:65:da:32:b4:9f:ac:a4:c3:75:32:1a:4f:3f:9c:0d:50:55:a1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:58 2024 GMT
            Not After : Apr  3 02:18:58 2025 GMT
        Subject: CN=EAD2D2CB5CF7EDEC440F5DFBDFCF249E7AAADCD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:89:e8:36:33:2f:b4:b8:81:53:3c:fa:9a:
                    d6:3a:ed:fb:49:d9:e0:f3:51:a5:aa:b7:f7:89:0b:
                    30:fb:ae:d1:64:11:14:b4:7f:5c:56:ad:90:05:2e:
                    32:7e:f4:22:1c:cd:7f:b6:42:e4:32:b9:06:fd:b7:
                    54:0b:7c:86:3d:c6:9b:74:77:f5:c1:da:45:fa:5b:
                    e2:96:6b:79:60:2c:76:e2:0b:70:67:00:2b:8b:b0:
                    6f:d0:2a:be:fb:4d:51:4b:58:2f:43:68:b4:84:df:
                    b2:ad:a6:9d:49:8f:72:f6:80:4d:f6:0b:44:80:bc:
                    ea:2f:d2:af:2a:31:a1:72:e9:4e:56:5f:29:a7:be:
                    b5:d0:6c:a5:b1:b2:7e:35:9d:57:fe:ce:e8:41:42:
                    dd:40:7b:ff:2b:f7:f6:f6:e6:1f:79:53:f0:c7:57:
                    5d:9f:2e:3d:fc:2a:90:b4:26:14:4d:f7:d3:87:08:
                    e4:82:6f:66:ae:35:c4:9f:de:d0:09:6d:d1:81:73:
                    35:fb:fd:8c:70:2f:35:d7:c9:a5:1a:17:e7:36:bf:
                    ca:04:a9:27:40:c2:8b:65:47:d7:ba:79:3e:31:61:
                    0b:ee:93:e1:8a:e2:51:b0:4c:9e:fd:8b:30:ca:d0:
                    52:48:09:31:31:8f:92:9c:f5:5e:57:14:3a:be:1b:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D2:D2:CB:5C:F7:ED:EC:44:0F:5D:FB:DF:CF:24:9E:7A:AA:DC:D7
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235302e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:38:6b:0d:e9:68:72:c5:87:7c:33:db:0e:73:1e:69:84:d7:
         86:b2:df:04:9f:14:e7:82:d3:06:ea:13:35:ff:ae:31:c2:db:
         ba:19:f5:55:f2:fb:7f:6d:a2:54:58:b6:a2:d3:f9:8b:80:3e:
         c6:66:e4:64:24:81:9a:42:cb:c1:fd:9b:b5:0b:44:6d:ee:40:
         23:6c:77:53:23:c5:81:5f:97:40:86:10:0d:d3:6f:a5:67:d3:
         66:0a:82:c5:71:d4:54:b8:31:55:30:61:e6:4b:6b:8c:06:ab:
         9e:e1:3e:56:e0:d0:ae:76:06:b7:fd:f7:ff:0e:18:a2:a3:53:
         f8:fe:c6:9e:91:11:54:ea:8c:ba:9e:74:d7:8b:58:5c:af:4a:
         e3:9a:34:9e:17:91:49:c3:af:1c:22:66:f4:15:2e:93:2b:bc:
         39:d2:51:63:39:56:d8:41:dd:92:0a:2c:f4:b6:15:06:f7:54:
         64:83:c2:86:cb:48:60:43:5b:8b:d9:53:db:9a:a8:da:a5:2d:
         b6:ab:62:a9:b2:bf:5c:f4:4c:eb:2a:bd:2e:7d:98:79:f2:01:
         1c:29:80:6c:39:11:96:c0:ad:d6:ab:41:8a:0b:e5:d0:6e:d2:
         af:74:66:83:d7:cc:82:f1:65:e6:6e:dd:07:8e:46:7d:82:8e:
         a5:ff:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:01:07 2025 by rpki-client