Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133382e3131382e38342e302f32322d3234203d3e203533313834.roa
File:                     3133382e3131382e38342e302f32322d3234203d3e203533313834.roa (raw, json)
Hash identifier:          r/IXA0LGdb0kOyCxHGG7MDWsuG1ESYE971resvpQcTw=
Subject key identifier:   BC:64:B9:9A:F1:DF:8E:70:74:A5:2E:0F:B7:56:AA:05:01:E4:D7:36
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       6E99BE3252715FC7C9985D97092A905E9D1B25BF
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133382e3131382e38342e302f32322d3234203d3e203533313834.roa
Signing time:             Fri 03 May 2024 21:27:44 +0000
ROA not before:           Fri 03 May 2024 21:22:44 +0000
ROA not after:            Fri 02 May 2025 21:27:44 +0000
asID:                     53184
IP address blocks:        138.118.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:99:be:32:52:71:5f:c7:c9:98:5d:97:09:2a:90:5e:9d:1b:25:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:22:44 2024 GMT
            Not After : May  2 21:27:44 2025 GMT
        Subject: CN=BC64B99AF1DF8E7074A52E0FB756AA0501E4D736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:75:33:2e:f4:48:f0:9f:68:bb:bd:49:a7:
                    20:82:91:df:1b:c3:67:c1:94:80:3b:bd:23:5c:c6:
                    54:02:35:d7:6e:e9:67:24:cf:52:fd:09:82:0a:4e:
                    6e:aa:d8:b7:c9:70:bf:80:c1:3a:a4:d7:40:9c:9a:
                    fa:99:3d:9c:65:31:ad:0a:38:ae:ad:46:66:a7:fe:
                    57:60:6d:b0:1a:ab:90:5c:10:bc:4e:9b:3d:12:66:
                    fc:e4:76:41:57:07:1c:6a:eb:8d:16:6d:69:13:16:
                    d1:12:3c:a9:e5:db:8e:8b:42:35:d7:db:e2:b0:c2:
                    cb:ab:e7:ef:cb:09:a5:31:c3:7e:ac:e3:79:e3:a1:
                    59:bb:54:56:33:e3:d9:e7:b0:6b:68:12:b0:2e:bc:
                    d4:9e:77:c8:1e:3a:f6:b9:8a:24:29:16:44:04:cc:
                    25:49:a4:bd:44:49:1b:7e:77:27:90:d1:c1:bd:e9:
                    d5:a5:5d:22:6b:b2:2d:eb:c4:81:bc:08:68:5c:f4:
                    4b:30:15:81:b3:eb:d1:de:1b:eb:e3:1b:69:d4:ac:
                    20:9b:4c:fc:c4:6e:c5:b8:41:74:74:a3:74:1a:ea:
                    a0:5c:b3:6c:9e:1c:0d:f8:de:a8:b3:9e:ae:27:67:
                    20:40:3c:2b:a8:de:e1:94:a4:8e:2a:27:39:88:d3:
                    40:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:64:B9:9A:F1:DF:8E:70:74:A5:2E:0F:B7:56:AA:05:01:E4:D7:36
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133382e3131382e38342e302f32322d3234203d3e203533313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:2d:4a:8d:3f:8b:62:f8:7e:3f:14:09:b1:3a:07:40:ae:3e:
         cf:fa:fb:67:a1:39:ef:63:ef:ec:ee:e2:b0:9f:5d:93:ab:cc:
         41:c9:31:c3:a0:e2:4a:9a:db:29:e7:a1:d5:da:de:c5:80:98:
         08:aa:6e:ef:b9:bf:ec:78:b7:01:03:2b:73:cc:ff:47:ea:e5:
         b7:ec:96:41:d9:28:14:d9:5c:41:0a:fe:26:e8:6f:e6:77:f0:
         f4:fc:1c:ab:ef:e2:fa:12:1a:9c:ff:d9:27:ad:54:a7:69:c4:
         7b:f2:7d:89:03:06:60:2f:1a:5b:c7:02:8d:3d:0c:ec:7a:36:
         de:fc:ad:5a:6c:00:a0:bd:25:bc:5d:11:56:87:f5:d1:52:92:
         4f:f0:58:b2:ce:bb:f2:bb:7b:83:94:4f:96:cb:eb:66:f3:bd:
         2f:ff:95:ee:fa:a9:01:80:ed:a8:62:2e:a3:9a:5a:2c:c6:fc:
         ff:71:0a:94:a4:1c:3d:a0:60:26:93:f0:f9:6c:7c:04:f5:4c:
         bd:b8:ac:2a:c1:4b:9d:3a:d6:be:e4:9e:76:5c:cb:4a:c4:6a:
         64:86:97:a0:05:d8:e4:88:e7:28:71:c4:b7:da:b1:1c:90:74:
         f1:45:4b:af:41:ea:32:b5:15:a5:d2:d6:a7:d5:9b:a0:df:ce:
         a4:11:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:20:49 2025 by rpki-client