Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e302e3232382e302f32322d3234203d3e203533313834.roa
File:                     3134332e302e3232382e302f32322d3234203d3e203533313834.roa (raw, json)
Hash identifier:          x7jU2om7bJBBWMxgGf25WCTrExLez6eYJA5KvFLCVGQ=
Subject key identifier:   B0:4D:0B:E5:E3:F0:A9:7E:3A:4D:C4:E0:AB:FE:32:D0:01:EA:52:5C
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       4671D556409A6322416B3E08A63EEB186AF7AC60
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e302e3232382e302f32322d3234203d3e203533313834.roa
Signing time:             Fri 03 May 2024 21:28:02 +0000
ROA not before:           Fri 03 May 2024 21:23:02 +0000
ROA not after:            Fri 02 May 2025 21:28:02 +0000
asID:                     53184
IP address blocks:        143.0.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:71:d5:56:40:9a:63:22:41:6b:3e:08:a6:3e:eb:18:6a:f7:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:23:02 2024 GMT
            Not After : May  2 21:28:02 2025 GMT
        Subject: CN=B04D0BE5E3F0A97E3A4DC4E0ABFE32D001EA525C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8d:0f:d3:e8:0a:2a:87:c7:35:83:6b:6b:a8:
                    38:f0:27:d5:45:8f:cd:73:87:bf:12:58:0c:24:74:
                    c3:39:d6:49:c2:27:76:0e:32:51:4a:70:17:40:0b:
                    26:f5:d7:14:34:cc:8b:79:6f:64:71:ee:ad:56:23:
                    bd:d5:af:17:de:06:4f:c7:b0:9a:45:12:44:15:bd:
                    ec:a7:38:e9:80:f6:53:b6:c1:1c:0e:0a:67:52:be:
                    03:2d:d0:a6:5e:9d:f3:b6:1c:a8:36:9b:9e:84:74:
                    54:96:ce:72:51:84:84:9b:d2:a0:97:a6:75:fe:e8:
                    f8:3a:02:d0:63:55:c7:5b:7a:a8:cc:76:0c:94:6e:
                    67:94:4a:da:e3:fb:35:3c:3a:cf:49:c8:12:51:18:
                    28:0f:42:74:88:f0:dc:b7:0e:a6:72:fb:ad:6e:38:
                    dc:3b:c3:84:51:72:e1:86:e4:30:50:85:5b:70:e1:
                    e6:ee:bf:25:cc:da:80:e3:3c:1d:72:94:81:89:6f:
                    7a:b4:cf:58:af:80:15:b2:b8:70:a5:69:eb:da:bf:
                    85:f4:04:62:e4:89:07:f4:e2:06:c1:98:8b:6c:ba:
                    72:cc:ae:1a:22:cf:e8:9a:b0:3c:b6:7f:18:80:29:
                    6d:a8:d8:c2:0f:94:fd:60:de:ab:7f:0c:65:ba:aa:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4D:0B:E5:E3:F0:A9:7E:3A:4D:C4:E0:AB:FE:32:D0:01:EA:52:5C
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e302e3232382e302f32322d3234203d3e203533313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:ab:76:06:3e:6f:f6:a6:cd:3e:83:e4:1b:44:44:62:23:
         bb:73:04:c2:de:be:0a:82:6f:e9:6e:18:1a:a9:ad:0d:1d:02:
         08:c4:56:67:46:95:ea:73:d6:c9:aa:91:9e:3a:07:26:35:81:
         d3:fa:75:00:e9:1f:00:8b:23:93:ec:01:25:bd:a2:00:d0:f2:
         53:25:07:50:81:43:8a:35:54:66:72:58:2c:ce:a3:4f:08:0c:
         d7:7f:fc:4b:78:6a:09:88:6d:fa:f3:31:88:aa:2b:b3:fa:29:
         53:9b:7f:3b:74:5d:8c:18:58:be:09:c8:9a:b5:39:5e:f8:d4:
         56:40:e5:91:16:44:eb:84:a8:63:78:ba:a6:c1:0a:3b:69:a0:
         01:80:59:76:91:a8:be:c7:24:61:a3:96:b7:6f:58:36:13:3c:
         73:c1:2b:82:06:e2:63:61:36:8d:09:25:97:be:d1:21:df:e1:
         68:b4:35:d7:5a:4d:79:95:9f:6e:2b:9c:28:ae:f6:6d:16:60:
         65:e6:32:d3:31:db:a7:b4:18:c9:c8:97:e6:6f:f9:a3:c5:2d:
         48:97:b9:1a:d9:fa:8f:be:65:3a:7c:06:1a:43:ba:2b:28:7e:
         3f:fb:2e:f2:5d:46:d7:31:45:6f:de:af:20:13:05:ea:48:e2:
         78:1e:ec:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 03:11:55 2025 by rpki-client