Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e3133372e37322e302f32322d3234203d3e20323632343831.roa
File:                     3134332e3133372e37322e302f32322d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          URy+KCzVee2ZiIbm1P2U8H0LKJI1NxYmCoxaiPSWTpA=
Subject key identifier:   2E:8E:07:59:5D:F1:E6:3E:10:3E:A9:12:17:BF:5C:C2:AE:19:5D:60
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       517BD48C7B0FFE5BF487E3D17AFCB06AE585D0E5
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e3133372e37322e302f32322d3234203d3e20323632343831.roa
Signing time:             Fri 03 May 2024 21:37:51 +0000
ROA not before:           Fri 03 May 2024 21:32:51 +0000
ROA not after:            Fri 02 May 2025 21:37:51 +0000
asID:                     262481
IP address blocks:        143.137.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7b:d4:8c:7b:0f:fe:5b:f4:87:e3:d1:7a:fc:b0:6a:e5:85:d0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:32:51 2024 GMT
            Not After : May  2 21:37:51 2025 GMT
        Subject: CN=2E8E07595DF1E63E103EA91217BF5CC2AE195D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:90:39:42:d3:7c:e9:93:e3:b9:1d:7e:79:
                    08:26:b1:a3:02:60:8a:22:3e:13:04:3a:55:c1:89:
                    c6:43:ab:e5:ce:18:19:a7:de:4b:aa:f5:6f:ae:5d:
                    60:d0:2b:cc:2c:4f:9d:4d:20:50:a6:1d:fd:58:dd:
                    67:0d:31:8a:23:c2:00:e0:74:c6:a0:03:3f:1c:68:
                    47:b0:bb:af:c2:17:6f:1b:3d:ac:bc:01:b1:e9:45:
                    0a:99:be:47:7a:13:80:8f:2c:67:9f:59:97:40:39:
                    cd:00:96:37:00:e6:81:e6:fb:f2:b4:3c:45:e6:0f:
                    76:48:cc:e0:96:51:0b:89:a0:8c:c2:04:6e:6d:19:
                    1b:ae:af:a1:fd:b5:40:1c:54:e1:5f:38:b5:5d:c1:
                    c7:9e:e9:6f:4a:62:9b:45:a4:54:1c:d5:66:e7:d0:
                    d8:ea:2f:c5:e7:b6:01:cf:37:a9:53:7f:40:42:98:
                    80:e6:f9:8a:ca:87:7a:39:7d:14:05:53:af:4c:fd:
                    bf:a7:80:61:f6:0e:3c:95:c0:53:92:07:c2:db:55:
                    58:45:d2:6f:5e:04:c1:dc:fa:af:5c:1a:04:32:33:
                    a5:c6:51:74:f7:e8:30:5a:c1:2d:91:99:01:d5:b2:
                    09:79:7d:57:91:0b:1c:e4:cb:fd:35:8d:25:c1:23:
                    cd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8E:07:59:5D:F1:E6:3E:10:3E:A9:12:17:BF:5C:C2:AE:19:5D:60
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e3133372e37322e302f32322d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:b0:ba:dd:11:cc:6f:00:97:fb:c8:6f:fa:45:cf:ca:30:f4:
         fe:27:3d:db:3f:fa:43:9a:0d:a1:ce:ee:53:75:9e:76:77:e0:
         52:09:94:b0:18:48:5c:4f:a3:94:93:58:dd:b8:fc:49:9b:ac:
         f5:e2:49:66:b6:18:5f:78:0b:16:cc:6a:18:12:e5:c2:0a:a1:
         97:cc:2a:c5:21:e3:42:42:32:b2:5f:21:a7:9a:07:29:76:e8:
         45:83:f9:ac:e4:2e:ed:32:e2:61:2a:12:c9:dd:5e:b1:98:3f:
         d5:d3:1a:cd:c9:2b:c2:47:00:a1:f1:a7:22:d9:d8:c4:c8:cd:
         c5:97:0f:16:3e:84:c6:d2:8f:05:3a:95:fa:32:bb:21:ca:0f:
         9d:4a:30:4d:c3:27:2e:cc:91:50:7f:d5:b0:e0:8e:22:a6:dd:
         e1:b5:f2:76:cd:3b:db:31:be:b8:72:02:84:64:40:32:cd:90:
         60:a3:eb:23:02:fa:f2:1c:8a:e2:4b:0f:fe:38:04:df:12:28:
         c1:04:80:a0:7a:3c:0a:43:2f:02:06:e4:e5:66:ef:d2:b2:91:
         ac:29:fc:36:a4:b5:7e:39:4a:83:6c:27:5b:23:02:f9:46:51:
         ef:bd:e0:3f:ac:14:a1:10:6a:69:9a:06:e9:da:b1:a3:78:ce:
         e9:83:06:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:11:35 2025 by rpki-client