Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e3230322e3136382e302f32322d3234203d3e20323633323937.roa
File:                     3134332e3230322e3136382e302f32322d3234203d3e20323633323937.roa (raw, json)
Hash identifier:          GNiUbv/0eHAu4NHP4pib96RJ6I3yBRb6pHVHJYHsFhs=
Subject key identifier:   07:EA:D2:E0:10:D6:B8:61:6F:5B:A8:6E:57:FA:5E:61:A0:04:3D:A9
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       1753C7D341FB347878015FA82FE6BF115773C4D2
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e3230322e3136382e302f32322d3234203d3e20323633323937.roa
Signing time:             Fri 03 May 2024 21:52:04 +0000
ROA not before:           Fri 03 May 2024 21:47:04 +0000
ROA not after:            Fri 02 May 2025 21:52:04 +0000
asID:                     263297
IP address blocks:        143.202.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:53:c7:d3:41:fb:34:78:78:01:5f:a8:2f:e6:bf:11:57:73:c4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:47:04 2024 GMT
            Not After : May  2 21:52:04 2025 GMT
        Subject: CN=07EAD2E010D6B8616F5BA86E57FA5E61A0043DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:3a:48:0c:0d:b9:c0:51:10:4e:62:67:ba:
                    42:1c:a0:bd:45:4d:c4:f4:ec:79:5a:4b:7b:87:3c:
                    55:e9:52:68:4d:79:d8:db:ea:23:89:44:87:a8:a0:
                    19:64:01:d7:38:f9:4c:07:33:a5:cb:28:ad:e7:7e:
                    a9:60:30:24:73:3f:0e:79:b5:96:4a:b5:7c:80:9e:
                    8d:d2:aa:27:5a:c1:5d:8b:14:10:d1:0f:49:0d:87:
                    bd:69:31:95:89:4a:f4:28:e7:1a:1e:ca:ba:dd:bb:
                    83:ed:2c:11:ce:b1:32:ae:2e:b5:00:0e:df:27:20:
                    95:c7:a5:98:8e:5b:b4:d4:ae:22:5a:e0:88:20:0f:
                    cb:fc:54:88:79:6f:a8:59:61:88:96:10:0f:c4:f5:
                    89:9e:51:2e:53:ac:5c:95:de:df:7e:c7:52:44:fb:
                    44:7b:1c:8a:eb:58:36:ea:61:ee:56:72:9a:02:9c:
                    aa:ec:80:1b:6c:50:07:f0:4b:dc:ba:3c:13:46:52:
                    b6:a1:73:d3:50:58:de:c0:d0:f4:66:a9:c7:73:a1:
                    31:c3:00:23:46:ca:c6:25:52:96:cb:e3:03:5c:b2:
                    47:78:c5:27:51:0b:4b:36:ad:80:49:2b:a4:18:d3:
                    31:7d:46:fa:f4:bd:55:c1:ab:4f:2c:fd:ad:77:a3:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EA:D2:E0:10:D6:B8:61:6F:5B:A8:6E:57:FA:5E:61:A0:04:3D:A9
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e3230322e3136382e302f32322d3234203d3e20323633323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:1f:60:ce:f5:42:ca:2a:40:77:ec:18:46:dd:ae:98:be:2a:
         f9:84:70:9e:0d:d6:86:f7:70:1f:1d:34:77:d0:4b:8f:bf:93:
         02:a7:52:5f:d9:21:fd:92:30:fc:1a:6c:84:d0:7d:74:d0:eb:
         67:af:21:ac:9d:e7:41:c2:0b:7d:7b:de:41:7f:78:6e:97:af:
         51:55:d4:48:8d:07:24:83:c1:31:44:81:b8:4c:eb:cd:41:88:
         a3:36:7c:07:8a:6e:3f:f8:e2:d2:ee:5a:ef:59:57:e1:e2:e8:
         ff:2d:c9:1b:bb:61:24:88:e3:70:be:7b:2e:72:0f:70:26:e5:
         ad:66:b9:8f:f3:33:d5:4e:85:27:fa:14:33:70:69:99:91:48:
         8c:22:01:27:0e:fc:9b:03:6c:8a:15:f1:7b:a2:c8:19:d2:a4:
         5a:00:a9:ec:6f:b3:6d:e4:54:68:45:50:cf:96:43:e5:98:91:
         7b:c7:03:11:81:0d:4d:a1:b4:2e:b7:35:29:a3:a8:37:cb:1c:
         0f:4a:0e:42:bb:a6:99:29:a1:69:25:f4:6c:a3:ef:2c:55:b0:
         f0:48:f8:05:d5:af:ab:76:11:23:fe:60:c1:5f:53:16:0f:7a:
         6c:ef:1a:d8:92:63:62:68:ab:5d:73:ee:79:39:2b:eb:b3:87:
         84:cd:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:39:32 2025 by rpki-client