Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e3235352e3235322e302f32322d3234203d3e20323633343035.roa
File:                     3134332e3235352e3235322e302f32322d3234203d3e20323633343035.roa (raw, json)
Hash identifier:          CuDxSuRTiMgwl5lW7LPE0WB+Jg0uVM4kKtnqj14vbbM=
Subject key identifier:   6E:F0:69:D6:D2:70:9A:9C:F9:CC:51:2F:5A:84:64:FE:4B:0E:0F:63
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       2DD6906866C55C0D63577341EB8FCF1722DFDC97
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e3235352e3235322e302f32322d3234203d3e20323633343035.roa
Signing time:             Fri 03 May 2024 21:55:04 +0000
ROA not before:           Fri 03 May 2024 21:50:04 +0000
ROA not after:            Fri 02 May 2025 21:55:04 +0000
asID:                     263405
IP address blocks:        143.255.252.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d6:90:68:66:c5:5c:0d:63:57:73:41:eb:8f:cf:17:22:df:dc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:50:04 2024 GMT
            Not After : May  2 21:55:04 2025 GMT
        Subject: CN=6EF069D6D2709A9CF9CC512F5A8464FE4B0E0F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:ff:5e:b6:a6:13:e1:93:ae:09:a5:5f:32:
                    45:24:7c:4f:f0:c4:cf:13:cf:77:8e:f6:4e:84:8c:
                    e1:9e:94:99:6b:68:03:8d:9e:cc:01:05:c6:59:4f:
                    85:b2:d5:2f:38:1f:65:d1:08:b0:68:d5:60:5d:22:
                    90:c7:b7:fb:21:49:4f:b5:f3:15:fa:71:58:89:db:
                    7a:84:bc:66:ed:a1:06:2b:ef:f1:96:70:4c:11:ec:
                    15:b4:ab:23:3d:3b:67:4e:26:a8:b8:89:d6:21:b0:
                    9b:61:94:79:e0:e7:63:ff:a2:88:c8:3d:2d:01:a2:
                    dc:66:79:35:21:a9:ae:40:37:74:6b:27:9b:c2:d2:
                    56:ce:ab:70:3e:f5:46:43:0e:9c:76:d4:1c:91:ff:
                    c8:b2:e1:6b:9b:09:6f:4e:70:64:18:2a:23:87:3e:
                    f6:f9:97:31:4a:c6:ae:ee:08:06:7c:b3:3b:3a:d1:
                    bd:7e:aa:c8:e2:66:ce:08:68:05:68:7d:3a:6e:45:
                    42:94:91:04:ae:1d:4c:01:3e:cc:53:85:ec:f9:c1:
                    44:32:c0:39:bc:82:0b:e3:2e:86:de:c8:74:e7:f8:
                    54:c8:0b:65:57:90:0b:2d:17:6b:b3:47:d9:44:09:
                    ac:af:61:92:3e:83:fe:85:c8:c6:a3:ca:07:2f:be:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F0:69:D6:D2:70:9A:9C:F9:CC:51:2F:5A:84:64:FE:4B:0E:0F:63
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3134332e3235352e3235322e302f32322d3234203d3e20323633343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:55:cf:55:38:be:42:49:3d:d7:17:eb:90:a6:b3:1c:1e:24:
         07:79:29:ec:59:0f:a6:6a:ef:da:ef:39:b9:9b:75:be:d4:45:
         c7:10:94:9c:c3:32:e2:f6:f3:e6:3e:d7:d9:59:22:0c:b6:a3:
         2c:91:a7:93:eb:97:c4:89:68:ea:bf:ac:35:fc:f9:84:8d:90:
         2a:d4:f0:d8:5a:3d:22:0b:92:f8:a9:ee:e0:d6:f4:0f:b9:b2:
         2d:ef:56:65:92:53:94:15:d6:ee:8b:d3:a8:0e:3b:87:7c:8b:
         fc:0d:3c:91:b1:4d:67:a8:de:ad:75:f4:be:f3:b3:37:0c:bb:
         2c:5d:41:d5:1c:74:93:c6:60:c3:0d:e6:f5:dd:d0:98:4e:84:
         ab:27:d5:4b:6a:4b:dc:5f:2f:98:8f:4d:db:41:f5:95:3b:3d:
         d2:4b:ee:52:59:26:a0:50:ee:34:2a:0e:a1:4c:98:cc:2b:af:
         41:11:62:08:0e:27:9d:e2:85:7c:e8:b9:f2:ec:88:eb:c3:72:
         bf:89:3f:ae:b8:96:a5:ce:d5:8d:bf:58:51:43:20:20:ac:60:
         cf:6f:93:a2:bf:07:2f:11:a1:1b:51:df:16:ce:45:a8:c9:1e:
         7a:7b:b1:9e:52:88:45:a4:02:db:f6:32:14:7b:25:80:47:5d:
         a2:03:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 14:15:32 2025 by rpki-client