Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e302e3132342e302f32322d3234203d3e20323633323937.roa
File:                     3136382e302e3132342e302f32322d3234203d3e20323633323937.roa (raw, json)
Hash identifier:          sD8wl8L8v/qUeXhhseInJePrIZaFda8tqS1xmCMTBaA=
Subject key identifier:   35:6D:12:9D:11:2F:1E:09:7F:69:A9:5E:3C:19:A7:F3:05:37:91:3D
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       4C304BA60A1253E6718B9ED70B55F7F0DB608F27
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e302e3132342e302f32322d3234203d3e20323633323937.roa
Signing time:             Fri 03 May 2024 21:53:26 +0000
ROA not before:           Fri 03 May 2024 21:48:26 +0000
ROA not after:            Fri 02 May 2025 21:53:26 +0000
asID:                     263297
IP address blocks:        168.0.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:30:4b:a6:0a:12:53:e6:71:8b:9e:d7:0b:55:f7:f0:db:60:8f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:48:26 2024 GMT
            Not After : May  2 21:53:26 2025 GMT
        Subject: CN=356D129D112F1E097F69A95E3C19A7F30537913D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:56:4b:05:57:c2:b5:1e:27:0b:f8:9a:84:
                    2d:be:a4:1a:5c:c6:c3:60:e3:fe:35:da:59:b4:bf:
                    74:23:fd:36:34:52:79:c2:db:1b:cc:c6:7b:d9:2f:
                    2a:ff:9f:e7:26:6c:39:21:28:97:af:7e:21:37:07:
                    56:1a:66:8d:ee:68:b2:9f:23:7c:fa:db:fa:ff:97:
                    0b:34:77:29:30:7c:1a:f8:c1:0e:69:7e:44:d6:9c:
                    44:af:be:30:45:db:c0:71:7d:1b:86:ac:8d:75:ee:
                    e5:66:69:b1:ae:4e:10:da:ee:fb:f6:2c:88:0d:aa:
                    c5:02:34:f0:a8:35:10:5d:0c:47:9f:3d:e8:26:85:
                    b6:24:19:80:e9:9f:0b:02:e3:3c:07:3f:42:66:80:
                    a7:67:24:6b:e3:fe:8e:ac:2b:a8:e3:74:f6:37:d3:
                    d4:59:be:c4:75:dc:e7:e9:c5:31:3d:fc:09:4f:8a:
                    2c:71:38:24:dc:a4:2a:e9:bc:4b:db:19:6e:83:e9:
                    e8:12:1e:03:2e:20:42:bb:5d:74:ef:17:fa:c6:2a:
                    9e:d7:4d:b5:4a:cd:0a:fe:12:04:44:4f:8d:6f:3c:
                    be:93:f6:fd:22:5a:d2:99:bb:59:87:fc:b2:b3:4c:
                    94:24:d5:84:61:98:2e:e7:3c:62:59:43:d8:de:e4:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6D:12:9D:11:2F:1E:09:7F:69:A9:5E:3C:19:A7:F3:05:37:91:3D
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e302e3132342e302f32322d3234203d3e20323633323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:87:d0:26:17:35:14:a9:a1:21:32:70:eb:81:97:14:97:cd:
         37:3c:ad:0f:61:13:6c:79:a7:f6:26:b0:96:db:73:cc:89:66:
         50:bd:52:a6:3a:14:6c:38:de:07:0f:d3:69:5e:db:cf:c6:da:
         b5:8e:3a:d4:aa:c6:83:40:87:00:1a:84:42:36:ff:f1:63:20:
         2a:5d:06:09:7e:f6:cb:ac:27:49:d1:7a:12:95:84:d8:bb:b5:
         8b:cd:27:58:7c:0a:06:87:99:d0:17:40:dd:bd:fa:20:21:bf:
         c3:4b:99:a4:11:f9:d3:34:d3:ed:00:00:8e:ee:61:e2:89:d1:
         60:5b:ab:b6:d8:89:24:ea:da:b7:7f:29:58:cb:b8:a2:40:48:
         cf:97:44:ee:b1:02:65:28:35:32:6b:2c:59:d9:bb:9b:ff:a4:
         0d:c5:e9:81:b4:e9:dd:56:05:cf:b3:01:0f:53:fb:8e:54:78:
         db:ec:a9:05:00:84:37:ff:39:37:83:b9:c6:99:fe:6f:48:b5:
         e9:6f:60:35:d7:73:13:43:49:fc:d6:eb:f9:5d:30:c9:64:8c:
         a2:b9:68:08:72:90:bd:24:87:bf:f5:4f:40:4e:2b:de:8f:20:
         bd:26:61:e8:de:22:91:76:b3:42:f3:c9:c1:0e:60:7b:a1:96:
         00:ed:a0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:40:42 2025 by rpki-client