Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e3139352e38342e302f32322d3234203d3e20323632373934.roa
File:                     3136382e3139352e38342e302f32322d3234203d3e20323632373934.roa (raw, json)
Hash identifier:          xce9Yx3tT/xYp64i/b7MQtXBOFCGCCOWvH7PyBwIRZw=
Subject key identifier:   30:EC:5C:7E:95:0D:30:07:0F:E7:85:07:2D:1E:D1:0E:15:D3:0D:1D
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       0948B79DA696D914A35DF8A8C701003D72F5CCE3
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e3139352e38342e302f32322d3234203d3e20323632373934.roa
Signing time:             Fri 03 May 2024 21:47:08 +0000
ROA not before:           Fri 03 May 2024 21:42:08 +0000
ROA not after:            Fri 02 May 2025 21:47:08 +0000
asID:                     262794
IP address blocks:        168.195.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:48:b7:9d:a6:96:d9:14:a3:5d:f8:a8:c7:01:00:3d:72:f5:cc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:42:08 2024 GMT
            Not After : May  2 21:47:08 2025 GMT
        Subject: CN=30EC5C7E950D30070FE785072D1ED10E15D30D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:13:95:d5:83:25:10:c1:bc:bd:56:73:cd:44:
                    4d:b6:2e:f3:15:d3:34:21:75:22:fb:5b:dd:9d:0e:
                    7d:b1:fd:99:47:44:46:c6:22:12:8e:5a:39:59:09:
                    fb:bd:a3:a7:da:7f:12:c6:96:59:43:94:8e:f6:d3:
                    5d:7c:c3:81:6d:20:30:4b:ee:63:a0:ad:62:22:3e:
                    d9:69:27:0c:0d:ff:5b:8d:55:3f:25:58:11:7c:ac:
                    94:a8:43:f5:cc:0c:f3:4e:8f:16:15:df:20:d7:63:
                    d9:f2:47:fc:64:75:c0:15:54:b9:3b:d7:a8:fd:cd:
                    52:99:0c:b3:7f:ff:54:d8:be:a0:0f:62:cb:bd:12:
                    82:bf:61:e5:5c:dc:65:17:9b:1f:8c:56:61:24:fc:
                    b7:1c:e8:2f:bc:1a:8c:f9:b5:47:aa:1a:7b:1f:e7:
                    3d:bc:7e:18:f3:f5:45:6a:98:ad:e7:da:05:41:a1:
                    a7:6c:2b:48:e4:bb:66:a3:22:db:06:b1:2b:a0:b8:
                    42:b5:79:38:61:dd:a4:e9:38:74:f2:42:42:1f:cd:
                    03:81:8f:07:4e:bf:b3:55:ff:6f:0d:48:78:d9:9a:
                    80:e4:6e:67:41:1f:28:22:61:1e:81:85:30:01:28:
                    d1:88:96:0d:8b:17:f4:aa:80:39:5a:87:07:b6:49:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EC:5C:7E:95:0D:30:07:0F:E7:85:07:2D:1E:D1:0E:15:D3:0D:1D
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e3139352e38342e302f32322d3234203d3e20323632373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:09:37:3a:ac:7c:d3:36:ab:3b:ea:6e:fe:5b:13:16:cf:cd:
         e8:c8:c5:42:19:83:b0:85:5f:6e:40:16:2a:d3:4f:31:34:51:
         d3:5f:ac:c8:da:d6:65:f6:c7:4f:c3:54:08:49:8e:6a:a6:bd:
         24:b1:8e:64:0a:a1:8b:5c:b0:1a:29:c3:ec:33:c4:14:19:7c:
         1f:82:78:04:de:97:d5:db:ba:f0:c9:58:1b:19:73:df:af:42:
         25:ec:7e:13:90:2f:e7:4e:ec:fd:41:72:7a:da:4f:95:95:00:
         5a:d5:f3:5c:b6:8a:3f:8d:4c:b4:05:64:e8:52:de:0a:8e:79:
         49:2e:08:5a:86:94:52:bf:fd:f5:29:9b:e5:c9:39:fc:30:36:
         0d:88:88:a2:0d:87:0d:50:54:22:45:48:d3:77:83:fc:6d:54:
         88:24:5f:41:ba:84:48:7e:71:63:05:3d:5e:73:2a:9b:db:29:
         31:ec:34:74:ee:ff:2a:03:29:4e:3a:93:21:08:10:13:fe:27:
         44:8f:bc:e8:67:84:6f:d6:54:42:da:79:c5:44:a4:21:00:7c:
         a5:1f:ae:ca:08:cf:b3:e0:8f:c8:33:7c:4d:cc:92:ca:ab:af:
         20:89:53:77:a3:dc:d5:1c:81:77:91:dd:c7:e4:d2:3f:67:a7:
         ef:e2:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:35:26 2025 by rpki-client