Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3233382e3139322e302f32322d3234203d3e20323633303332.roa
File:                     3137302e3233382e3139322e302f32322d3234203d3e20323633303332.roa (raw, json)
Hash identifier:          Tou+RN/jPgz9KaEeHhsEXVvtfGkqlCBm9r25DKJBySY=
Subject key identifier:   37:D7:03:96:15:A3:0A:30:8B:6E:67:7E:79:75:B4:EF:E6:C6:76:BD
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       35DA2D1ECEA5AB12E28B47CD4B2A63B149AC6840
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3233382e3139322e302f32322d3234203d3e20323633303332.roa
Signing time:             Fri 03 May 2024 21:50:19 +0000
ROA not before:           Fri 03 May 2024 21:45:19 +0000
ROA not after:            Fri 02 May 2025 21:50:19 +0000
asID:                     263032
IP address blocks:        170.238.192.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:da:2d:1e:ce:a5:ab:12:e2:8b:47:cd:4b:2a:63:b1:49:ac:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:45:19 2024 GMT
            Not After : May  2 21:50:19 2025 GMT
        Subject: CN=37D7039615A30A308B6E677E7975B4EFE6C676BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:a5:91:1b:d0:89:6d:20:dd:99:b4:4c:a6:
                    8c:a7:44:cb:fc:08:92:7e:b9:77:9a:55:6b:0b:ae:
                    bf:13:bf:24:c8:56:ff:1e:fc:ec:6b:a2:6e:40:ed:
                    33:e8:62:b9:0f:71:62:02:88:7e:62:9e:4d:fd:ca:
                    1d:2b:77:08:93:34:0b:be:6b:b6:b4:43:ee:5c:ff:
                    c8:ef:c4:a5:82:17:f8:e7:4a:68:b3:ac:cc:d3:50:
                    63:97:3a:1a:ba:2f:f9:e7:8f:15:2e:33:07:11:69:
                    80:da:d6:8b:49:e9:2e:92:8f:cc:95:11:a1:59:ef:
                    47:76:ad:df:ed:cc:59:77:1b:0e:4e:a9:dc:3b:d0:
                    9c:de:60:45:27:ca:d0:62:41:cf:6b:bc:ab:aa:82:
                    37:04:3d:57:67:9c:fb:38:71:38:27:31:09:01:bf:
                    96:6c:21:4b:d3:e2:3c:4c:9c:ed:2c:4e:c1:76:58:
                    32:91:68:6d:43:ca:b6:f4:16:49:ff:df:ce:19:22:
                    ed:34:c1:c6:2c:61:c5:31:40:09:27:5c:f4:70:48:
                    e3:65:3a:c9:47:99:cc:17:88:57:87:0b:6f:da:90:
                    52:76:8e:41:7a:ca:f7:e6:da:88:b0:64:bb:00:2b:
                    dc:d6:84:04:0c:b6:91:12:1c:c2:bb:3f:8c:9e:be:
                    3f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D7:03:96:15:A3:0A:30:8B:6E:67:7E:79:75:B4:EF:E6:C6:76:BD
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3233382e3139322e302f32322d3234203d3e20323633303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:3a:b0:47:d2:1a:85:0f:79:18:2e:4a:46:20:ac:1a:44:bf:
         c5:9b:9c:bd:65:37:f6:8f:4c:ec:3d:0b:86:16:b0:6d:4e:ca:
         ba:a3:27:66:d4:a1:e3:a0:8e:c9:af:39:39:b6:1d:b6:af:34:
         65:ef:6f:ce:12:ca:d9:13:99:c4:cb:af:55:f6:55:86:18:3b:
         9e:a0:e9:3d:cc:ab:e5:36:15:07:fd:e7:ff:1c:ea:7a:c4:89:
         4e:ac:29:15:6a:8f:38:8c:e2:67:b2:24:53:c4:7f:11:ba:04:
         af:f3:bc:a6:fc:72:f1:5a:a5:38:ab:c7:92:75:4f:b9:ef:86:
         9e:78:40:e7:a3:1a:6a:f3:a1:c5:27:9f:ba:b9:15:31:f4:72:
         70:87:4b:56:22:ef:87:a9:b1:fa:23:52:69:d4:97:d1:89:34:
         8c:71:1a:3c:e5:59:2d:37:13:b6:3b:66:19:62:d5:1f:7b:e7:
         be:42:54:ca:77:3f:35:ff:47:e4:f3:ea:07:2c:a6:1d:44:72:
         ea:56:a1:b3:00:fc:32:41:4d:76:4e:4c:19:e4:60:d1:b5:43:
         f3:81:88:84:3f:e1:84:16:e3:dd:7a:cd:c3:d5:c6:be:b2:4d:
         e9:ce:1b:0d:75:ca:b8:86:ea:40:7d:44:de:29:8c:36:9b:cb:
         91:65:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 03:10:48 2025 by rpki-client