Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e38322e3133362e302f32322d3234203d3e20323632363731.roa
File:                     3137302e38322e3133362e302f32322d3234203d3e20323632363731.roa (raw, json)
Hash identifier:          ER3L7XPP7wY18/flDFZt3V6XUVZC38tvZWx3Wxgx890=
Subject key identifier:   2E:4C:E5:0A:AE:E8:53:86:EE:72:81:3D:FA:C1:3C:10:B9:A6:48:F9
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       611D0883B75B50598613484CD83AC348B9E97E80
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e38322e3133362e302f32322d3234203d3e20323632363731.roa
Signing time:             Fri 03 May 2024 21:39:31 +0000
ROA not before:           Fri 03 May 2024 21:34:31 +0000
ROA not after:            Fri 02 May 2025 21:39:31 +0000
asID:                     262671
IP address blocks:        170.82.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1d:08:83:b7:5b:50:59:86:13:48:4c:d8:3a:c3:48:b9:e9:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:34:31 2024 GMT
            Not After : May  2 21:39:31 2025 GMT
        Subject: CN=2E4CE50AAEE85386EE72813DFAC13C10B9A648F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:31:2b:57:bd:e6:75:90:ba:9f:ac:22:72:
                    37:76:8c:0f:28:69:ab:cf:62:6c:cc:13:9b:4d:4b:
                    46:bd:06:d4:2a:55:7f:41:ee:16:16:0f:68:5e:6a:
                    09:db:7b:cd:45:e7:82:73:83:5f:f7:5c:49:d5:67:
                    77:8e:ea:64:b3:22:1a:e4:27:4e:be:4b:2d:a6:e4:
                    75:8e:6e:85:c5:f4:b8:93:3f:be:33:39:72:63:1d:
                    a3:3e:ad:9c:3b:ae:b6:fc:9f:69:9a:91:88:e8:ef:
                    00:fe:59:2a:4b:48:c9:67:5d:e3:85:cb:2e:e9:51:
                    1e:e1:2b:a8:72:ae:e0:bb:95:2a:fa:5e:dc:47:ea:
                    ec:16:7f:4c:99:46:04:e8:07:b3:08:b2:dd:6a:57:
                    b8:b4:4e:e2:94:8c:69:d8:60:13:0e:82:65:25:f3:
                    be:71:df:13:98:2d:c4:b5:a5:f3:49:58:b4:5e:3a:
                    d5:94:0d:2d:4d:02:00:e4:e4:90:dc:2f:8b:cc:c9:
                    96:1c:3f:05:07:3f:f7:5c:58:a5:3e:c7:d1:9d:83:
                    17:da:20:26:a9:10:39:9c:5b:30:92:54:b7:1e:ff:
                    08:6b:77:9d:20:75:5a:7e:a7:f7:b6:86:d7:a6:cb:
                    55:99:7f:78:2c:b2:65:28:93:e6:28:df:fd:31:50:
                    c1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:E5:0A:AE:E8:53:86:EE:72:81:3D:FA:C1:3C:10:B9:A6:48:F9
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e38322e3133362e302f32322d3234203d3e20323632363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:d2:76:bf:47:67:97:00:53:08:3f:e4:ac:8e:48:d3:16:a0:
         91:4c:3c:0d:b8:3d:61:b3:7e:e7:aa:d5:5d:6e:94:a7:f6:4b:
         7e:a0:a1:77:60:3b:2b:e1:06:ef:cd:2b:dc:95:a5:92:0c:b3:
         ed:ad:32:9c:26:33:66:09:60:ca:78:cd:68:5e:65:9f:d1:b8:
         40:ed:80:b6:ae:c5:d8:92:ca:fd:de:ed:c2:a4:04:5d:1d:3f:
         5b:de:49:89:f6:9c:7d:43:78:74:4f:23:14:f0:fc:c5:a1:c0:
         7d:db:64:02:0f:1f:a4:7c:4a:4a:ff:8d:a5:62:4a:d7:2a:9b:
         7e:5f:a0:88:21:72:d7:92:f8:ac:8b:ac:cf:8c:4b:75:cb:46:
         fe:fd:21:99:0f:43:53:21:03:0d:48:1a:84:00:aa:ef:4c:ed:
         de:79:ee:a4:7c:a6:9b:54:b2:46:75:09:10:b4:86:02:65:14:
         38:8c:cf:be:03:bc:a0:87:5b:fb:02:f9:9b:9b:b1:f4:93:d1:
         8a:1f:2c:73:fd:c5:a1:e2:54:06:f5:ef:3c:e5:6d:52:c1:ca:
         49:de:44:3e:28:bb:0a:84:63:b3:f2:28:e7:8c:69:17:b1:da:
         60:9b:ed:ef:22:f5:db:45:1f:32:2d:c6:e9:0a:f2:1e:b7:7d:
         17:81:ad:6d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYR0Ig7dbUFmGE0hM2DrDSLnpfoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTM0MzFaFw0yNTA1MDIyMTM5MzFaMDMxMTAvBgNV
BAMTKDJFNENFNTBBQUVFODUzODZFRTcyODEzREZBQzEzQzEwQjlBNjQ4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0TErV73mdZC6n6wicjd2jA8o
aavPYmzME5tNS0a9BtQqVX9B7hYWD2heagnbe81F54Jzg1/3XEnVZ3eO6mSzIhrk
J06+Sy2m5HWOboXF9LiTP74zOXJjHaM+rZw7rrb8n2makYjo7wD+WSpLSMlnXeOF
yy7pUR7hK6hyruC7lSr6XtxH6uwWf0yZRgToB7MIst1qV7i0TuKUjGnYYBMOgmUl
875x3xOYLcS1pfNJWLReOtWUDS1NAgDk5JDcL4vMyZYcPwUHP/dcWKU+x9Gdgxfa
ICapEDmcWzCSVLce/whrd50gdVp+p/e2htemy1WZf3gssmUok+Yo3/0xUMEHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULkzlCq7oU4bucoE9+sE8ELmmSPkwHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLcEo1dVA2cUxrMmlIVzlnV2VwVER4YXg2alZ2dHVRWWhGdWR3OXI4VGN5LzAv
MzEzNzMwMmUzODMyMmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUogwDQYJKoZIhvcNAQELBQADggEBAHjSdr9H
Z5cAUwg/5KyOSNMWoJFMPA24PWGzfueq1V1ulKf2S36goXdgOyvhBu/NK9yVpZIM
s+2tMpwmM2YJYMp4zWheZZ/RuEDtgLauxdiSyv3e7cKkBF0dP1veSYn2nH1DeHRP
IxTw/MWhwH3bZAIPH6R8Skr/jaViStcqm35foIghcteS+KyLrM+MS3XLRv79IZkP
Q1MhAw1IGoQAqu9M7d557qR8pptUskZ1CRC0hgJlFDiMz74DvKCHW/sC+ZubsfST
0YofLHP9xaHiVAb17zzlbVLBykneRD4ouwqEY7PyKOeMaRex2mCb7e8i9dtFHzIt
xukK8h63fReBrW0=
-----END CERTIFICATE-----
Generated at Fri May 16 03:20:17 2025 by rpki-client