Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3132392e32342e302f32322d3234203d3e203533313834.roa
File:                     3137372e3132392e32342e302f32322d3234203d3e203533313834.roa (raw, json)
Hash identifier:          ztN7Gajnp0PJjG2vlVG+A+/+W/cmhCpdhP3UoxZulDc=
Subject key identifier:   F9:1E:41:4B:2B:FB:D5:2F:EF:C4:55:32:97:B4:F0:75:9B:9C:1E:13
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       2ECFEDAE2E9A81DC0EB8537A396494ACC5510A0D
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3132392e32342e302f32322d3234203d3e203533313834.roa
Signing time:             Fri 03 May 2024 21:28:44 +0000
ROA not before:           Fri 03 May 2024 21:23:44 +0000
ROA not after:            Fri 02 May 2025 21:28:44 +0000
asID:                     53184
IP address blocks:        177.129.24.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cf:ed:ae:2e:9a:81:dc:0e:b8:53:7a:39:64:94:ac:c5:51:0a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:23:44 2024 GMT
            Not After : May  2 21:28:44 2025 GMT
        Subject: CN=F91E414B2BFBD52FEFC4553297B4F0759B9C1E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:e0:37:bc:80:d4:e5:13:d2:46:89:b4:27:
                    0d:8b:8c:b8:fb:f7:a0:41:1f:62:0f:92:da:2b:7b:
                    86:25:7f:05:39:91:7c:80:15:f5:b2:0a:e6:7b:f8:
                    5b:d2:83:83:a9:e4:f5:58:99:7d:ac:0c:43:44:20:
                    7b:12:c1:b6:54:22:ed:e3:76:97:d0:6e:e5:b8:c9:
                    bc:4c:1a:52:4f:ee:de:c1:b2:1b:97:21:7b:ac:15:
                    dd:9b:5d:b7:51:e7:e8:99:da:d7:17:69:e4:64:eb:
                    73:52:17:a1:9e:93:07:f9:26:cc:ba:d0:07:ed:23:
                    8f:a6:d9:da:35:2e:5a:15:fb:65:06:32:75:e3:5f:
                    46:30:31:a6:ca:b5:3a:d0:bb:ce:fc:f2:5c:aa:a7:
                    69:bb:99:0d:6f:0f:48:b3:cb:b6:2c:4c:3e:43:3c:
                    b7:4f:97:8d:12:92:6a:7a:36:86:7b:01:59:b4:48:
                    4d:b4:c7:46:38:08:8d:1a:1c:a4:c3:a9:a4:53:02:
                    01:d2:26:1d:7b:b1:99:46:c0:60:c6:00:ba:0c:b6:
                    bd:e1:7d:87:48:7a:36:75:d7:e2:d8:43:34:6c:1b:
                    bc:84:cf:e0:f0:b5:db:cd:05:c2:76:04:18:df:c4:
                    51:83:2e:db:ec:e5:37:41:be:4e:3c:ed:3e:3b:ff:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1E:41:4B:2B:FB:D5:2F:EF:C4:55:32:97:B4:F0:75:9B:9C:1E:13
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3132392e32342e302f32322d3234203d3e203533313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:d8:2c:67:71:5c:d2:58:48:cd:3d:6e:91:d3:4d:8f:d2:86:
         af:ac:86:be:e4:5d:e2:63:11:2f:48:6e:d0:02:b0:b2:35:1d:
         2a:25:74:93:e2:3e:06:e5:c8:a7:39:b1:3d:bc:b2:72:f5:89:
         2c:1c:a1:a7:e1:d5:3a:cc:8e:19:d3:54:3e:b7:3d:c3:4c:f6:
         9b:b8:4e:d0:22:c7:fe:40:a7:cf:71:f7:5f:a0:d6:a1:1d:36:
         1e:26:6b:7f:fc:ed:83:86:8e:43:a5:08:b0:34:93:51:27:37:
         46:33:61:e3:11:78:57:18:c2:11:fe:cd:e1:e3:3c:a0:9f:cf:
         4d:a1:5b:ed:4e:7f:83:d8:63:77:c5:08:07:7e:0e:9b:49:74:
         7b:04:d5:35:60:cb:5a:36:57:22:d8:d2:fc:e7:d3:32:ec:ba:
         e4:d7:94:01:70:7b:92:28:ab:c9:9d:3a:ce:c8:e4:27:74:38:
         5b:91:ff:28:52:75:0e:e6:38:93:ea:85:a1:6f:c2:7d:33:83:
         9c:95:52:a0:e2:da:ca:c1:d5:9e:0d:e3:2b:a4:6f:96:1f:46:
         65:68:a0:e9:06:20:ce:34:7d:bd:94:2a:85:8c:e7:83:33:30:
         ba:80:51:06:ae:ef:88:03:23:9b:42:f2:0d:00:bc:94:e6:db:
         af:84:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:48:42 2025 by rpki-client