Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3135352e3234382e302f32322d3234203d3e203533313834.roa
File:                     3137372e3135352e3234382e302f32322d3234203d3e203533313834.roa (raw, json)
Hash identifier:          9oO5kfw/1nuJBXeVXBcObiO89eBqYDfH33RBm7hFEOU=
Subject key identifier:   95:2C:CB:E4:FF:75:F6:E0:A6:32:56:16:23:66:7E:3B:A1:31:5C:98
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       18058A073683AE9B40BDFFF12F24BEC7B0F33378
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3135352e3234382e302f32322d3234203d3e203533313834.roa
Signing time:             Fri 03 May 2024 21:28:15 +0000
ROA not before:           Fri 03 May 2024 21:23:15 +0000
ROA not after:            Fri 02 May 2025 21:28:15 +0000
asID:                     53184
IP address blocks:        177.155.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:05:8a:07:36:83:ae:9b:40:bd:ff:f1:2f:24:be:c7:b0:f3:33:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:23:15 2024 GMT
            Not After : May  2 21:28:15 2025 GMT
        Subject: CN=952CCBE4FF75F6E0A632561623667E3BA1315C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fd:fb:3e:af:9d:ac:fe:e6:83:81:6f:55:77:
                    18:97:f5:5c:82:4f:e2:4e:ff:66:57:c2:3e:cb:8d:
                    56:ab:af:d9:42:fe:15:31:1d:42:35:6f:41:42:97:
                    d3:dd:98:78:a1:41:21:f2:48:31:2e:59:cd:99:c9:
                    0e:b1:25:f8:1f:e2:23:ff:f7:88:b4:35:1e:b7:ca:
                    d9:b5:64:b3:e0:bf:9d:d3:8a:23:f7:71:0f:84:90:
                    0f:90:89:6c:c7:f7:62:e2:c6:98:de:9d:51:b9:f2:
                    86:be:88:73:d9:69:b9:4c:4b:43:69:09:c0:f6:30:
                    a5:6d:89:0c:87:dc:99:bb:79:62:f4:e1:c2:e1:f5:
                    9c:7f:98:07:53:f7:d6:f5:2d:4d:13:e5:27:32:b8:
                    79:66:62:4f:b1:0e:b0:83:a5:6f:99:6e:47:b0:d1:
                    da:85:10:fe:77:68:56:09:d6:e6:ad:c8:df:64:5d:
                    69:bf:f2:4a:e7:e8:9c:93:0b:fc:60:56:74:ae:7f:
                    41:8f:a9:92:a4:c2:b7:59:b2:32:2c:9f:26:9c:91:
                    fe:f5:03:c7:ad:b0:76:03:ab:f9:44:43:77:65:aa:
                    eb:eb:c8:c8:98:c8:3b:50:bb:86:73:a0:1f:52:39:
                    c5:58:e3:82:37:96:ce:ec:08:05:df:f5:07:6d:40:
                    23:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2C:CB:E4:FF:75:F6:E0:A6:32:56:16:23:66:7E:3B:A1:31:5C:98
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3135352e3234382e302f32322d3234203d3e203533313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:93:89:17:72:fb:77:77:c3:cd:e7:06:df:2a:a7:aa:9f:55:
         b9:12:67:83:62:fd:90:97:f5:8c:f0:94:f1:b1:13:9d:fc:21:
         38:fd:c2:65:24:fe:4d:09:f2:b9:4f:0d:40:33:41:d1:11:42:
         fd:9f:ee:a3:e6:d9:25:c7:1c:86:cd:bf:36:3d:b8:dd:7e:43:
         f8:c0:e0:21:e4:3e:d5:c6:92:a8:63:3b:fc:e6:52:78:16:51:
         ea:93:4c:39:79:ab:d3:cf:93:7d:45:5d:4f:7f:0e:7a:2c:59:
         10:7f:0a:12:98:3b:bb:38:7b:93:6f:0b:a3:d7:ef:f7:fe:96:
         90:44:bc:41:06:d0:9c:7e:6c:5e:c2:1b:6a:30:9c:e4:4c:d7:
         35:ac:fb:63:a9:30:a5:fe:a7:5f:b2:3d:72:f3:61:f0:6c:bb:
         c4:47:42:0b:fd:da:9a:a9:e3:0a:ef:f0:d0:8a:5f:9f:7c:ac:
         3c:57:2c:77:df:19:01:17:65:42:fc:a3:fe:53:9a:2a:3e:cd:
         2a:00:98:d3:78:bb:49:97:1c:a0:16:b3:5e:20:ce:11:9b:f2:
         a9:f8:36:37:07:3e:76:af:aa:ae:19:40:7f:5a:bf:74:a2:8d:
         13:c3:f0:f5:06:c7:ec:41:0b:41:34:56:f7:37:44:15:dc:0b:
         0e:71:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 10:01:22 2025 by rpki-client