Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3138342e3131322e302f32302d3234203d3e20323632363733.roa
File:                     3137372e3138342e3131322e302f32302d3234203d3e20323632363733.roa (raw, json)
Hash identifier:          wZKRGuwHIzvLcefv5QbtOxlEy/pxSyo1fK4Yso5Bwv0=
Subject key identifier:   36:B3:40:B9:A8:E0:CF:24:2B:D9:D8:82:FC:50:4F:29:75:CF:A8:88
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       66933B0250A9CCAE94C070B67239C0B0707D96DA
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3138342e3131322e302f32302d3234203d3e20323632363733.roa
Signing time:             Fri 03 May 2024 21:43:30 +0000
ROA not before:           Fri 03 May 2024 21:38:30 +0000
ROA not after:            Fri 02 May 2025 21:43:30 +0000
asID:                     262673
IP address blocks:        177.184.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:93:3b:02:50:a9:cc:ae:94:c0:70:b6:72:39:c0:b0:70:7d:96:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:38:30 2024 GMT
            Not After : May  2 21:43:30 2025 GMT
        Subject: CN=36B340B9A8E0CF242BD9D882FC504F2975CFA888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b4:98:ec:79:70:8c:f6:96:00:1e:49:61:2b:
                    af:67:7d:5c:a1:9a:b6:ce:e2:08:a3:38:e8:cd:09:
                    36:7b:f1:3b:25:69:5f:43:f7:80:ac:00:8b:cf:b4:
                    99:60:48:f6:d7:b5:cf:cb:a1:f3:a6:03:7f:0b:6f:
                    22:ac:db:c7:43:d4:3f:b3:e3:7f:f8:64:76:f8:e5:
                    95:66:a3:d5:87:8a:d2:93:7f:28:92:39:e8:25:b6:
                    3b:01:e9:d6:cf:85:07:34:19:4c:8c:dd:82:a6:eb:
                    07:20:7f:f2:49:ad:1f:7c:fd:04:55:75:0a:af:06:
                    bf:5c:43:3b:55:84:24:cf:20:fb:05:f8:13:e5:04:
                    7a:48:ec:38:5c:ca:ab:69:fe:37:a4:85:b6:25:d7:
                    18:51:3e:9a:4e:f1:56:76:23:29:cc:8d:a4:73:63:
                    44:d0:0e:10:24:9e:92:03:5b:7d:1d:57:65:99:d4:
                    e2:7f:1a:7b:47:e8:6d:c5:d8:45:f9:35:40:dc:75:
                    bb:84:61:d0:ad:e6:75:4b:3a:45:c4:e1:52:13:d1:
                    5c:3b:fb:36:7e:4e:58:ee:ce:db:fb:da:35:bd:6f:
                    c7:da:89:13:8f:83:ea:d0:46:eb:db:cc:17:7a:78:
                    05:0c:7d:aa:a6:94:88:f8:e4:25:0d:09:f3:c5:19:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B3:40:B9:A8:E0:CF:24:2B:D9:D8:82:FC:50:4F:29:75:CF:A8:88
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3138342e3131322e302f32302d3234203d3e20323632363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:55:02:a8:b4:a5:49:ce:63:f4:e4:ef:23:d5:f0:b5:6c:
         81:72:a2:fd:64:2c:53:9f:89:dd:19:9e:29:6f:37:be:21:4d:
         cf:45:53:c1:2f:c1:d6:a6:31:de:ce:63:5a:17:84:a0:65:81:
         bc:da:7d:47:00:9e:2c:8a:eb:24:7c:e3:1d:ce:32:89:85:a2:
         6d:af:3b:da:a2:aa:59:46:d1:b2:18:bb:42:ab:17:7d:f9:d2:
         f5:b5:32:58:b9:ec:b9:43:e5:78:a8:59:c0:4f:85:12:64:0b:
         6e:9d:54:b9:7e:09:75:28:32:00:35:a1:c6:3c:5c:d2:fd:f2:
         2c:29:63:b0:ed:3e:e1:a2:1a:18:48:a2:49:c3:90:bc:67:8f:
         fa:21:c7:de:95:6a:46:88:ad:26:e3:f3:e2:39:a2:bd:f4:84:
         a0:ad:c4:c7:09:e4:48:2c:0a:d2:e7:c8:a2:69:f8:a1:6b:0f:
         42:97:62:c4:2b:5f:a4:79:e2:0c:d5:1f:52:b3:7d:88:1e:af:
         ef:ad:42:94:62:d7:3f:2b:89:99:18:73:28:60:cf:dc:5e:6e:
         bb:46:22:58:3d:f1:bf:01:bc:4a:c9:6a:c2:1c:11:c4:d6:7e:
         ba:2c:ea:bd:2f:ce:23:ea:bc:88:18:d6:43:99:e8:d5:31:e9:
         11:96:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:42:50 2025 by rpki-client