Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3138342e39362e302f32302d3234203d3e20323632363733.roa
File:                     3137372e3138342e39362e302f32302d3234203d3e20323632363733.roa (raw, json)
Hash identifier:          cuOMmadfmNMr5pLrc0OeEsrZb3atNNNgfgINKP2Jlv8=
Subject key identifier:   D1:7B:06:20:06:0F:03:03:9F:71:D7:24:25:2F:04:DD:4F:DB:F2:2F
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       19F50CB30C00ED03D34E781CE74BDDE640045B19
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3138342e39362e302f32302d3234203d3e20323632363733.roa
Signing time:             Fri 03 May 2024 21:42:59 +0000
ROA not before:           Fri 03 May 2024 21:37:59 +0000
ROA not after:            Fri 02 May 2025 21:42:59 +0000
asID:                     262673
IP address blocks:        177.184.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f5:0c:b3:0c:00:ed:03:d3:4e:78:1c:e7:4b:dd:e6:40:04:5b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:37:59 2024 GMT
            Not After : May  2 21:42:59 2025 GMT
        Subject: CN=D17B0620060F03039F71D724252F04DD4FDBF22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9e:04:73:40:de:1f:8a:85:4f:1f:a0:79:a1:
                    c6:42:82:0c:bd:cb:4d:a6:d0:6d:f4:54:7b:7f:64:
                    a0:f1:a7:d8:25:ea:52:43:42:2c:46:55:e1:f1:13:
                    bc:12:32:2f:59:ca:45:cc:70:06:7e:56:51:af:a7:
                    b2:00:77:7b:0a:1a:61:2a:d2:c2:e0:49:42:80:4c:
                    37:ef:ae:80:0e:ca:14:c4:94:1a:52:95:0d:ec:f3:
                    1e:e8:34:22:da:49:35:97:84:1a:e2:16:94:39:5a:
                    b2:5c:e6:ca:fd:e5:12:44:a6:ee:d5:72:6e:bd:ac:
                    06:d5:d4:19:42:0e:c5:13:0a:05:aa:57:76:cf:d2:
                    c1:81:35:0b:58:6e:c4:30:74:98:fb:f2:53:53:ba:
                    ca:e5:ff:86:c0:b8:8b:78:e0:14:70:a1:73:48:72:
                    c9:0b:f6:d3:55:ef:70:66:3c:68:08:46:4b:fb:07:
                    f7:36:a1:e7:00:d3:fa:8a:4f:c2:e4:78:ad:79:95:
                    e7:4c:d9:98:c7:a3:d3:b1:f0:1e:c6:f9:e4:8c:42:
                    65:68:69:41:2d:3c:7e:ac:c2:07:18:bb:40:81:c6:
                    68:00:f0:24:9c:c3:1f:56:02:3a:cb:3e:79:35:da:
                    ca:b0:45:a1:e2:6a:8e:bd:a8:b3:09:7f:2f:72:ee:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:06:20:06:0F:03:03:9F:71:D7:24:25:2F:04:DD:4F:DB:F2:2F
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3138342e39362e302f32302d3234203d3e20323632363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:37:91:27:61:e8:b0:ab:de:80:2e:a3:db:b6:00:a0:6e:25:
         54:a4:86:b0:ec:cc:a4:6b:cd:da:98:f1:e1:bd:15:cf:4b:63:
         6d:4d:9a:6a:29:f0:63:f3:bf:26:74:4a:65:0c:ee:f8:87:ae:
         af:df:bf:f9:7b:b7:4a:d3:91:88:ff:16:83:e9:d9:18:13:e7:
         c5:77:ac:a7:83:3b:4d:45:cb:92:c6:b1:9d:b0:ad:26:a5:80:
         a2:40:07:b3:76:04:fe:f3:c0:c6:25:5c:77:f6:b2:1d:01:e3:
         98:80:48:64:74:38:ae:d5:99:d3:e2:c2:b7:81:a7:da:1b:82:
         02:f2:e4:c2:a7:92:56:40:3e:49:c6:5d:25:ae:53:e8:da:23:
         de:82:10:90:8f:f4:80:13:db:8d:8c:3d:8b:8c:65:44:8f:b0:
         e4:06:f6:8c:38:58:cc:ae:f6:69:86:8b:7e:4f:57:42:e0:cb:
         f8:a8:03:3a:f1:64:69:00:22:a2:8f:96:20:af:61:24:33:31:
         e6:af:d0:68:9a:ba:f0:77:fe:9f:49:a7:64:be:93:90:48:6d:
         02:b7:1d:2a:44:02:2c:1b:2f:7f:66:e9:d4:07:02:f3:a4:0c:
         48:b3:1a:e6:3c:d1:c7:aa:a5:d8:75:78:5a:a2:31:8f:ab:d2:
         87:b5:5d:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGfUMswwA7QPTTngc50vd5kAEWxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTM3NTlaFw0yNTA1MDIyMTQyNTlaMDMxMTAvBgNV
BAMTKEQxN0IwNjIwMDYwRjAzMDM5RjcxRDcyNDI1MkYwNERENEZEQkYyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrngRzQN4fioVPH6B5ocZCggy9
y02m0G30VHt/ZKDxp9gl6lJDQixGVeHxE7wSMi9ZykXMcAZ+VlGvp7IAd3sKGmEq
0sLgSUKATDfvroAOyhTElBpSlQ3s8x7oNCLaSTWXhBriFpQ5WrJc5sr95RJEpu7V
cm69rAbV1BlCDsUTCgWqV3bP0sGBNQtYbsQwdJj78lNTusrl/4bAuIt44BRwoXNI
cskL9tNV73BmPGgIRkv7B/c2oecA0/qKT8LkeK15ledM2ZjHo9Ox8B7G+eSMQmVo
aUEtPH6swgcYu0CBxmgA8CScwx9WAjrLPnk12sqwRaHiao69qLMJfy9y7ikLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0XsGIAYPAwOfcdckJS8E3U/b8i8wHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLcEo1dVA2cUxrMmlIVzlnV2VwVER4YXg2alZ2dHVRWWhGdWR3OXI4VGN5LzAv
MzEzNzM3MmUzMTM4MzQyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxuGAwDQYJKoZIhvcNAQELBQADggEBAAM3kSdh
6LCr3oAuo9u2AKBuJVSkhrDszKRrzdqY8eG9Fc9LY21Nmmop8GPzvyZ0SmUM7viH
rq/fv/l7t0rTkYj/FoPp2RgT58V3rKeDO01Fy5LGsZ2wrSalgKJAB7N2BP7zwMYl
XHf2sh0B45iASGR0OK7VmdPiwreBp9obggLy5MKnklZAPknGXSWuU+jaI96CEJCP
9IAT242MPYuMZUSPsOQG9ow4WMyu9mmGi35PV0Lgy/ioAzrxZGkAIqKPliCvYSQz
Meav0GiauvB3/p9Jp2S+k5BIbQK3HSpEAiwbL39m6dQHAvOkDEizGuY80ceqpdh1
eFqiMY+r0oe1XaM=
-----END CERTIFICATE-----
Generated at Thu May 15 03:48:35 2025 by rpki-client