Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e33392e36342e302f32322d3234203d3e203533313834.roa
File:                     3137372e33392e36342e302f32322d3234203d3e203533313834.roa (raw, json)
Hash identifier:          ofm+q6pnk3L2Xh43OeBBo7d0MskM8xgk8hZcBLM9/es=
Subject key identifier:   52:B3:47:50:9B:AF:46:ED:74:CD:DF:49:50:08:F7:4F:E4:08:78:D4
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       35E059E6FA65F5BDEC16FD6F9252BC385D55F734
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e33392e36342e302f32322d3234203d3e203533313834.roa
Signing time:             Fri 03 May 2024 21:29:12 +0000
ROA not before:           Fri 03 May 2024 21:24:12 +0000
ROA not after:            Fri 02 May 2025 21:29:12 +0000
asID:                     53184
IP address blocks:        177.39.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e0:59:e6:fa:65:f5:bd:ec:16:fd:6f:92:52:bc:38:5d:55:f7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:24:12 2024 GMT
            Not After : May  2 21:29:12 2025 GMT
        Subject: CN=52B347509BAF46ED74CDDF495008F74FE40878D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:e5:a5:d3:5f:e7:d9:b0:67:4b:f9:9e:02:
                    17:ec:48:34:8e:93:b6:eb:43:84:b4:74:4e:d7:64:
                    5b:3b:2a:88:9f:dd:99:b8:0f:04:e2:b3:d7:a4:67:
                    e5:3f:25:4f:ba:ab:d5:8d:e5:a0:b0:d5:dc:6b:27:
                    eb:a0:de:d8:9b:04:3a:80:0f:4c:fb:6d:a8:03:41:
                    76:f8:71:46:56:87:ff:f8:cd:8d:59:a3:cb:af:80:
                    6c:23:bf:de:be:c5:ea:d5:77:39:30:8a:33:80:66:
                    d0:a5:fd:e0:2f:3a:aa:15:c6:9c:81:bc:e0:34:71:
                    31:94:2c:c7:f2:35:95:07:c6:53:6a:0a:6a:ce:6a:
                    c4:01:a3:fa:4e:ae:60:c3:c1:c7:d0:5b:22:38:04:
                    9b:19:54:13:76:a3:72:c6:9c:7d:a5:7f:e8:e6:8a:
                    43:79:d3:a4:cb:c2:e4:07:6d:a3:09:b1:11:52:27:
                    06:09:4d:63:67:76:71:ca:d4:f2:89:8d:44:74:9c:
                    55:fd:0d:12:7e:7b:b6:6c:18:05:49:aa:25:91:61:
                    4b:fb:8c:f7:18:34:f6:28:1b:67:cc:5a:cf:60:20:
                    23:35:50:b2:2c:fb:fc:5a:90:d2:c9:23:91:0e:e7:
                    c3:30:4a:71:7a:36:31:62:31:6b:d9:31:7c:98:48:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B3:47:50:9B:AF:46:ED:74:CD:DF:49:50:08:F7:4F:E4:08:78:D4
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e33392e36342e302f32322d3234203d3e203533313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:a5:2c:bf:e4:c1:51:24:8e:7b:f1:82:6b:53:5c:bc:ed:3c:
         6b:8c:e3:67:47:6e:92:15:09:3f:66:e9:8f:41:bd:85:f7:aa:
         27:03:7e:ff:af:07:3f:fb:e2:0c:b4:b0:78:bb:d3:5e:5f:72:
         a7:75:53:06:e5:9f:10:ad:67:d7:bd:52:58:3e:b8:f2:4b:57:
         b0:d7:9b:ab:49:6f:98:c3:d4:50:ce:92:e9:a4:22:66:04:b7:
         25:a7:d8:81:a1:64:6e:62:0c:14:91:da:d6:19:dd:b1:32:ff:
         25:1c:ae:28:37:c1:d5:94:c4:2d:f9:de:7c:20:81:09:0e:16:
         79:46:1f:1b:22:b1:de:d4:9e:82:27:3e:5a:d6:dc:14:56:7c:
         31:ae:2b:c0:e2:a0:a0:c6:43:af:40:b2:49:04:7c:e3:3e:8c:
         04:96:2f:0b:1b:42:74:b8:92:ba:fa:15:b4:2a:10:b2:f2:82:
         36:18:50:04:28:d0:56:54:0c:ce:b7:1f:23:f8:d7:c8:6b:0e:
         41:a7:4c:c7:17:db:25:fe:f0:8d:0d:f2:8a:5f:5c:e3:d0:18:
         ca:ed:b8:6c:21:12:37:03:62:77:07:7b:79:17:da:86:5e:55:
         54:0a:6a:ed:f2:83:71:93:27:13:f0:0f:c9:30:e4:80:55:77:
         8a:45:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:34:35 2025 by rpki-client