Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e33392e36382e302f32322d3234203d3e203533313834.roa
File:                     3137372e33392e36382e302f32322d3234203d3e203533313834.roa (raw, json)
Hash identifier:          J/Kadrsi8uUg9ZXa0KXxI3rmIXhpc+E+RBXmM9dBpeE=
Subject key identifier:   1E:B2:CE:88:52:B7:8F:35:08:93:6E:08:9D:38:D1:BC:85:58:42:CA
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       3DAC00F4FDDD26158D282E58DB5ED7988AC03297
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e33392e36382e302f32322d3234203d3e203533313834.roa
Signing time:             Fri 03 May 2024 21:26:43 +0000
ROA not before:           Fri 03 May 2024 21:21:43 +0000
ROA not after:            Fri 02 May 2025 21:26:43 +0000
asID:                     53184
IP address blocks:        177.39.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ac:00:f4:fd:dd:26:15:8d:28:2e:58:db:5e:d7:98:8a:c0:32:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:21:43 2024 GMT
            Not After : May  2 21:26:43 2025 GMT
        Subject: CN=1EB2CE8852B78F3508936E089D38D1BC855842CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:cf:f1:a4:5f:b9:2a:c5:6f:b2:99:06:43:
                    c7:35:de:91:64:f4:63:25:de:ac:f6:f1:63:d0:d9:
                    37:ee:af:f4:a4:ed:d3:df:63:92:68:85:ae:bb:ac:
                    af:73:15:41:dc:ee:01:e2:0f:cf:be:0c:34:7b:93:
                    b8:ae:3c:4f:f4:5a:28:a0:fb:72:a6:53:1d:5e:d7:
                    31:98:6d:47:d9:f6:6f:0a:53:d1:af:c7:f4:26:2d:
                    4f:0a:9a:2b:10:8e:dd:ee:eb:7e:52:ab:84:80:9d:
                    f1:cb:08:90:2d:a7:df:97:ef:38:8f:f9:bf:95:34:
                    e0:18:5a:5d:39:18:69:e5:02:b1:6b:cc:3f:bb:ff:
                    74:25:49:1a:e7:31:23:47:6c:0c:b5:8e:87:9e:0b:
                    09:14:0f:bb:14:22:f1:a2:f8:a6:75:e9:ba:71:14:
                    5f:84:0f:1e:df:5a:ba:0c:fe:e1:60:9a:d7:cb:fe:
                    6b:4b:b0:77:ac:5c:6a:66:e0:83:d1:9e:ea:39:46:
                    09:5c:05:6b:4d:b3:46:84:72:4f:46:f4:cd:68:9c:
                    17:43:4f:0e:b9:69:13:ac:0f:91:a2:ca:f4:cc:21:
                    7b:c8:69:9f:04:31:a9:e3:fd:48:c3:a6:b5:1b:be:
                    17:d0:9b:57:6e:1b:32:c0:5b:7f:08:2d:95:a8:4a:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B2:CE:88:52:B7:8F:35:08:93:6E:08:9D:38:D1:BC:85:58:42:CA
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e33392e36382e302f32322d3234203d3e203533313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:cf:e8:2c:52:2b:0e:e6:86:dc:8b:0c:59:b2:4d:1a:c6:ed:
         5b:93:c5:c5:a3:86:cb:7c:41:a6:1e:a4:9f:61:8a:74:86:7f:
         22:4c:dc:29:23:07:90:18:f4:39:58:fd:39:ca:ab:2e:a9:6b:
         32:66:94:90:93:23:25:4b:f7:73:95:e4:df:92:1f:49:de:bf:
         fa:2d:53:dc:96:e8:3c:07:03:71:20:99:31:71:10:99:99:b3:
         6d:3e:80:f7:32:98:67:1d:b1:4a:2c:57:17:69:74:c0:ed:9e:
         54:27:6f:d6:93:41:30:49:15:23:32:e6:67:58:8f:f6:aa:6e:
         bd:4d:b4:72:ce:fa:cd:7c:ff:1e:f9:ad:c1:19:6e:08:e0:f0:
         20:90:9f:f4:45:a7:31:98:6e:38:5d:3e:da:67:88:db:0a:2f:
         a2:37:37:79:f8:cc:84:8a:bd:06:9a:36:7c:ed:a6:f6:cf:d4:
         32:62:8c:1a:1c:91:00:f2:c0:4e:1c:b8:43:cf:ca:d3:39:c6:
         38:cb:e6:bb:2e:c2:eb:cd:5f:04:83:5b:c8:69:43:70:d8:1a:
         ef:e1:0e:0d:1c:34:9f:e3:e7:20:23:fc:a0:0e:31:56:2c:46:
         00:58:72:44:10:2b:87:c5:ce:40:6c:88:1f:89:db:40:05:6b:
         04:5c:93:c3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPawA9P3dJhWNKC5Y217XmIrAMpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTIxNDNaFw0yNTA1MDIyMTI2NDNaMDMxMTAvBgNV
BAMTKDFFQjJDRTg4NTJCNzhGMzUwODkzNkUwODlEMzhEMUJDODU1ODQyQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6IM/xpF+5KsVvspkGQ8c13pFk
9GMl3qz28WPQ2Tfur/Sk7dPfY5Joha67rK9zFUHc7gHiD8++DDR7k7iuPE/0Wiig
+3KmUx1e1zGYbUfZ9m8KU9Gvx/QmLU8KmisQjt3u635Sq4SAnfHLCJAtp9+X7ziP
+b+VNOAYWl05GGnlArFrzD+7/3QlSRrnMSNHbAy1joeeCwkUD7sUIvGi+KZ16bpx
FF+EDx7fWroM/uFgmtfL/mtLsHesXGpm4IPRnuo5RglcBWtNs0aEck9G9M1onBdD
Tw65aROsD5GiyvTMIXvIaZ8EManj/UjDprUbvhfQm1duGzLAW38ILZWoSqNnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUHrLOiFK3jzUIk24InTjRvIVYQsowHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLcEo1dVA2cUxrMmlIVzlnV2VwVER4YXg2alZ2dHVRWWhGdWR3OXI4VGN5LzAv
MzEzNzM3MmUzMzM5MmUzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMzMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArEnRDANBgkqhkiG9w0BAQsFAAOCAQEAUc/oLFIrDuaG
3IsMWbJNGsbtW5PFxaOGy3xBph6kn2GKdIZ/IkzcKSMHkBj0OVj9OcqrLqlrMmaU
kJMjJUv3c5Xk35IfSd6/+i1T3JboPAcDcSCZMXEQmZmzbT6A9zKYZx2xSixXF2l0
wO2eVCdv1pNBMEkVIzLmZ1iP9qpuvU20cs76zXz/HvmtwRluCODwIJCf9EWnMZhu
OF0+2meI2wovojc3efjMhIq9Bpo2fO2m9s/UMmKMGhyRAPLAThy4Q8/K0znGOMvm
uy7C681fBINbyGlDcNga7+EODRw0n+PnICP8oA4xVixGAFhyRBArh8XOQGyIH4nb
QAVrBFyTww==
-----END CERTIFICATE-----
Generated at Thu May 15 10:00:57 2025 by rpki-client