Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e35332e3234302e302f32312d3234203d3e20323632343831.roa
File:                     3137372e35332e3234302e302f32312d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          1H00MEmvKvjmOAPdhE+BldWnNGk4SeS+oP30S8VwbeA=
Subject key identifier:   98:14:22:49:96:20:D2:F7:2A:E1:DE:8A:2C:CE:05:18:04:98:25:36
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       6CD6380351ED230DE5C3E728B19ED1983914BBE2
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e35332e3234302e302f32312d3234203d3e20323632343831.roa
Signing time:             Fri 03 May 2024 21:36:57 +0000
ROA not before:           Fri 03 May 2024 21:31:57 +0000
ROA not after:            Fri 02 May 2025 21:36:57 +0000
asID:                     262481
IP address blocks:        177.53.240.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d6:38:03:51:ed:23:0d:e5:c3:e7:28:b1:9e:d1:98:39:14:bb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:31:57 2024 GMT
            Not After : May  2 21:36:57 2025 GMT
        Subject: CN=981422499620D2F72AE1DE8A2CCE051804982536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:d5:a4:57:fc:69:ee:a7:d0:aa:25:9d:10:
                    34:c6:be:f3:a4:7a:bd:23:96:10:10:85:33:e4:11:
                    a7:d8:d2:81:d3:99:03:3f:d1:73:1a:c4:31:ad:ce:
                    a8:ae:21:b5:66:34:60:41:f7:2e:fb:61:ec:d7:11:
                    96:b1:93:95:ea:8a:19:07:06:8b:d9:dc:97:c9:d8:
                    1f:fd:38:89:43:ee:3a:58:0d:a9:ca:44:53:55:0d:
                    de:f7:b0:7e:5b:55:33:62:be:da:4f:c4:5b:9a:a7:
                    63:1c:07:f1:5e:4a:d8:ab:9d:12:3e:29:15:a5:66:
                    9a:1d:77:f1:11:38:67:4d:e1:cb:55:be:dd:0d:6c:
                    39:92:c4:d4:81:f4:3b:7b:7a:10:0f:2d:fc:49:6e:
                    6e:ef:e2:a4:56:3a:92:48:3c:37:a2:8b:22:37:0e:
                    f4:58:b5:eb:46:e5:55:29:e3:bc:21:2b:18:da:16:
                    e3:4e:d8:35:54:16:4b:a2:bd:fc:2a:4a:1c:c5:c9:
                    ed:ac:04:76:99:24:00:17:65:e4:4c:51:11:b4:3e:
                    24:3c:b3:a1:d4:05:43:bb:7f:d4:c0:db:8f:b6:76:
                    cf:9d:83:59:ee:d3:95:cf:f4:b2:e9:57:e1:5b:47:
                    2e:1b:2c:f3:3b:3a:ca:c3:40:cf:c9:9f:3e:9a:a8:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:14:22:49:96:20:D2:F7:2A:E1:DE:8A:2C:CE:05:18:04:98:25:36
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e35332e3234302e302f32312d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:95:0b:44:4a:bc:e3:0d:dd:55:d9:bf:9b:18:51:87:9e:29:
         d4:07:85:2d:98:0d:23:56:38:33:0f:bc:4f:ca:f1:37:7e:71:
         36:77:b6:4e:1b:ff:97:28:f2:ec:89:c7:34:4d:35:af:77:fc:
         95:5d:2e:60:cd:1e:ba:7f:0b:0b:64:70:23:79:21:e1:ff:88:
         6c:1c:e3:35:f5:a8:fc:f4:c0:86:f1:c1:3a:0b:42:86:64:2e:
         2e:3f:36:4b:6e:0d:10:85:48:50:26:73:f0:ff:71:e3:aa:f0:
         f2:f0:55:05:73:a0:db:e8:11:74:52:fb:a4:d6:43:e0:01:0f:
         e2:8a:de:b1:00:18:b9:09:55:ce:02:a0:11:4b:4e:69:36:6b:
         11:54:01:f8:33:7a:df:a2:f8:49:73:5b:60:66:7a:37:fb:25:
         9f:fa:ff:11:95:ee:68:47:49:e0:eb:9d:28:c2:eb:6e:8d:07:
         fc:d4:f0:5a:05:71:7a:46:3d:32:fe:7c:a8:ac:de:97:6a:17:
         ef:fc:fb:6c:b9:95:03:04:54:e4:53:43:8c:bc:0e:95:89:2f:
         6d:00:53:9a:b7:fb:6c:05:51:50:dc:cb:fd:65:01:e2:fa:1f:
         9f:54:fb:77:f4:ba:b3:ce:05:ac:69:90:56:b3:db:c9:d3:99:
         e1:49:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:45:19 2025 by rpki-client