Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e37332e302e302f32312d3234203d3e203533313834.roa
File:                     3137372e37332e302e302f32312d3234203d3e203533313834.roa (raw, json)
Hash identifier:          WrvWx6FgyuOUO6/twtXSwub/IJnC4BuZm7wJIEFVh2w=
Subject key identifier:   09:F0:F7:16:AE:06:A0:1C:05:5D:37:81:41:1F:96:95:7F:3F:9D:62
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       1D25F58397DFC481E58DACAEC4F5AD3ABF03A499
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e37332e302e302f32312d3234203d3e203533313834.roa
Signing time:             Fri 03 May 2024 21:25:45 +0000
ROA not before:           Fri 03 May 2024 21:20:45 +0000
ROA not after:            Fri 02 May 2025 21:25:45 +0000
asID:                     53184
IP address blocks:        177.73.0.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:25:f5:83:97:df:c4:81:e5:8d:ac:ae:c4:f5:ad:3a:bf:03:a4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:20:45 2024 GMT
            Not After : May  2 21:25:45 2025 GMT
        Subject: CN=09F0F716AE06A01C055D3781411F96957F3F9D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:6b:ec:59:93:ef:97:9b:0b:7d:06:df:4c:
                    4b:3b:0d:95:d4:ec:45:2a:ab:c6:c8:00:80:b4:c5:
                    25:8f:ed:11:ce:d5:bf:79:b3:95:93:ad:cb:24:1d:
                    63:3f:c1:4f:76:52:1d:2c:91:dc:93:fe:6d:72:b4:
                    ac:09:99:98:b9:96:1f:b7:9d:8e:86:01:9f:57:7f:
                    1e:34:14:8c:b9:48:7f:83:54:e7:e0:67:2c:40:73:
                    e9:a0:8f:0e:2e:5e:ae:4d:e5:e3:46:d8:57:fb:41:
                    61:60:bd:00:d4:98:2c:6f:97:53:c6:de:9f:88:84:
                    2f:15:9f:50:1a:5a:0d:42:90:82:0a:c9:aa:54:41:
                    8a:85:92:b7:8d:45:61:65:1d:5d:df:5f:44:87:ca:
                    0e:0e:6c:bb:ef:eb:79:f2:a6:04:c8:eb:0a:2a:33:
                    81:e7:29:aa:d1:ec:32:46:4a:a9:de:78:82:07:4d:
                    bd:dc:20:08:d7:f6:36:19:8a:9b:23:77:1f:72:2f:
                    f9:e9:21:57:48:2e:10:f4:25:ca:c3:b3:e0:17:3b:
                    e4:4e:e4:e2:01:14:74:0a:59:87:53:66:34:ca:de:
                    2f:7e:2b:dd:db:10:4c:76:b4:58:df:ec:dc:f8:e3:
                    6e:85:0c:b6:ba:6d:85:44:2c:c4:bc:8a:17:e0:ca:
                    3a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F0:F7:16:AE:06:A0:1C:05:5D:37:81:41:1F:96:95:7F:3F:9D:62
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e37332e302e302f32312d3234203d3e203533313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:b8:9e:99:86:c6:30:f7:3a:86:19:2e:c7:00:c9:f1:53:63:
         c4:12:e2:bb:57:2f:f9:e5:af:c7:c0:2c:b7:6e:7a:1f:53:03:
         58:19:ef:de:cb:44:9f:cc:9c:e6:06:17:71:7d:1d:ee:b7:37:
         f3:f7:54:58:05:53:07:43:13:5d:47:46:ad:41:14:47:10:78:
         de:49:72:6f:de:e9:8c:2a:1c:1b:27:2e:49:9f:b5:95:c3:e1:
         8c:3d:e6:a5:65:ae:84:1a:4a:1c:2e:ce:dd:c8:83:0f:54:59:
         df:71:07:75:47:ee:31:02:33:32:47:b1:5e:bd:f2:8d:12:28:
         f0:1e:6f:ff:d2:4e:9f:39:33:f9:52:e6:39:b1:cf:da:23:b0:
         fd:a0:fb:de:ea:12:48:33:23:0b:50:d7:54:c4:06:a9:ab:9d:
         9e:89:f1:9e:76:b1:17:8c:3b:dc:28:24:cb:43:f2:bc:2d:df:
         75:e6:8d:97:6c:35:3f:65:79:ee:1f:ca:0f:18:e8:91:f1:87:
         24:85:9c:6d:fa:b0:c6:b8:f6:d2:d2:52:65:ac:45:aa:90:50:
         68:ee:60:2e:d0:8e:9a:61:84:1f:9b:fa:cd:0c:ed:f8:fc:3f:
         6d:af:87:a4:06:9a:94:02:fe:cb:2c:e3:85:6b:7f:ac:a5:91:
         af:d5:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:31:15 2025 by rpki-client