Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138362e3233352e3139322e302f32302d3234203d3e20323632363733.roa
File:                     3138362e3233352e3139322e302f32302d3234203d3e20323632363733.roa (raw, json)
Hash identifier:          gJaI6H4PuI/ym1PkA+VV5Sh6EqAhNM1jXqZXtDlSBMM=
Subject key identifier:   D7:D4:E4:32:E1:D1:42:51:CE:26:78:AB:89:DF:B0:3A:A7:A0:CF:72
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       134BAA8633E0574705ED823FF0BFECEBD5E96339
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138362e3233352e3139322e302f32302d3234203d3e20323632363733.roa
Signing time:             Fri 03 May 2024 21:42:24 +0000
ROA not before:           Fri 03 May 2024 21:37:24 +0000
ROA not after:            Fri 02 May 2025 21:42:24 +0000
asID:                     262673
IP address blocks:        186.235.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4b:aa:86:33:e0:57:47:05:ed:82:3f:f0:bf:ec:eb:d5:e9:63:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:37:24 2024 GMT
            Not After : May  2 21:42:24 2025 GMT
        Subject: CN=D7D4E432E1D14251CE2678AB89DFB03AA7A0CF72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:2c:d0:83:99:64:07:96:90:b8:fe:94:fa:
                    e6:aa:b4:47:c2:0e:ec:fc:d0:53:31:9d:44:2d:af:
                    58:8c:1d:48:67:ea:26:7b:c0:74:90:99:f1:0a:f3:
                    44:f6:81:c8:9f:cf:4a:57:21:95:ec:31:6c:bc:a9:
                    01:11:d8:8f:16:1e:2e:f6:ba:cb:a1:a6:11:a2:27:
                    af:da:92:9f:6e:fa:8f:87:5e:07:72:37:6c:9e:b2:
                    39:51:6d:9d:d0:27:57:e7:aa:e2:7e:ab:23:1d:3a:
                    0b:f2:9a:d7:b3:ac:30:8f:0e:65:2f:58:6c:37:2e:
                    c9:f0:fc:87:b4:fe:3f:f8:f9:13:73:89:3a:cf:94:
                    f9:20:69:49:fa:17:51:cb:8c:21:44:2a:c6:83:76:
                    e8:8d:4e:61:d3:59:80:ce:e2:46:7d:27:6d:b3:46:
                    5c:07:b5:d6:4a:62:02:7d:c2:af:d2:88:8d:68:d9:
                    36:3d:c3:26:53:04:3a:29:44:18:15:51:7a:d5:50:
                    a0:cc:7b:67:5d:97:f3:b1:d5:03:76:0b:d3:e5:6d:
                    22:e7:61:85:b4:96:0a:97:e1:ff:6b:7a:9d:9f:d7:
                    03:2b:9c:73:d1:23:11:ed:95:5b:e7:cd:0a:58:56:
                    aa:63:e1:bf:54:3b:ef:ee:d8:28:ed:60:93:c1:ed:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D4:E4:32:E1:D1:42:51:CE:26:78:AB:89:DF:B0:3A:A7:A0:CF:72
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138362e3233352e3139322e302f32302d3234203d3e20323632363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:92:54:6c:b7:01:40:3e:23:48:31:d1:ad:15:65:e3:68:b8:
         f0:06:5c:51:b4:3a:40:dc:26:01:f1:4a:df:e7:5b:a2:89:3c:
         a4:8b:c0:3b:98:18:48:0d:4a:df:27:90:26:22:db:16:d4:1e:
         22:bb:c8:ca:47:6f:dc:61:ed:8f:15:9f:20:07:b3:58:42:43:
         5e:67:f8:9c:05:c4:d4:d3:b0:06:38:71:ee:f4:6c:57:5a:9a:
         ae:6b:86:26:0d:a6:d9:79:0e:fb:b0:e0:61:58:ea:44:2f:ec:
         1a:eb:0c:ae:19:05:d2:97:da:c7:be:98:b3:46:e2:23:38:25:
         af:a4:e2:ad:45:41:97:32:fc:24:0f:1e:e5:18:c6:1d:60:d8:
         72:35:42:20:11:a0:75:ff:16:9f:14:ca:4f:2b:f4:63:02:c9:
         2d:58:61:69:84:69:90:f3:cb:d3:a9:36:29:64:78:df:c2:df:
         32:8b:9e:e8:75:f5:78:6b:28:7c:0d:2d:9b:a8:67:33:5e:04:
         6a:0f:0e:29:de:e5:ad:aa:a1:5c:09:7a:9f:06:17:25:7a:9a:
         67:ce:58:fc:5c:69:76:72:b5:f1:50:c5:8b:01:b0:79:e6:5d:
         70:08:76:db:0e:e9:6e:27:5c:4b:8c:e5:92:bd:0c:bb:80:74:
         f0:6e:5f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:32:12 2025 by rpki-client