Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138372e37332e31362e302f32302d3234203d3e20323632363731.roa
File:                     3138372e37332e31362e302f32302d3234203d3e20323632363731.roa (raw, json)
Hash identifier:          tUX5+HJ/9O1jobfw4jBZi7iDvdGH3qKE1jHyWN2Pa+k=
Subject key identifier:   11:B0:32:D0:83:6C:E1:F2:46:29:44:45:41:50:54:AC:15:9B:4B:93
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       782CD6E2B4F89F3780CEC414E79F3C4B1E3148A9
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138372e37332e31362e302f32302d3234203d3e20323632363731.roa
Signing time:             Fri 03 May 2024 21:39:21 +0000
ROA not before:           Fri 03 May 2024 21:34:21 +0000
ROA not after:            Fri 02 May 2025 21:39:21 +0000
asID:                     262671
IP address blocks:        187.73.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2c:d6:e2:b4:f8:9f:37:80:ce:c4:14:e7:9f:3c:4b:1e:31:48:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:34:21 2024 GMT
            Not After : May  2 21:39:21 2025 GMT
        Subject: CN=11B032D0836CE1F246294445415054AC159B4B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:63:72:b5:4d:b0:88:c8:d8:55:37:dc:c4:44:
                    65:74:ec:fe:0d:92:8a:1e:50:2e:5c:11:cc:db:e5:
                    3c:b8:da:2a:ce:fa:e0:90:c0:c8:75:bf:8c:d5:9f:
                    d6:21:65:b5:63:a9:db:6e:28:68:d0:f4:54:e0:10:
                    90:84:fe:9e:77:53:69:87:4c:c9:aa:70:4c:1e:d2:
                    60:eb:9f:43:e9:8b:da:e2:32:b6:86:61:cc:cd:40:
                    af:0b:e6:b3:b1:b8:63:e3:6c:51:94:92:20:9b:6e:
                    e0:a8:81:82:72:f1:d3:f1:85:a0:d2:38:80:c2:75:
                    b4:37:99:2e:bc:98:aa:e4:0d:d9:25:1d:3e:d0:c7:
                    06:be:56:5d:42:a2:23:f1:58:96:ac:70:0a:26:17:
                    8c:af:11:ab:75:f1:52:b5:a9:e4:9d:c4:ed:d5:45:
                    89:8e:c8:aa:2f:f6:95:20:52:fd:aa:83:ca:c4:9a:
                    06:9e:51:b7:93:a1:e4:49:4f:82:a5:fc:3d:07:cb:
                    c1:37:41:85:51:85:6a:6c:51:32:0e:9e:98:7a:33:
                    34:c0:ae:d4:8c:cb:28:6d:19:ab:e3:1b:6c:02:20:
                    7e:e6:d1:02:7f:88:3f:2f:b1:55:7e:f0:9c:45:b4:
                    93:a6:1e:2a:34:5f:e9:b2:6a:8d:72:dd:eb:0f:29:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B0:32:D0:83:6C:E1:F2:46:29:44:45:41:50:54:AC:15:9B:4B:93
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138372e37332e31362e302f32302d3234203d3e20323632363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:47:00:02:7f:f9:77:fc:64:0f:2f:ae:27:2e:6c:37:42:fc:
         f6:4a:cd:e0:e7:97:67:34:30:f0:a3:be:74:b0:be:a8:54:15:
         e6:ed:ad:d9:1a:71:ca:4e:68:20:e5:71:e2:9e:ef:26:88:af:
         9a:ec:cf:0a:eb:b3:b9:a4:8a:64:45:ca:89:52:a5:9d:1b:01:
         1c:34:4a:34:95:76:3e:6d:8c:43:62:6d:a6:72:cf:d1:7d:85:
         db:e7:4f:c2:d2:e5:6a:68:e6:75:7d:77:45:77:7a:78:b8:0b:
         a1:d6:5c:3b:08:b3:a1:1d:c0:b3:c6:ec:7f:52:15:a6:21:91:
         01:df:ca:eb:1d:88:1f:e9:fa:56:e5:58:66:9a:50:61:6f:92:
         64:56:7a:f9:53:f9:b1:c3:36:63:cd:c0:99:f7:61:6e:28:e8:
         ca:52:53:b6:64:43:b3:14:f7:18:20:f4:bd:56:16:46:61:a2:
         fa:3d:6a:37:cb:64:2b:d5:ec:a2:58:3c:f8:33:8e:81:e4:12:
         ee:31:b0:8e:65:98:3b:d7:10:6a:46:bd:ac:0f:74:b3:d9:70:
         43:50:28:b3:45:67:11:61:de:78:dc:84:70:d8:7a:40:33:9e:
         e0:7f:d3:90:16:ad:ff:63:7e:55:f5:66:56:b5:0c:ea:21:28:
         f7:f6:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:38:36 2025 by rpki-client