Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3139312e362e3133362e302f32322d3234203d3e20323633323937.roa
File:                     3139312e362e3133362e302f32322d3234203d3e20323633323937.roa (raw, json)
Hash identifier:          e/qfwu/FInKR9/Q8sTrShxOGOkZ3yFT2TIIga0asgDs=
Subject key identifier:   73:84:DD:2D:9E:30:9A:11:AA:8E:AB:F7:84:10:8A:43:3D:A9:9A:EB
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       6DA5CBE641F8DB25F53593F15CCFBF8191C13F84
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3139312e362e3133362e302f32322d3234203d3e20323633323937.roa
Signing time:             Fri 03 May 2024 21:51:15 +0000
ROA not before:           Fri 03 May 2024 21:46:15 +0000
ROA not after:            Fri 02 May 2025 21:51:15 +0000
asID:                     263297
IP address blocks:        191.6.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a5:cb:e6:41:f8:db:25:f5:35:93:f1:5c:cf:bf:81:91:c1:3f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:46:15 2024 GMT
            Not After : May  2 21:51:15 2025 GMT
        Subject: CN=7384DD2D9E309A11AA8EABF784108A433DA99AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:75:26:df:b1:7e:ba:34:2a:03:5c:11:8c:
                    fc:f9:77:22:11:7b:0d:26:a9:c3:af:55:ea:48:1b:
                    a9:d6:d4:ae:cd:ca:dc:f8:65:50:00:12:be:9a:36:
                    f7:4c:f4:78:0c:b6:62:54:bd:4e:12:0d:bd:95:7e:
                    c3:16:ef:da:dd:5d:12:b5:5f:08:22:0d:a0:e5:65:
                    73:64:f9:3f:a7:1b:c1:29:75:ce:5d:7b:42:84:14:
                    cb:9e:d8:e2:65:ef:3f:64:4c:c1:81:58:7c:5f:60:
                    5c:44:9d:4a:8e:a3:47:48:ef:40:f1:68:ad:78:ed:
                    bc:cf:5a:9a:55:bd:a5:a5:f7:b2:4a:56:85:7f:33:
                    1e:5e:ee:75:58:d2:23:5e:5a:55:bf:70:e2:e0:bd:
                    e0:c7:86:3f:fd:1b:ab:53:23:cc:e6:dc:16:6a:9e:
                    b3:b0:b1:dd:b4:3b:52:05:ca:48:ce:3d:f1:25:b6:
                    88:a7:6f:e5:d2:72:33:eb:e0:14:92:d9:d2:fc:f9:
                    b2:27:38:a1:02:b9:72:f6:96:22:1b:7e:5b:26:e5:
                    9f:34:a3:49:8e:d8:00:b9:f6:9f:b9:e7:73:23:a9:
                    8b:c0:19:ef:c3:14:21:52:13:ce:64:ee:ad:0c:19:
                    37:84:27:14:79:3b:fe:e2:b0:3b:20:e8:3e:ce:a0:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:84:DD:2D:9E:30:9A:11:AA:8E:AB:F7:84:10:8A:43:3D:A9:9A:EB
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3139312e362e3133362e302f32322d3234203d3e20323633323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:53:7c:44:91:96:db:99:53:01:4a:b2:af:3a:12:e0:5e:7e:
         42:8b:e2:52:c1:db:cb:10:32:19:68:5b:65:00:9b:a7:7a:08:
         77:9e:f2:d7:54:17:b7:4b:cd:3f:88:2b:7b:0a:a8:83:c6:56:
         10:05:5d:d7:98:36:06:96:b6:0f:c9:2d:96:2c:9e:83:e1:08:
         40:c3:c5:4f:13:63:fa:02:b6:4e:2c:7c:07:15:25:a2:6c:86:
         6a:da:f4:7c:9d:24:11:3c:62:04:6a:f7:05:65:80:0e:91:fc:
         6e:d7:a5:1a:79:c3:6f:77:aa:98:32:66:b6:31:c6:dd:6d:af:
         0b:80:88:c8:7f:b4:0c:58:f9:01:77:78:47:03:5b:cb:1e:53:
         b1:81:37:61:f4:24:25:91:72:f0:d9:54:8c:dc:e0:78:58:37:
         29:39:cf:03:6b:8b:90:18:87:ae:42:4f:c2:6f:35:1b:af:a1:
         72:f6:18:27:3f:b2:ab:55:5a:ee:f3:4b:03:92:71:25:9e:65:
         28:d4:98:d5:5c:80:31:48:fc:10:fb:94:1b:e3:41:81:b9:10:
         30:d5:1f:91:01:6b:b4:4c:6a:0a:43:fd:91:e2:02:3e:21:3b:
         92:e6:be:37:24:09:c7:f0:96:17:a2:1c:be:23:e1:ff:81:da:
         10:f1:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:00:14 2025 by rpki-client