Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3230312e3136322e36342e302f31382d3234203d3e20323632363733.roa
File:                     3230312e3136322e36342e302f31382d3234203d3e20323632363733.roa (raw, json)
Hash identifier:          Sur2LQeqFwGWA3zCBcApjs8Zxk47fKSdpuLUPlwNIPQ=
Subject key identifier:   B0:36:3C:52:1A:FB:17:0D:F0:9A:C2:CE:E3:32:26:B0:33:28:F1:B1
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       68E46C9265A28D2AECB4246D29081A0D44E6940B
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3230312e3136322e36342e302f31382d3234203d3e20323632363733.roa
Signing time:             Fri 03 May 2024 21:43:59 +0000
ROA not before:           Fri 03 May 2024 21:38:59 +0000
ROA not after:            Fri 02 May 2025 21:43:59 +0000
asID:                     262673
IP address blocks:        201.162.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e4:6c:92:65:a2:8d:2a:ec:b4:24:6d:29:08:1a:0d:44:e6:94:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:38:59 2024 GMT
            Not After : May  2 21:43:59 2025 GMT
        Subject: CN=B0363C521AFB170DF09AC2CEE33226B03328F1B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:18:eb:86:f0:b2:77:f7:92:53:16:e1:bc:2d:
                    db:e9:01:3b:28:26:37:40:e6:a6:cc:68:2d:01:f6:
                    12:08:5e:35:3d:a2:27:dd:e0:77:3c:43:c2:7a:53:
                    41:c6:9b:f3:25:5d:e2:f9:f9:35:46:cb:6f:49:37:
                    7c:c9:9d:01:00:1c:ef:ee:7d:9c:f1:b7:8d:8a:e6:
                    f7:26:c2:60:a9:9b:24:42:2b:f6:37:85:0f:52:c5:
                    60:95:d6:c3:9d:35:c7:b1:b3:57:dc:f1:2b:83:ae:
                    9c:8b:62:a9:da:92:6a:fc:f1:9b:7c:3d:ab:d7:85:
                    cb:3f:52:30:6c:9d:4d:13:ae:2b:12:fd:b3:d0:bf:
                    1a:a4:4d:92:e1:dd:2f:94:f3:fd:98:7e:42:4d:2f:
                    2c:7d:ad:07:cf:cd:98:b7:3b:6f:fb:21:27:3f:9d:
                    04:39:91:b5:3f:57:4c:f8:a2:72:6d:d9:0f:3e:94:
                    bb:a1:31:a5:fe:c6:ba:b4:4b:87:53:65:7d:c6:83:
                    1e:80:f2:20:ca:35:1c:b5:0c:da:27:be:e0:09:97:
                    11:16:7d:a1:8b:68:ba:17:f0:77:54:6a:1b:cf:e9:
                    1d:90:cd:7b:df:d4:73:5f:57:fd:ea:01:b4:c4:c6:
                    31:06:c5:3a:4e:ff:93:20:f8:ad:00:3f:da:3e:3d:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:3C:52:1A:FB:17:0D:F0:9A:C2:CE:E3:32:26:B0:33:28:F1:B1
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3230312e3136322e36342e302f31382d3234203d3e20323632363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.162.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1e:76:9e:c8:20:a4:bd:72:20:2f:b2:e1:8e:8c:80:7d:d5:a0:
         03:dc:03:79:b5:bd:a1:58:89:68:63:5d:29:eb:fe:28:2a:a1:
         65:94:63:36:b7:35:b9:8d:10:70:b3:67:ed:a3:6a:07:3f:ec:
         93:88:d8:63:60:47:66:96:ee:c9:1d:e3:41:d2:eb:1f:6e:35:
         8d:de:f2:66:77:4c:8c:4e:de:16:9d:86:3d:af:ae:34:e5:5e:
         29:90:47:df:68:74:21:54:c0:a0:ae:42:5b:9f:9b:0d:bb:14:
         ed:5a:cb:b1:d0:1d:bc:6c:ab:63:25:c1:47:8c:eb:28:0d:fb:
         d1:e4:12:f9:b2:2d:cd:30:7f:b3:fd:32:59:fe:b6:60:06:78:
         a8:6e:1b:45:62:80:75:e0:ad:6a:cc:8d:a8:53:7d:6d:dc:59:
         ee:d8:ed:a8:6a:8d:d3:99:21:db:3d:99:32:cf:78:df:0e:86:
         da:8f:ee:94:f4:f9:9e:57:b3:4c:a0:52:2b:66:ac:0f:1e:eb:
         e3:d6:07:2c:8b:05:1e:c7:75:12:31:ef:92:78:94:85:06:eb:
         20:92:14:5d:58:e6:c1:07:9b:55:93:fe:87:60:2a:ee:ba:8b:
         97:21:9f:3b:8e:a1:a9:04:cd:56:5c:0d:02:ff:21:bd:c6:0a:
         fc:01:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:30:17 2025 by rpki-client