Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3230312e37362e3131322e302f32302d3234203d3e20323632373934.roa
File:                     3230312e37362e3131322e302f32302d3234203d3e20323632373934.roa (raw, json)
Hash identifier:          ZfvYDpP+cuZpC+bguVsowqcY+gEc9JCneinKtnuAd8k=
Subject key identifier:   0C:F8:A3:BF:C6:55:75:B3:61:82:16:60:94:32:AE:34:DB:17:A9:92
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       7D7FD93D06C1C3A28E74CE761FAEADB99DD0386E
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3230312e37362e3131322e302f32302d3234203d3e20323632373934.roa
Signing time:             Fri 03 May 2024 21:46:48 +0000
ROA not before:           Fri 03 May 2024 21:41:48 +0000
ROA not after:            Fri 02 May 2025 21:46:48 +0000
asID:                     262794
IP address blocks:        201.76.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7f:d9:3d:06:c1:c3:a2:8e:74:ce:76:1f:ae:ad:b9:9d:d0:38:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:41:48 2024 GMT
            Not After : May  2 21:46:48 2025 GMT
        Subject: CN=0CF8A3BFC65575B3618216609432AE34DB17A992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:9d:6a:fe:ee:30:e9:90:7f:7e:b3:e4:47:
                    d5:ae:4f:1b:85:4c:45:2f:55:14:7d:9e:43:ed:7d:
                    7c:92:e5:75:6a:84:4e:cf:96:68:85:c1:96:8c:39:
                    d8:01:08:4c:dc:ef:02:d8:6b:b3:73:37:d1:11:db:
                    36:c3:1b:0a:e5:90:73:ad:4e:c5:4c:20:d7:66:91:
                    ab:03:28:90:7f:01:33:06:a7:06:c8:64:ca:75:74:
                    b2:68:64:9d:a0:49:0e:40:1d:e4:44:99:9a:9b:43:
                    27:06:15:9a:d5:97:af:9f:08:d9:11:44:a7:17:dd:
                    93:67:35:c7:3a:84:27:ff:09:b6:6f:2c:87:5e:e6:
                    d0:e7:e4:ca:94:d4:00:51:d0:0e:f5:4b:61:58:74:
                    d6:cc:1f:ce:97:a8:79:d4:2d:e3:26:db:9a:5b:1f:
                    11:1c:89:61:e3:af:32:14:1a:80:55:ba:9a:8b:82:
                    8c:83:ed:56:66:1c:3b:3b:2a:5a:a8:0e:1f:54:b6:
                    0b:73:e2:17:90:b2:cd:0e:71:2f:5b:07:30:b3:97:
                    32:2b:93:f1:1f:68:62:9b:07:74:91:ff:be:68:ee:
                    ad:e9:89:25:79:2b:b5:30:c2:f9:f2:1e:1c:66:c1:
                    9f:a9:76:81:36:99:40:a4:c7:70:39:dd:84:5f:df:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F8:A3:BF:C6:55:75:B3:61:82:16:60:94:32:AE:34:DB:17:A9:92
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3230312e37362e3131322e302f32302d3234203d3e20323632373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:54:7b:42:57:9b:4a:1c:4c:9c:c5:44:03:16:1b:bd:f8:28:
         5d:b7:cc:38:b1:52:47:be:de:52:c2:b8:e6:d7:6b:86:28:8e:
         01:58:80:39:7f:ef:f7:a7:b0:8b:a0:1e:ba:b7:15:62:db:b8:
         db:72:9b:11:02:9c:90:d6:9f:34:b8:d6:ee:a6:05:c1:e7:0a:
         07:6e:b4:05:4b:c2:54:8c:25:b5:bb:57:97:0a:be:b4:47:05:
         1b:03:62:18:d0:3e:cb:ff:d2:41:d8:38:3f:c2:66:c2:6b:d6:
         a1:fc:eb:b0:f9:95:1f:50:57:3c:44:15:1a:54:75:d3:99:1b:
         93:01:3a:ea:7f:bd:6c:d2:18:fa:ee:e7:43:71:54:c3:90:99:
         fa:4d:35:41:5f:14:cf:7b:f3:11:d1:6b:bc:a2:2c:60:d8:80:
         5b:ea:f4:5f:a2:1b:43:78:29:fc:c3:b2:80:26:fd:e8:8a:c6:
         bb:b3:e1:3b:1a:e6:57:b6:44:62:75:80:3f:55:dd:4c:ee:47:
         f5:ca:b1:cd:63:05:25:db:f8:e4:b0:a4:b5:c0:f0:f0:ee:a1:
         68:6a:9e:60:49:59:5e:c9:72:46:1c:b1:79:6f:e3:54:fe:43:
         92:ef:ee:fc:c0:e4:f7:bf:4e:6e:20:f4:83:96:22:c3:30:94:
         7c:25:fc:e5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfX/ZPQbBw6KOdM52H66tuZ3QOG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTQxNDhaFw0yNTA1MDIyMTQ2NDhaMDMxMTAvBgNV
BAMTKDBDRjhBM0JGQzY1NTc1QjM2MTgyMTY2MDk0MzJBRTM0REIxN0E5OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvp1q/u4w6ZB/frPkR9WuTxuF
TEUvVRR9nkPtfXyS5XVqhE7PlmiFwZaMOdgBCEzc7wLYa7NzN9ER2zbDGwrlkHOt
TsVMINdmkasDKJB/ATMGpwbIZMp1dLJoZJ2gSQ5AHeREmZqbQycGFZrVl6+fCNkR
RKcX3ZNnNcc6hCf/CbZvLIde5tDn5MqU1ABR0A71S2FYdNbMH86XqHnULeMm25pb
HxEciWHjrzIUGoBVupqLgoyD7VZmHDs7KlqoDh9Utgtz4heQss0OcS9bBzCzlzIr
k/EfaGKbB3SR/75o7q3piSV5K7UwwvnyHhxmwZ+pdoE2mUCkx3A53YRf358DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDPijv8ZVdbNhghZglDKuNNsXqZIwHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLcEo1dVA2cUxrMmlIVzlnV2VwVER4YXg2alZ2dHVRWWhGdWR3OXI4VGN5LzAv
MzIzMDMxMmUzNzM2MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATJTHAwDQYJKoZIhvcNAQELBQADggEBADFUe0JX
m0ocTJzFRAMWG734KF23zDixUke+3lLCuObXa4YojgFYgDl/7/ensIugHrq3FWLb
uNtymxECnJDWnzS41u6mBcHnCgdutAVLwlSMJbW7V5cKvrRHBRsDYhjQPsv/0kHY
OD/CZsJr1qH867D5lR9QVzxEFRpUddOZG5MBOup/vWzSGPru50NxVMOQmfpNNUFf
FM978xHRa7yiLGDYgFvq9F+iG0N4KfzDsoAm/eiKxruz4Tsa5le2RGJ1gD9V3Uzu
R/XKsc1jBSXb+OSwpLXA8PDuoWhqnmBJWV7JckYcsXlv41T+Q5Lv7vzA5Pe/Tm4g
9IOWIsMwlHwl/OU=
-----END CERTIFICATE-----
Generated at Thu May 15 12:34:48 2025 by rpki-client