Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133322e3235352e3134382e302f32322d3234203d3e203533303835.roa
File:                     3133322e3235352e3134382e302f32322d3234203d3e203533303835.roa (raw, json)
Hash identifier:          GkzCNe+VeE1KLsHC7ooxzTxE5WQPwoWp9OImI+zhljY=
Subject key identifier:   EC:84:91:96:6F:6E:95:AA:F5:E8:ED:39:D7:7B:4A:20:73:EB:3E:E3
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       3A8C9D8A2EF4E5E4AF99EE5F0DF8E1EF176EFED6
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133322e3235352e3134382e302f32322d3234203d3e203533303835.roa
Signing time:             Fri 03 May 2024 21:22:59 +0000
ROA not before:           Fri 03 May 2024 21:17:59 +0000
ROA not after:            Fri 02 May 2025 21:22:59 +0000
asID:                     53085
IP address blocks:        132.255.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8c:9d:8a:2e:f4:e5:e4:af:99:ee:5f:0d:f8:e1:ef:17:6e:fe:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:17:59 2024 GMT
            Not After : May  2 21:22:59 2025 GMT
        Subject: CN=EC8491966F6E95AAF5E8ED39D77B4A2073EB3EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:60:fa:2b:0d:b0:86:4d:df:e0:97:8c:4c:
                    47:42:72:77:46:5f:95:5f:25:f3:dc:41:a8:3c:3a:
                    39:f8:a9:23:4b:55:02:ca:ff:cf:d7:c2:14:ab:1a:
                    c9:93:90:71:5f:86:31:55:94:bd:b9:04:23:60:b4:
                    46:2a:0e:3a:ea:05:3c:be:4e:ab:9d:aa:fb:37:99:
                    f7:6f:4a:ba:06:b9:e4:92:27:12:51:ad:c9:ca:8f:
                    55:3b:00:08:b9:bd:75:db:d6:5e:8b:cc:74:14:00:
                    f1:2a:25:01:59:24:3d:eb:b9:a8:5c:7b:c9:8f:d5:
                    11:be:af:e6:a3:81:90:3e:10:46:c7:d0:f1:86:c5:
                    e4:d7:3c:3c:62:a4:35:06:5b:10:b2:c4:70:c1:29:
                    50:dc:1d:aa:b2:d6:c2:b8:e9:e6:2c:2c:ab:7c:1e:
                    81:9d:f5:fc:c2:44:08:52:07:76:8e:95:38:c8:9e:
                    39:98:fc:68:65:bd:7b:42:47:a3:0b:1a:13:82:24:
                    8c:80:57:04:ea:7f:a9:46:f8:e3:42:de:36:47:69:
                    f7:9f:50:89:82:32:25:44:6c:e2:ea:95:07:95:d5:
                    6d:63:d0:36:c8:3f:7b:17:58:52:98:88:8d:7f:87:
                    2f:dc:8f:51:c9:95:97:83:b4:5c:00:5c:f6:b3:f3:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:84:91:96:6F:6E:95:AA:F5:E8:ED:39:D7:7B:4A:20:73:EB:3E:E3
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133322e3235352e3134382e302f32322d3234203d3e203533303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:26:d5:0b:ee:cd:46:3f:3b:c5:c9:bc:90:b2:8b:62:b3:4d:
         c0:1c:da:1d:28:15:72:cd:72:c3:80:bc:f7:af:63:b5:c2:6e:
         6f:e6:61:ae:16:3d:76:52:85:9d:c8:6c:af:e3:0e:1c:bd:9f:
         fd:07:16:8b:7b:7b:59:4f:41:b4:6c:23:09:f5:91:95:a8:69:
         85:d5:95:da:f0:be:1d:bf:2c:80:c5:e6:7e:42:f9:3c:78:d4:
         61:23:0a:22:2a:c9:5c:1a:ec:76:2f:b8:2b:b1:4d:52:50:ac:
         1b:86:16:3a:fa:27:51:13:d9:7c:8b:31:8d:f7:e0:32:fe:79:
         bb:42:9f:9e:bf:9e:6a:d9:8c:29:a2:1f:c0:86:30:26:7f:56:
         57:3e:05:4f:21:b0:de:b4:0e:d9:54:f9:77:9b:7f:b9:df:e1:
         c4:81:dc:d6:f4:fc:fa:05:71:36:7a:4a:21:3f:a4:50:55:f4:
         a9:13:b8:25:8c:bf:2d:1b:04:51:07:7d:f1:c9:72:c9:e3:cc:
         a8:c6:81:37:21:41:41:50:a9:d3:d4:de:d0:af:2d:94:2c:9a:
         7b:2b:79:d2:8c:9e:90:38:69:4d:de:15:87:8b:fe:cc:9d:a4:
         28:6a:9d:0d:ea:2d:81:88:b0:0a:61:d2:cc:8b:3a:23:0f:e3:
         65:37:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:42:44 2025 by rpki-client