Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e3232372e3139362e302f32322d3234203d3e203238323538.roa
File:                     3136382e3232372e3139362e302f32322d3234203d3e203238323538.roa (raw, json)
Hash identifier:          On1sR4R/CKn1hPH+MplVrTROp9FHGNz8CcIPiDmSCso=
Subject key identifier:   0B:A1:75:E5:B1:60:42:94:43:CF:A9:1C:C7:11:2F:DE:CA:5D:8B:40
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       7733E1C56A0B31DF6C45EC534F19A958D3D63032
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e3232372e3139362e302f32322d3234203d3e203238323538.roa
Signing time:             Fri 03 May 2024 21:20:48 +0000
ROA not before:           Fri 03 May 2024 21:15:48 +0000
ROA not after:            Fri 02 May 2025 21:20:48 +0000
asID:                     28258
IP address blocks:        168.227.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:33:e1:c5:6a:0b:31:df:6c:45:ec:53:4f:19:a9:58:d3:d6:30:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:15:48 2024 GMT
            Not After : May  2 21:20:48 2025 GMT
        Subject: CN=0BA175E5B160429443CFA91CC7112FDECA5D8B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:d7:c4:3d:e8:ac:63:44:c4:b5:98:1c:26:
                    e7:55:0d:eb:0c:d3:0d:c7:29:2c:5b:ee:6a:64:9f:
                    95:9a:72:2c:31:2c:e5:7b:f9:c4:af:33:d3:cf:a0:
                    8f:9a:31:7b:1c:c0:a9:4c:f8:b6:29:6d:fa:cd:b1:
                    b7:c1:d8:4b:e5:83:48:6f:cc:bf:05:38:2f:87:89:
                    d8:17:82:3c:ba:0f:e8:f7:b0:fd:66:27:ce:85:c6:
                    25:20:23:54:b5:56:fb:fa:3d:13:23:05:81:bd:ef:
                    9b:50:7f:18:b3:ae:d1:60:88:bf:ff:0c:c6:0b:0d:
                    e2:66:0a:ce:f6:bb:ae:46:49:e7:df:8a:21:70:b5:
                    7a:5e:20:c1:35:eb:af:21:eb:b2:70:81:a0:46:a2:
                    90:61:ac:21:cf:5b:14:c9:c9:5f:58:17:53:88:91:
                    95:a4:48:db:bb:f1:a3:82:25:c4:27:76:17:34:82:
                    fd:e6:48:05:1a:b9:e9:91:81:e2:17:95:3e:c8:0b:
                    97:35:7f:d0:b7:06:e7:ce:1b:3e:3a:1e:f6:25:87:
                    1c:b0:c4:6c:b7:f3:9c:08:86:04:eb:64:de:5a:33:
                    57:88:14:15:87:81:f5:1a:fb:4c:8a:9d:50:24:0c:
                    40:9e:20:36:4e:b0:8c:ea:ff:c7:d4:80:42:fb:aa:
                    00:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A1:75:E5:B1:60:42:94:43:CF:A9:1C:C7:11:2F:DE:CA:5D:8B:40
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3136382e3232372e3139362e302f32322d3234203d3e203238323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:8d:0e:14:4a:f5:dd:b4:b9:e4:83:dd:37:cd:69:e8:75:79:
         ac:42:e1:8e:c9:b7:a8:e6:10:d4:a7:e2:dd:38:1d:59:1b:24:
         5a:41:95:96:c6:45:8f:6e:8e:91:d7:97:1a:f2:96:f1:e8:1c:
         6a:54:f0:3f:1a:3a:4f:01:2d:0f:32:6f:01:fe:41:ea:11:27:
         ed:e2:32:2a:64:f0:e4:78:4b:37:5d:15:43:bc:43:04:ba:29:
         d1:c3:9a:d5:d3:6d:bf:44:c7:5e:57:3f:58:8d:7b:d5:91:20:
         a9:3f:d3:ea:57:b1:f7:aa:37:e0:61:e1:dd:9e:dc:26:ac:f8:
         4b:49:e3:0c:24:f4:ea:a7:f4:17:54:b0:53:84:d5:30:00:de:
         2a:9f:38:dd:8d:25:99:5a:60:15:db:82:b8:a0:84:53:d1:cf:
         9a:1f:1c:04:ed:02:0a:c5:ed:89:a8:87:ae:9d:53:b0:9f:74:
         e2:eb:35:37:28:6f:6e:35:5e:ef:7f:6b:c6:05:d4:78:90:09:
         c4:64:77:7f:b0:1f:fc:5b:43:ca:31:78:55:0c:95:1b:32:87:
         11:67:8e:35:a4:76:6d:e0:17:87:3f:5f:27:5f:ab:72:23:d5:
         5c:3b:9f:9c:44:2a:2e:42:76:05:e6:8d:85:c7:c6:98:32:5c:
         c0:3e:96:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:23 2025 by rpki-client