Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3234352e31322e302f32322d3234203d3e20323632343831.roa
File:                     3137302e3234352e31322e302f32322d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          3xWECY+Jcfy4XotIaJuYW4Zj/icLxdYNjubTExRScis=
Subject key identifier:   4F:A6:3A:CF:65:67:27:37:B2:93:AE:0F:03:E6:0F:B4:B0:4C:CE:D0
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       0B7D500809E76BCD7DB91DB3A5134930B532720A
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3234352e31322e302f32322d3234203d3e20323632343831.roa
Signing time:             Fri 03 May 2024 21:38:02 +0000
ROA not before:           Fri 03 May 2024 21:33:02 +0000
ROA not after:            Fri 02 May 2025 21:38:02 +0000
asID:                     262481
IP address blocks:        170.245.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7d:50:08:09:e7:6b:cd:7d:b9:1d:b3:a5:13:49:30:b5:32:72:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:33:02 2024 GMT
            Not After : May  2 21:38:02 2025 GMT
        Subject: CN=4FA63ACF65672737B293AE0F03E60FB4B04CCED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:38:be:b7:e3:29:42:55:99:16:d5:38:ae:1b:
                    eb:4a:5d:e8:6c:17:d6:c1:6c:56:53:99:7c:89:c8:
                    8d:95:c1:cb:ac:02:23:6f:c5:02:44:2c:65:fd:d1:
                    d9:1a:d2:28:8f:0f:78:a2:06:9d:56:1a:32:ec:81:
                    4b:86:bb:6d:99:e3:09:96:16:51:10:58:53:44:d7:
                    83:ef:03:62:df:8f:2a:e0:ca:0f:81:0d:4a:72:ed:
                    a0:dc:13:b8:05:5b:95:81:fc:af:1c:a5:11:7a:4b:
                    aa:00:ab:5a:d2:ed:1b:6d:ac:51:96:22:77:1b:7d:
                    a1:43:06:55:8a:d6:76:5c:43:46:5b:47:62:26:61:
                    bb:00:10:46:aa:ff:a6:84:d2:b3:4e:90:67:96:8a:
                    f2:a8:12:8e:fd:96:cd:4e:03:e9:35:a1:3a:70:ae:
                    00:67:ae:12:4b:5d:b4:d5:d0:f1:45:bf:e0:0c:c0:
                    66:e7:ac:71:aa:0d:26:61:f0:95:0d:21:df:7c:b0:
                    31:ac:fe:3e:08:8e:3a:79:83:43:e4:f5:07:e7:0b:
                    ab:76:63:6f:4a:04:15:c0:26:da:0a:7c:da:1c:a4:
                    5f:20:51:84:a3:71:cf:3a:6b:57:ac:70:75:0b:72:
                    41:c5:09:91:da:59:6e:8a:ee:38:a6:46:4c:db:19:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A6:3A:CF:65:67:27:37:B2:93:AE:0F:03:E6:0F:B4:B0:4C:CE:D0
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3234352e31322e302f32322d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:69:bc:ce:70:df:bf:78:37:58:f1:96:6d:94:f6:c5:c5:5d:
         e4:17:04:54:8c:55:88:d0:84:fe:cf:23:e8:6c:a1:9b:75:01:
         94:99:53:50:60:4b:c8:a1:92:ab:7d:9a:c1:a7:73:9f:ed:76:
         a9:ca:e7:8a:88:2d:ec:19:46:25:25:e5:f5:3c:19:63:30:11:
         a1:26:83:12:b8:d5:6a:a2:4b:4b:28:c0:3c:f7:fc:13:53:1c:
         dc:75:67:2e:88:49:29:a8:26:27:bd:f3:c4:57:d2:33:77:20:
         26:8c:ca:ca:cd:f3:e1:87:9e:96:5d:df:55:2e:2f:b7:e0:89:
         5c:7b:93:6b:61:09:15:9d:f9:d2:fd:7c:02:38:61:e6:51:48:
         cb:3e:7d:83:ad:2f:02:2a:9d:96:f6:ee:02:26:cb:f7:20:d6:
         ea:40:2b:ec:98:c3:56:6f:d6:d7:7b:4d:2b:ab:07:7f:80:32:
         eb:d6:a9:5e:c5:be:d1:c4:bd:bb:95:21:e7:98:09:17:92:c0:
         c8:c5:5f:21:2a:20:5c:a3:be:a6:ac:05:1b:49:9e:7f:35:46:
         1e:84:fa:03:e6:51:b9:9e:f9:28:fa:2e:15:b4:19:1c:10:31:
         a7:11:60:11:0e:51:bc:67:7b:dc:91:bd:b4:cd:fa:71:d2:ef:
         15:a4:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:42:49 2025 by rpki-client