Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138362e3233322e34382e302f32322d3234203d3e203533313834.roa
File:                     3138362e3233322e34382e302f32322d3234203d3e203533313834.roa (raw, json)
Hash identifier:          guX8xC0BOV9hxwFWIl0d3PfO/tv4biLlpWQJkhOpxAc=
Subject key identifier:   F9:6D:C7:EE:31:0B:2B:49:62:B5:4F:3C:C9:0E:A2:18:CC:20:05:E8
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       6DF1FAA0377B9195D6B80338075919ADE58B2E4E
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138362e3233322e34382e302f32322d3234203d3e203533313834.roa
Signing time:             Fri 03 May 2024 21:24:57 +0000
ROA not before:           Fri 03 May 2024 21:19:57 +0000
ROA not after:            Fri 02 May 2025 21:24:57 +0000
asID:                     53184
IP address blocks:        186.232.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f1:fa:a0:37:7b:91:95:d6:b8:03:38:07:59:19:ad:e5:8b:2e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:19:57 2024 GMT
            Not After : May  2 21:24:57 2025 GMT
        Subject: CN=F96DC7EE310B2B4962B54F3CC90EA218CC2005E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:65:fa:61:51:3e:1d:ca:5c:6f:b5:ed:56:
                    37:de:5f:84:c7:0a:6b:97:b3:18:88:c0:ac:e7:6a:
                    ac:29:29:7f:17:16:25:18:44:8e:4e:ea:21:aa:e3:
                    19:f9:cc:4a:ba:ff:85:38:9c:25:70:df:bb:3e:ac:
                    4c:bb:de:b0:60:4a:d8:66:1d:97:e2:35:41:09:09:
                    be:4f:b4:f8:3f:4f:ce:00:ad:19:d6:9a:ff:69:e9:
                    2f:df:2b:bf:b3:83:65:ff:b7:fb:cc:30:34:85:ff:
                    63:80:3d:5b:ba:30:62:96:d9:be:52:7c:af:ca:72:
                    c1:ad:b3:c0:dc:26:04:65:f7:e9:d3:05:e0:fd:b4:
                    51:50:02:35:c6:86:ee:b6:bb:13:46:b3:e9:47:b7:
                    87:e6:fa:ab:91:13:9b:d8:ff:d2:9f:ef:6b:12:1a:
                    7e:d4:5c:29:cd:83:a1:f6:56:8f:7d:41:76:6d:08:
                    5c:c9:a2:c1:6c:7d:b2:50:6c:d7:82:9f:9d:23:ca:
                    bf:cd:85:92:df:53:17:c2:9f:6c:e0:ae:d4:1c:a6:
                    47:48:2c:53:b6:c2:b5:e2:db:a1:b4:cc:33:51:bc:
                    60:de:98:85:af:bf:12:11:dd:76:62:81:21:25:e5:
                    d3:e4:59:19:1a:4b:a0:9c:9a:f0:e9:30:c4:fa:3f:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6D:C7:EE:31:0B:2B:49:62:B5:4F:3C:C9:0E:A2:18:CC:20:05:E8
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138362e3233322e34382e302f32322d3234203d3e203533313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:de:e3:19:33:64:d5:02:71:cc:8b:ae:0c:c7:be:41:ad:6a:
         c0:43:bd:f4:c0:67:f8:17:3e:2e:45:46:56:93:db:34:c7:2c:
         a8:f2:54:da:6f:70:66:57:77:f8:8f:45:d5:18:ef:7d:df:f2:
         a8:b9:a4:66:c7:4d:8f:ed:78:01:a3:09:04:d0:20:7e:18:b2:
         18:11:08:d4:f6:4a:4b:a9:de:a1:9c:a2:5b:7a:b3:5e:a5:ac:
         2f:d2:7e:87:ad:70:70:b7:73:4a:db:33:31:8f:8b:59:de:63:
         60:62:ad:fd:c4:45:20:e4:12:56:c5:e2:6e:38:ad:76:f3:b2:
         58:c9:39:2b:25:cc:7b:60:e6:23:f0:b4:2f:ba:2b:57:f5:5e:
         49:fc:63:92:57:57:05:5e:15:e7:28:59:13:ea:a2:87:9c:d7:
         9e:74:28:41:1d:6e:ae:d1:f0:37:2b:fb:17:0b:3e:f6:54:07:
         77:b4:27:13:d0:bd:5d:a3:12:eb:06:e8:1e:2f:8b:20:53:37:
         d5:11:c6:10:2a:a0:21:c3:fb:f3:ae:7d:55:75:fa:2a:9c:12:
         85:17:e6:16:5f:64:60:c3:75:b9:0e:b0:66:2e:f7:62:a7:89:
         66:33:a0:a6:0b:46:7e:c7:bb:95:dd:28:96:70:2e:32:d3:44:
         cd:37:cb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:26:17 2025 by rpki-client