Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138392e3131332e38302e302f32302d3234203d3e203238323131.roa
File:                     3138392e3131332e38302e302f32302d3234203d3e203238323131.roa (raw, json)
Hash identifier:          lSdA1Zz894BIAVrik3WwwDcjp61vGgFV+aLaLQGHkAk=
Subject key identifier:   24:8E:56:88:02:A4:B9:2B:62:8D:86:DA:F5:C7:71:FC:A1:D8:87:00
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       750FE34437620B93C23203E6EAB57AB931037696
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138392e3131332e38302e302f32302d3234203d3e203238323131.roa
Signing time:             Fri 03 May 2024 21:18:29 +0000
ROA not before:           Fri 03 May 2024 21:13:29 +0000
ROA not after:            Fri 02 May 2025 21:18:29 +0000
asID:                     28211
IP address blocks:        189.113.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0f:e3:44:37:62:0b:93:c2:32:03:e6:ea:b5:7a:b9:31:03:76:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:13:29 2024 GMT
            Not After : May  2 21:18:29 2025 GMT
        Subject: CN=248E568802A4B92B628D86DAF5C771FCA1D88700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:85:47:ce:24:38:04:fb:c2:89:11:13:2b:
                    83:d2:50:65:57:b8:f4:fe:91:e5:f8:eb:f0:8f:06:
                    92:c6:f7:31:cf:9a:df:53:18:9d:e3:71:2c:82:24:
                    a8:36:ab:1c:af:0f:a8:8a:b6:4d:bb:9e:6b:a7:80:
                    b2:4f:a8:f2:ae:a3:c8:e9:e7:13:7e:3c:a7:bf:81:
                    42:2f:5b:7c:60:3d:ec:12:a6:45:d8:b9:95:c2:a9:
                    48:93:c4:b2:ea:6f:08:8e:2f:6e:ef:d4:73:3e:d2:
                    61:28:00:76:d0:00:31:72:e3:f3:99:64:0e:a4:bc:
                    bd:8f:70:ee:87:43:f1:a1:04:f1:d0:e4:d7:2f:04:
                    dc:94:d6:b6:11:b0:00:58:5a:df:54:e4:e7:15:90:
                    89:45:16:8a:0b:20:a3:50:44:60:9a:f2:e7:1a:bf:
                    1c:12:88:72:16:d0:75:06:d2:bf:3d:50:e3:cd:47:
                    f0:90:23:e6:ad:94:2a:31:ab:99:00:b9:e2:da:e4:
                    fa:c5:43:c7:8b:b9:8a:d6:94:e1:88:17:41:a0:3e:
                    90:40:94:ed:21:fb:93:21:1f:72:2e:40:42:c8:bc:
                    6b:eb:e3:3a:9a:08:10:8b:e9:62:46:af:e8:9f:84:
                    c8:08:ad:bd:a7:c6:b9:c4:bf:f7:da:36:a9:24:cb:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8E:56:88:02:A4:B9:2B:62:8D:86:DA:F5:C7:71:FC:A1:D8:87:00
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138392e3131332e38302e302f32302d3234203d3e203238323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:71:68:49:98:e3:30:fe:b1:9b:fa:e1:43:10:05:0a:ae:d3:
         b3:1e:3f:1c:d9:5e:59:11:73:1f:f1:46:99:35:90:35:0a:48:
         5c:97:1e:4b:87:5f:d4:88:d4:31:e7:91:4d:26:02:57:4e:60:
         96:93:44:aa:18:61:19:95:d7:aa:70:fa:a8:e0:66:8e:93:4a:
         9c:4e:e5:42:9e:3c:ad:02:92:0e:c5:5f:3d:5b:b8:93:27:0d:
         aa:59:47:67:67:ab:85:02:97:a6:d3:e1:28:5b:26:d1:a1:5e:
         30:a7:aa:83:ae:9c:84:4f:c0:67:f5:10:25:72:d5:d5:41:24:
         8a:50:df:9c:83:d9:5d:97:96:1b:ef:0e:0f:c2:61:e8:88:11:
         e7:e0:f8:11:2b:a0:88:d1:a5:37:91:59:ee:85:72:32:12:5e:
         cd:63:09:d6:e0:a8:13:54:1c:dd:d5:86:19:3f:59:1a:27:5c:
         0b:83:fc:3e:33:47:be:b9:6d:c6:2f:fe:af:22:ac:be:05:32:
         a7:21:23:ca:0e:d8:5a:e3:49:31:cb:ee:83:6b:3c:8f:96:e1:
         33:53:3d:17:d0:67:99:10:66:df:6d:af:73:d9:83:dc:4b:ff:
         b2:02:a7:7f:ba:ab:74:80:9d:86:58:2c:d9:27:75:e8:1b:67:
         60:71:2e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:11 2025 by rpki-client