Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262673.roa
File:                     AS262673.roa (raw, json)
Hash identifier:          Y0vZ1NxqKzIt52UhovDf8fWV/iIgjQm8aLcI3Q15nfU=
Subject key identifier:   16:E5:E3:29:7F:F3:8B:E3:82:26:80:D1:AC:8A:9D:62:2B:9F:62:4A
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       57A382CE48B4447EE8BB6B9D5F3414641B8A0ADF
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262673.roa
Signing time:             Fri 03 May 2024 22:02:12 +0000
ROA not before:           Fri 03 May 2024 21:57:12 +0000
ROA not after:            Fri 02 May 2025 22:02:12 +0000
asID:                     262673
IP address blocks:        177.184.96.0/20 maxlen: 24
                          177.184.112.0/20 maxlen: 24
                          186.235.192.0/20 maxlen: 24
                          186.235.208.0/20 maxlen: 24
                          187.73.64.0/19 maxlen: 24
                          201.162.64.0/18 maxlen: 24
                          2804:187c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a3:82:ce:48:b4:44:7e:e8:bb:6b:9d:5f:34:14:64:1b:8a:0a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:57:12 2024 GMT
            Not After : May  2 22:02:12 2025 GMT
        Subject: CN=16E5E3297FF38BE3822680D1AC8A9D622B9F624A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:dd:e3:c9:ed:4b:72:05:aa:c8:6a:eb:ec:
                    e7:86:9a:17:63:46:0d:96:24:a6:43:dc:4c:c5:7e:
                    7b:92:68:0c:f8:0e:e5:72:0c:a3:01:b7:39:94:ef:
                    99:0e:97:e4:40:86:cd:6f:49:61:73:2c:51:88:75:
                    19:d9:b2:c1:f7:15:00:bc:1d:89:59:0e:ec:2a:4e:
                    b2:a1:e9:4e:58:83:85:b2:cd:22:e9:84:fd:12:18:
                    fd:9f:ec:d5:22:25:08:c8:48:84:29:50:65:be:80:
                    84:17:eb:6d:9d:34:cc:23:57:15:ca:96:fe:82:6e:
                    0f:ca:ef:e1:05:ff:e7:33:9f:00:87:ef:5c:42:2d:
                    1a:97:a9:46:c6:3b:cb:a1:90:03:58:24:bc:e1:bf:
                    59:51:89:74:73:e7:79:6e:89:f5:e8:60:96:7e:ec:
                    91:d0:ea:49:9f:de:7a:ca:8c:89:df:f7:6e:b3:0e:
                    3a:b5:97:7c:60:40:c8:5a:5b:cf:38:25:48:6f:c8:
                    0e:1d:c6:72:cf:bc:a8:ba:cd:7b:c8:0e:54:c9:3a:
                    92:a6:04:f8:3f:af:5d:4f:49:4c:02:32:5e:59:4f:
                    7f:87:4a:aa:8a:48:25:26:4a:56:e1:34:f1:21:95:
                    fd:47:e0:c9:20:f5:e9:4d:7c:08:c6:58:45:b4:66:
                    e2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E5:E3:29:7F:F3:8B:E3:82:26:80:D1:AC:8A:9D:62:2B:9F:62:4A
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262673.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.96.0/19
                  186.235.192.0/19
                  187.73.64.0/19
                  201.162.64.0/18
                IPv6:
                  2804:187c::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:15:b5:b1:4c:aa:b1:53:34:70:f3:db:f1:91:ed:bb:a5:ce:
         34:3b:92:1e:5b:24:dc:21:da:4d:9f:2b:97:41:d7:91:f3:7d:
         e9:80:e7:ff:90:45:26:b8:5c:77:23:a5:fc:1b:80:72:01:8e:
         6d:c1:1b:e4:e6:d0:93:e5:e1:0b:82:4b:85:6f:12:ef:3c:f3:
         ac:f4:12:ca:87:d6:6d:d7:4d:ed:9f:d6:8f:3a:bf:4b:8d:17:
         7f:38:f7:22:bb:63:56:44:91:d9:01:69:ac:24:aa:4c:d5:1e:
         06:61:50:96:ef:3f:eb:2b:4a:77:6b:57:e2:c6:54:35:c4:d5:
         22:5c:75:74:ac:67:99:76:b0:4c:55:d2:3b:24:f7:d4:42:0d:
         b1:34:85:56:93:5c:ef:c4:86:a1:1a:0b:8e:e3:e0:ee:70:b8:
         af:64:9f:d0:c6:43:43:10:02:b3:fe:b1:49:03:78:cd:f3:1e:
         a0:54:7f:8e:46:04:9f:a2:a9:0e:f7:e9:31:89:6b:0a:f9:fd:
         29:9e:f1:df:37:59:bf:6c:12:74:b7:cb:bb:fc:a5:ba:32:9e:
         62:84:59:13:98:7e:03:78:1b:7a:13:df:7d:6e:9e:bf:e8:df:
         3a:04:04:7f:a6:55:19:bc:e8:ea:6b:1c:cd:d6:9e:a8:72:bf:
         c3:6f:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org