Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32322d3232203d3e203532363031.roa
File:                     3137372e3132342e37322e302f32322d3232203d3e203532363031.roa (raw, json)
Hash identifier:          r/4yoLsGI32gxva4LlwKJF3J2yK4A56ZzyK1TtSHo1g=
Subject key identifier:   A7:D0:A3:B7:14:02:EF:6B:A3:B6:B2:F9:1E:52:89:A7:04:9C:3D:25
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       76D1E9ED9A4D5D6926837BA815BF2E5682BADD9F
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32322d3232203d3e203532363031.roa
Signing time:             Tue 03 Dec 2024 18:42:38 +0000
ROA not before:           Tue 03 Dec 2024 18:37:38 +0000
ROA not after:            Tue 02 Dec 2025 18:42:38 +0000
asID:                     52601
IP address blocks:        177.124.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d1:e9:ed:9a:4d:5d:69:26:83:7b:a8:15:bf:2e:56:82:ba:dd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:37:38 2024 GMT
            Not After : Dec  2 18:42:38 2025 GMT
        Subject: CN=A7D0A3B71402EF6BA3B6B2F91E5289A7049C3D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:cc:4b:6c:26:22:da:9b:c4:c0:80:95:d0:
                    89:82:24:0a:89:65:3b:9a:34:4c:dc:0b:44:71:c3:
                    4d:92:19:a4:6c:ea:e4:ec:ea:f2:d8:82:b9:47:a1:
                    17:c5:a1:6d:89:ed:7c:d3:8f:33:65:b0:b1:e3:f3:
                    f9:41:43:b4:9d:b4:f2:fa:36:ce:e2:3a:1c:aa:95:
                    48:ee:96:7b:8e:4e:c4:af:28:01:3a:5f:e5:f4:41:
                    fa:e7:3c:92:18:33:e9:18:55:83:d0:ed:2c:7f:e6:
                    16:36:1e:68:0b:d0:2d:c3:c2:e7:16:2d:d0:23:f9:
                    fb:69:10:ad:29:a1:68:ce:61:b5:cf:79:cb:3c:ff:
                    25:05:65:21:b8:cd:cb:61:f7:59:b8:dd:d7:4c:ea:
                    6c:f5:b4:c9:06:d3:ec:8c:8c:8b:b8:a6:d4:fc:86:
                    a7:f4:38:02:4d:d1:c6:1b:fe:d5:be:7c:6d:41:cb:
                    15:5e:c6:db:1f:17:2a:20:74:bd:87:d6:b1:d3:95:
                    cb:21:97:69:54:0e:18:c4:fe:16:63:67:fe:cc:8e:
                    f0:93:1e:46:0e:36:b1:03:0b:3b:28:a8:fa:8a:65:
                    e5:cd:c1:f3:10:8d:ac:df:98:0d:8a:f0:50:9f:d3:
                    5f:93:3d:f3:15:d1:20:72:92:3f:07:da:a1:95:0f:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D0:A3:B7:14:02:EF:6B:A3:B6:B2:F9:1E:52:89:A7:04:9C:3D:25
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32322d3232203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:b0:30:fe:3f:74:26:19:e8:ae:70:09:4e:de:7b:6f:97:9f:
         91:3b:39:28:6e:83:b5:72:88:25:48:b8:33:81:fd:2c:83:6f:
         f9:59:a4:9e:c8:ef:bb:f5:1a:0e:42:06:7f:d4:5f:e8:8f:38:
         d1:4c:af:55:d4:81:7d:66:2e:7d:1f:04:fb:59:bf:e5:f4:5a:
         06:b6:22:b3:17:7f:5b:a6:07:52:38:66:6a:e3:85:97:ac:23:
         17:d6:33:6c:b0:83:c6:3b:12:02:7f:2b:84:28:73:d2:0e:a4:
         5f:bf:84:2d:d1:3b:9c:13:a9:67:5d:d5:7b:e9:49:f3:aa:6b:
         68:cc:c8:a1:80:93:0c:f4:09:f6:9f:2b:f4:38:b6:0e:ff:46:
         28:60:60:ba:67:38:0f:f5:f1:d9:49:31:fc:c3:da:02:f3:84:
         51:f0:67:58:a5:4a:f5:e8:fc:3a:63:8a:6a:3f:a0:d2:64:a4:
         53:f2:4b:46:90:94:0b:e7:b4:3f:25:0a:78:d8:cf:f1:4f:f4:
         1e:02:99:09:47:46:4f:23:6d:9e:f5:47:26:cd:29:4b:ba:88:
         98:4b:9b:dd:ef:41:eb:d5:18:b4:1a:03:29:2c:7d:36:63:d1:
         2b:fe:73:9b:b2:6e:80:dd:f2:f3:4d:c4:9e:07:27:26:86:32:
         52:1f:2f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:32:12 2025 by rpki-client