Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37342e302f32332d3233203d3e203532363031.roa
File:                     3137372e3132342e37342e302f32332d3233203d3e203532363031.roa (raw, json)
Hash identifier:          lwusilxbA9lBIGwlvi4ASBkIS1gKDPTfdOUnsHjHFNY=
Subject key identifier:   F4:71:C5:1B:31:1F:BB:09:4B:F0:7A:CB:02:08:E0:BB:E7:7A:E1:54
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       13E8ABF386ED5BA15F9ECE4BEDB7152DB41CA0BC
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37342e302f32332d3233203d3e203532363031.roa
Signing time:             Tue 03 Dec 2024 18:42:39 +0000
ROA not before:           Tue 03 Dec 2024 18:37:39 +0000
ROA not after:            Tue 02 Dec 2025 18:42:39 +0000
asID:                     52601
IP address blocks:        177.124.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e8:ab:f3:86:ed:5b:a1:5f:9e:ce:4b:ed:b7:15:2d:b4:1c:a0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:37:39 2024 GMT
            Not After : Dec  2 18:42:39 2025 GMT
        Subject: CN=F471C51B311FBB094BF07ACB0208E0BBE77AE154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:39:48:1f:2c:27:b5:6e:48:06:2e:5d:78:7c:
                    ad:f2:14:70:51:d4:85:2b:d5:96:5c:ad:fe:8d:5c:
                    39:2e:09:2f:d1:67:40:36:b1:d1:27:6f:1e:19:e6:
                    e3:de:a4:fd:b9:67:68:64:36:4c:b1:73:2a:81:68:
                    90:ea:9b:33:3a:41:ea:de:6f:71:86:a4:eb:b5:9b:
                    53:3b:74:47:ce:cb:91:1f:8a:5f:48:b8:d5:ed:5c:
                    98:8f:4b:69:33:f0:6c:11:24:7b:81:ef:44:c2:11:
                    79:1b:df:03:ee:5f:d6:85:4b:cd:05:98:a2:8d:9f:
                    2c:77:92:95:37:7b:29:a7:20:be:a0:4d:24:51:92:
                    26:d2:77:e6:b8:17:92:1e:07:e1:a9:9d:7f:50:07:
                    c9:bf:33:70:8f:63:60:23:5d:68:59:aa:75:2f:e9:
                    cf:34:2f:73:5b:2b:f6:e2:94:55:26:2b:f9:76:9c:
                    32:fb:37:46:51:03:4f:17:24:bf:eb:9e:c4:14:e2:
                    6a:70:d8:83:98:2f:65:86:47:09:b6:12:ad:3e:fa:
                    29:9a:aa:37:6d:15:d8:ed:36:3c:75:1b:a3:3f:3a:
                    02:ee:a9:1d:60:ef:65:5a:2e:65:d0:64:d6:a3:3d:
                    62:28:98:8c:21:22:3b:ca:78:31:e0:77:6a:1c:0f:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:71:C5:1B:31:1F:BB:09:4B:F0:7A:CB:02:08:E0:BB:E7:7A:E1:54
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37342e302f32332d3233203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:12:e5:3a:17:df:66:1c:c6:9b:d2:23:a5:cf:9a:6a:28:7e:
         5b:7e:d9:38:e8:23:f1:bd:76:32:d5:a6:ee:56:3c:f1:12:d6:
         f6:49:74:33:7e:96:7b:6b:10:04:b2:c4:38:03:2a:db:c4:ee:
         cc:db:17:8c:c0:02:ad:fd:71:84:a4:c4:fd:3f:45:cc:ff:2c:
         99:ba:09:83:52:ed:21:f0:a3:6d:c6:11:75:fc:55:bb:bf:e1:
         30:6e:a6:61:97:51:5a:73:04:0a:7a:cc:e0:f8:6c:5f:35:40:
         fd:30:53:d6:31:68:e8:36:6a:52:6d:e3:de:d1:67:9c:5a:d8:
         54:e7:4a:a1:59:ec:d8:7d:1c:22:17:a1:84:62:82:07:75:00:
         e2:a2:81:5d:b1:11:c8:ac:65:8d:8d:1a:10:b5:6a:70:4a:32:
         8d:cd:7b:e7:81:d0:72:85:c2:f0:b6:7c:4f:ba:5e:be:1f:e5:
         1f:f0:20:9e:8c:7c:99:c0:e3:20:af:b1:64:3c:ee:e3:c8:1d:
         1b:d7:71:31:1c:3d:74:85:4a:9b:29:ec:64:3f:d8:15:61:2e:
         09:a9:17:95:6f:c3:0e:c4:dd:e9:e3:b4:fa:33:67:c0:53:59:
         c8:2f:3f:e9:34:a0:fe:54:4e:48:4c:5d:3d:04:e8:1e:f1:99:
         55:e0:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:04:10 2025 by rpki-client