Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232342e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3232342e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          a56eKlMNT5e0NaTN/yDqmMy/2w6X4MPnm66KvbB3ECo=
Subject key identifier:   B1:B7:56:20:C1:90:17:11:5E:8D:FC:5A:1E:62:A8:81:35:6E:AC:0C
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       765D7E0D4B83675FDE34820BA8711F43549E8DD9
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232342e302f32332d3233203d3e20323633363532.roa
Signing time:             Tue 03 Dec 2024 18:42:38 +0000
ROA not before:           Tue 03 Dec 2024 18:37:38 +0000
ROA not after:            Tue 02 Dec 2025 18:42:38 +0000
asID:                     263652
IP address blocks:        177.74.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5d:7e:0d:4b:83:67:5f:de:34:82:0b:a8:71:1f:43:54:9e:8d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:37:38 2024 GMT
            Not After : Dec  2 18:42:38 2025 GMT
        Subject: CN=B1B75620C19017115E8DFC5A1E62A881356EAC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:9d:03:d7:0b:e3:9e:70:cd:78:8c:14:2e:
                    a3:66:17:c3:01:2f:e9:9b:c0:7c:8e:2a:9c:c1:dd:
                    dd:0b:07:ed:a0:2b:a8:02:ad:15:1c:b8:5c:bc:19:
                    f9:c6:cf:24:97:e2:3b:97:83:4a:e9:36:13:76:32:
                    bb:ca:14:55:93:b3:8a:fe:5a:3d:4f:89:9d:95:03:
                    55:77:b9:3c:03:c3:09:c5:01:bc:65:08:c0:a1:56:
                    21:56:f2:e8:cf:aa:8a:81:6e:dc:a0:9a:b8:3b:27:
                    1e:74:86:2f:31:29:29:c5:86:bd:f4:36:5e:63:1d:
                    d1:5a:87:c3:6c:53:2f:47:44:7b:a9:52:b4:7d:0f:
                    f0:71:c7:67:7f:7f:2e:8b:01:8f:b7:e2:f9:d4:98:
                    aa:55:d3:9f:19:53:fc:08:43:1d:19:ea:2c:ea:2e:
                    f9:e2:ae:ab:6c:38:90:05:48:19:71:50:f2:30:7f:
                    d0:12:35:a9:90:6b:ac:90:f9:e5:c7:0f:b4:a2:19:
                    d6:99:cf:81:96:a9:d8:60:b8:07:1c:c6:d5:20:80:
                    fa:df:e3:70:93:9e:04:c8:52:6a:cd:b2:56:e4:7e:
                    7c:2f:2c:bf:7b:da:8f:a6:cf:f6:3b:30:2f:5a:5e:
                    47:7e:e4:4a:55:2b:ae:c7:ca:0a:4d:cf:17:a6:c3:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B7:56:20:C1:90:17:11:5E:8D:FC:5A:1E:62:A8:81:35:6E:AC:0C
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232342e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:58:8b:5d:5b:87:20:7d:42:fe:b8:8a:72:57:c9:c9:5d:33:
         ff:23:0f:b3:2a:ae:41:2c:a1:e5:5c:bd:6e:b7:17:c5:06:99:
         3d:78:b5:b0:91:28:58:f9:07:3d:45:4c:02:4c:7e:3b:76:91:
         7d:c1:73:7b:31:c9:1d:28:b7:52:af:45:07:f7:3f:0a:ec:3c:
         36:42:fb:08:70:76:68:fe:e8:f1:69:7b:02:b9:69:94:8a:a6:
         c9:77:61:0d:7b:bc:fb:ec:d5:a0:3d:ee:e0:8c:61:88:b8:fa:
         89:6a:cb:51:a4:e8:ff:ca:3d:91:80:20:df:c1:6e:1f:09:cf:
         c7:50:05:2a:24:7c:74:3b:04:24:74:26:39:01:57:56:ee:f7:
         a6:d2:be:b6:00:3b:1b:c5:5c:57:fb:d4:42:1d:9e:24:0c:f4:
         3a:6f:04:5f:eb:84:12:93:5d:e8:d8:da:f7:26:9f:4d:09:85:
         e6:53:3b:dc:b5:e7:26:ef:35:2b:7c:73:7a:c7:f9:f7:42:b9:
         e7:c2:5c:ae:48:a3:00:1c:84:28:f4:08:e8:17:a2:8a:45:93:
         44:25:d5:62:42:c0:53:2c:a2:9d:bd:eb:4b:96:a2:ac:a0:8c:
         1f:5e:68:5b:9b:8b:17:cf:4a:72:34:44:e8:35:53:be:b4:df:
         7c:06:8f:fb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdl1+DUuDZ1/eNIILqHEfQ1SejdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGM0U5OTE0OTQ0NkNFOTA4Q0RBMTY3OEZEOTE4MENE
NDAyMEQxNjAeFw0yNDEyMDMxODM3MzhaFw0yNTEyMDIxODQyMzhaMDMxMTAvBgNV
BAMTKEIxQjc1NjIwQzE5MDE3MTE1RThERkM1QTFFNjJBODgxMzU2RUFDMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdxJ0D1wvjnnDNeIwULqNmF8MB
L+mbwHyOKpzB3d0LB+2gK6gCrRUcuFy8GfnGzySX4juXg0rpNhN2MrvKFFWTs4r+
Wj1PiZ2VA1V3uTwDwwnFAbxlCMChViFW8ujPqoqBbtygmrg7Jx50hi8xKSnFhr30
Nl5jHdFah8NsUy9HRHupUrR9D/Bxx2d/fy6LAY+34vnUmKpV058ZU/wIQx0Z6izq
LvnirqtsOJAFSBlxUPIwf9ASNamQa6yQ+eXHD7SiGdaZz4GWqdhguAccxtUggPrf
43CTngTIUmrNslbkfnwvLL972o+mz/Y7MC9aXkd+5EpVK67HygpNzxemw3t7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsbdWIMGQFxFejfxaHmKogTVurAwwHwYDVR0j
BBgwFoAUlvPpkUlEbOkIzaFnj9kYDNQCDRYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVyZkg5b1FMUXp6c1pRUDJRcmE1TnhKTmhrTnljZkMxTlFnclpNU1hC
VmgvMC85NkYzRTk5MTQ5NDQ2Q0U5MDhDREExNjc4RkQ5MTgwQ0Q0MDIwRDE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2RjNFOTkxNDk0NDZDRTkw
OENEQTE2NzhGRDkxODBDRDQwMjBEMTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1cmZIOW9RTFF6enNaUVAyUXJhNU54Sk5oa055Y2ZDMU5RZ3JaTVNYQlZoLzAv
MzEzNzM3MmUzNzM0MmUzMjMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxSuAwDQYJKoZIhvcNAQELBQADggEBAJhYi11b
hyB9Qv64inJXycldM/8jD7MqrkEsoeVcvW63F8UGmT14tbCRKFj5Bz1FTAJMfjt2
kX3Bc3sxyR0ot1KvRQf3PwrsPDZC+whwdmj+6PFpewK5aZSKpsl3YQ17vPvs1aA9
7uCMYYi4+olqy1Gk6P/KPZGAIN/Bbh8Jz8dQBSokfHQ7BCR0JjkBV1bu96bSvrYA
OxvFXFf71EIdniQM9DpvBF/rhBKTXejY2vcmn00JheZTO9y15ybvNSt8c3rH+fdC
uefCXK5IowAchCj0COgXoopFk0Ql1WJCwFMsop2960uWoqygjB9eaFubixfPSnI0
ROg1U76033wGj/s=
-----END CERTIFICATE-----
Generated at Thu May 15 15:03:01 2025 by rpki-client