Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          /TGQYMzpX+o9Yrdc3tIAbgKw4JDwC/x4JPYOithw+jk=
Subject key identifier:   3E:6A:D3:03:D1:25:99:93:69:44:76:12:6D:C1:9F:90:35:3D:8D:C2
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       17911B10230B9ED37E56A9DE17034EE748A2541D
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa
Signing time:             Tue 03 Dec 2024 18:42:37 +0000
ROA not before:           Tue 03 Dec 2024 18:37:37 +0000
ROA not after:            Tue 02 Dec 2025 18:42:37 +0000
asID:                     263652
IP address blocks:        177.74.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:91:1b:10:23:0b:9e:d3:7e:56:a9:de:17:03:4e:e7:48:a2:54:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:37:37 2024 GMT
            Not After : Dec  2 18:42:37 2025 GMT
        Subject: CN=3E6AD303D1259993694476126DC19F90353D8DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:43:05:c8:29:4d:d5:fb:0d:04:86:89:31:89:
                    6c:44:be:eb:ba:43:27:a8:1f:5a:36:65:e8:5b:4e:
                    91:0b:7c:87:32:14:40:9c:49:43:86:79:da:46:32:
                    90:e8:b8:d3:4c:fa:63:f9:ac:89:af:f4:c5:c6:10:
                    40:46:18:ac:46:18:05:09:47:9e:ea:77:8e:3f:2a:
                    83:3c:68:69:22:53:eb:f6:15:a7:6f:84:c7:63:9f:
                    da:bf:46:d4:32:4e:9c:f8:db:c3:2e:be:c4:d6:7c:
                    bc:8d:16:8a:b2:42:dc:ee:69:c8:20:21:17:08:0b:
                    f4:5e:4f:4c:9a:27:11:6b:27:64:f5:da:32:86:78:
                    8d:70:d4:5a:90:38:80:73:29:b4:66:b5:42:68:26:
                    7a:d8:7f:73:0b:81:08:5e:b0:9b:38:54:98:12:03:
                    8a:3c:1b:5c:5a:5c:8b:6a:af:c0:35:5e:f9:74:bf:
                    41:5c:4e:f0:12:03:f8:cb:4e:b9:c4:1b:d2:2f:82:
                    b2:0f:5d:15:b3:73:37:d0:de:3f:be:15:41:31:9e:
                    0a:d7:38:80:81:aa:27:f4:f8:e4:da:d7:e1:36:3a:
                    ef:5d:3c:23:69:62:3b:ee:8f:bd:61:56:f0:4b:ed:
                    a3:ed:ef:27:f2:c4:a0:c0:90:96:bc:fc:9d:41:b3:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6A:D3:03:D1:25:99:93:69:44:76:12:6D:C1:9F:90:35:3D:8D:C2
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:a5:56:5f:b1:59:ac:c7:27:cd:2b:c7:b8:e3:07:0c:5d:81:
         af:27:1d:fd:6e:4a:19:b8:c7:20:e5:03:7d:b2:4a:3c:1d:0d:
         c8:3b:93:e0:f9:a4:80:2a:b8:33:cf:1b:ef:ba:f5:1f:99:c6:
         ea:d3:ab:ed:3c:ba:96:bb:9e:cf:4f:cb:41:ae:f8:ab:02:b4:
         6e:b4:44:82:39:0e:67:80:1e:29:95:d8:2d:55:64:af:61:9f:
         ba:13:5e:5d:d0:87:e1:98:4f:aa:61:d6:f4:0f:28:3b:4c:0a:
         55:f4:b4:7a:73:59:0d:db:11:04:5d:dc:f5:1a:d6:09:43:22:
         6f:54:d3:d4:d8:50:3e:4a:73:61:b1:78:cd:72:5d:1e:a1:1f:
         42:9f:c9:ef:06:60:3a:4a:97:f3:65:f3:d7:c0:bf:ec:24:f3:
         37:d8:30:32:76:f2:89:27:27:90:df:b2:67:b1:ff:8a:c0:a3:
         37:16:12:89:18:56:9c:fa:56:35:8e:f4:fe:e3:07:cc:2a:b7:
         c5:d2:0c:3f:a9:c7:e6:25:48:62:2f:1e:6a:cf:f6:68:fa:e5:
         92:51:fb:e9:39:38:c5:bb:ea:75:f9:6d:50:5c:ff:5b:03:5b:
         bb:83:0e:85:8f:72:66:99:83:2a:68:e1:93:e1:88:2d:89:cb:
         e3:e1:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:58:11 2025 by rpki-client