Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          6JPQAPXZitF/bqPyEkPtTm1Zsp4tT8Pu6W7S7Tw0xEU=
Subject key identifier:   2B:A0:B1:42:BD:00:54:C3:21:65:22:B6:B7:3E:99:EF:1A:3D:59:CC
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       4D8A34C908A85DD4A8225F7F67D3EE9DB83C6EDA
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa
Signing time:             Tue 03 Dec 2024 18:42:37 +0000
ROA not before:           Tue 03 Dec 2024 18:37:37 +0000
ROA not after:            Tue 02 Dec 2025 18:42:37 +0000
asID:                     263652
IP address blocks:        177.74.238.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8a:34:c9:08:a8:5d:d4:a8:22:5f:7f:67:d3:ee:9d:b8:3c:6e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:37:37 2024 GMT
            Not After : Dec  2 18:42:37 2025 GMT
        Subject: CN=2BA0B142BD0054C3216522B6B73E99EF1A3D59CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:98:88:67:c9:24:b4:ae:94:a5:57:f1:75:
                    c7:f5:ae:9b:1f:3a:0a:2a:94:73:dc:66:68:b7:25:
                    90:99:c2:80:9a:5d:a3:a5:b7:6c:40:12:85:a7:ff:
                    be:41:fb:5e:53:f4:14:61:91:d4:11:e4:7f:1f:a0:
                    7f:db:af:7e:27:ea:0c:b0:ba:4e:c4:0c:17:7b:0e:
                    ce:c1:6b:87:63:d0:0a:a0:5e:71:04:e6:f5:58:5a:
                    86:65:97:26:0d:c9:d6:e1:f5:bc:5d:fc:d8:cd:23:
                    1a:66:5f:df:48:ce:39:98:80:c3:78:69:ff:02:ac:
                    a7:f9:11:07:cc:2c:d8:4b:b4:55:c8:6b:1f:cb:50:
                    4c:82:2f:14:75:64:1d:32:90:6d:54:5b:c1:36:ce:
                    56:19:5f:31:fd:d4:f9:d0:2a:f7:f5:5c:17:14:a2:
                    0b:a6:18:fe:9f:66:57:6b:40:ae:7f:37:a9:24:75:
                    2b:26:47:25:e0:20:9f:79:fd:6c:b4:59:4f:9e:e1:
                    86:ae:68:b4:16:17:f3:c7:60:0f:ad:78:e7:a0:51:
                    d1:68:b6:06:10:a4:2e:a4:2d:e7:ce:e3:c3:2b:c1:
                    9a:ac:3b:65:b9:66:9d:f7:ea:2a:34:6e:7f:c4:ef:
                    0d:93:b6:ee:cc:86:63:50:84:da:fb:97:7a:58:87:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A0:B1:42:BD:00:54:C3:21:65:22:B6:B7:3E:99:EF:1A:3D:59:CC
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:b0:be:74:9c:c1:17:79:6d:47:9f:6c:c2:ce:b1:07:65:78:
         7f:0f:4b:8d:0b:da:ab:aa:cc:cd:b9:43:d0:69:5f:a7:a0:0b:
         c2:1d:5f:f0:42:e9:00:d8:f7:51:00:fe:8d:47:09:d7:2d:97:
         47:cf:df:ab:23:1f:9d:96:08:bd:b3:7f:17:e2:11:13:6b:45:
         25:e4:8c:d8:21:9a:31:49:5c:9c:d0:62:ac:a5:ef:79:92:dd:
         1c:e1:96:c2:dd:dd:2f:93:f1:66:a8:b0:83:80:e6:d0:3c:33:
         a5:28:c9:93:54:62:13:68:92:f5:84:70:16:64:ba:f6:f5:53:
         2f:85:87:89:18:52:2d:24:43:d3:e6:84:70:0c:49:b6:68:7f:
         16:26:4a:c7:3b:4b:ce:43:9e:b2:98:2a:85:08:3f:b5:74:ef:
         ab:8c:76:7a:59:1d:5d:66:54:ae:39:c4:83:f9:fa:86:63:60:
         c8:ff:3d:9a:a4:99:f7:3d:24:97:f0:cb:bf:5a:e4:f1:95:04:
         0f:aa:88:36:e6:d9:24:dd:16:86:a8:3a:1d:b2:64:c9:97:eb:
         e7:45:0a:76:a6:09:aa:a8:79:51:b0:04:23:04:e5:75:22:e9:
         7f:b8:98:ab:22:b4:7d:f8:48:e0:fc:b6:45:e4:39:f2:e0:b5:
         81:0f:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:05:05 2025 by rpki-client