Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/3137372e3132342e37322e302f32322d3332203d3e203532363031.roa
File:                     3137372e3132342e37322e302f32322d3332203d3e203532363031.roa (raw, json)
Hash identifier:          lvGrG7Yp3oMfP7jz7GoYASzMuHYDUkceopG+SWKVaDo=
Subject key identifier:   EE:E3:7D:9B:C5:D7:E7:CA:6F:83:CE:38:E4:71:67:08:06:36:41:95
Certificate issuer:       /CN=FA4740D751D7330E7FE81FB75023D113A8850CD3
Certificate serial:       237D9BB3CADE993D3F7443464ACE83597B15F095
Authority key identifier: FA:47:40:D7:51:D7:33:0E:7F:E8:1F:B7:50:23:D1:13:A8:85:0C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4740D751D7330E7FE81FB75023D113A8850CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/3137372e3132342e37322e302f32322d3332203d3e203532363031.roa
Signing time:             Wed 05 Apr 2023 18:59:44 +0000
ROA not before:           Wed 05 Apr 2023 18:54:44 +0000
ROA not after:            Wed 03 Apr 2024 18:59:44 +0000
asID:                     52601
IP address blocks:        177.124.72.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7d:9b:b3:ca:de:99:3d:3f:74:43:46:4a:ce:83:59:7b:15:f0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA4740D751D7330E7FE81FB75023D113A8850CD3
        Validity
            Not Before: Apr  5 18:54:44 2023 GMT
            Not After : Apr  3 18:59:44 2024 GMT
        Subject: CN=EEE37D9BC5D7E7CA6F83CE38E471670806364195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:48:bd:0c:58:11:96:c9:ee:32:00:a7:3f:a0:
                    08:00:6e:e2:d6:f1:4e:db:6d:3c:e1:f2:3d:f9:d4:
                    ef:0f:b2:39:54:51:c5:fc:2d:57:5c:cb:4b:02:78:
                    08:63:d7:75:dc:82:e1:85:ab:5b:db:08:12:cb:dd:
                    d9:17:83:dd:18:f0:fe:14:ff:6f:c3:60:59:cd:8e:
                    4c:60:91:ce:ef:ea:fe:bb:3a:38:79:51:9d:d4:fd:
                    b2:98:03:e5:43:77:c9:68:ae:7d:93:2f:05:ec:cb:
                    58:98:37:4f:95:70:2d:01:67:de:31:60:3e:9c:03:
                    20:d7:dd:83:83:76:f2:89:e2:e9:a6:fd:01:03:63:
                    6b:b4:e0:07:b2:e2:49:2a:95:cf:60:7d:75:a2:3e:
                    99:8c:08:36:db:06:6a:1b:04:f4:83:30:1b:6d:d4:
                    09:2e:21:79:b2:84:87:00:8a:da:f0:79:b9:00:ca:
                    21:a6:f1:67:af:47:ad:96:0e:02:71:2b:7e:e1:ba:
                    83:77:7a:2f:81:76:d3:a8:40:44:c5:20:49:ce:41:
                    6c:2b:6d:92:89:51:41:06:41:a7:11:fc:41:f2:42:
                    2f:3f:83:98:75:7b:89:10:6a:bd:38:ff:18:56:49:
                    5f:33:73:81:16:73:43:7c:38:63:bb:a0:5f:06:97:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E3:7D:9B:C5:D7:E7:CA:6F:83:CE:38:E4:71:67:08:06:36:41:95
            X509v3 Authority Key Identifier:
                keyid:FA:47:40:D7:51:D7:33:0E:7F:E8:1F:B7:50:23:D1:13:A8:85:0C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/FA4740D751D7330E7FE81FB75023D113A8850CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4740D751D7330E7FE81FB75023D113A8850CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/3137372e3132342e37322e302f32322d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:d2:63:6a:a2:d3:f3:3a:fc:48:d8:24:95:5d:ee:19:7b:
         4a:77:f5:5f:88:47:f2:fb:fd:86:05:46:c9:09:31:69:fe:e9:
         8b:9f:81:ad:c8:fe:b9:df:b9:0e:b3:4c:50:41:b3:8b:90:5b:
         71:7d:e3:c1:bf:53:e5:48:4e:14:7c:5d:60:82:35:07:2b:7a:
         fc:95:92:f6:0a:84:7e:c2:a7:b5:42:1e:18:99:73:16:c3:a2:
         4f:e8:3a:b5:bc:d3:c6:9b:10:3d:f5:37:82:69:dc:14:95:50:
         ac:43:23:4a:06:27:bd:ec:05:56:b2:ea:f1:5e:28:76:7d:ce:
         2b:da:3d:03:ac:9e:73:d9:fe:45:fa:b7:50:47:85:94:2d:4f:
         0c:0f:45:e8:ff:73:9b:d9:e8:16:dd:c3:96:cc:bc:86:33:21:
         84:ed:a4:69:de:25:c6:1b:03:0b:01:d0:d8:64:d4:ae:87:15:
         da:5f:c0:9a:68:c5:71:e4:eb:4a:a2:a3:53:97:1c:a3:b7:f9:
         f8:c0:41:b7:ac:7a:40:94:a1:ad:fc:69:15:06:54:f2:89:c9:
         9f:23:73:94:99:51:3f:e9:66:44:49:fb:3e:ea:36:83:a1:72:
         56:5e:94:02:10:7d:33:db:1f:77:78:12:13:9b:bd:42:ca:0a:
         dd:30:53:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:20:21 2025 by rpki-client