Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/3137372e37332e39362e302f32312d3234203d3e20323632353637.roa
File:                     3137372e37332e39362e302f32312d3234203d3e20323632353637.roa (raw, json)
Hash identifier:          0DDvovuPytBbXjj+InAo1882Ri3zLX3NeQx1/Nujyu8=
Subject key identifier:   B4:18:38:99:A9:B5:4A:CC:9A:05:0D:9B:39:54:7F:2B:EE:F3:F0:C5
Certificate issuer:       /CN=EA41EA4B343A73C6DA276C8B60D6FF873F791A82
Certificate serial:       47AA1BE157B81653CD6F07D85AE5D1A9A61DAC69
Authority key identifier: EA:41:EA:4B:34:3A:73:C6:DA:27:6C:8B:60:D6:FF:87:3F:79:1A:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/3137372e37332e39362e302f32312d3234203d3e20323632353637.roa
Signing time:             Wed 18 Dec 2024 02:10:54 +0000
ROA not before:           Wed 18 Dec 2024 02:05:54 +0000
ROA not after:            Wed 17 Dec 2025 02:10:54 +0000
asID:                     262567
IP address blocks:        177.73.96.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:aa:1b:e1:57:b8:16:53:cd:6f:07:d8:5a:e5:d1:a9:a6:1d:ac:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA41EA4B343A73C6DA276C8B60D6FF873F791A82
        Validity
            Not Before: Dec 18 02:05:54 2024 GMT
            Not After : Dec 17 02:10:54 2025 GMT
        Subject: CN=B4183899A9B54ACC9A050D9B39547F2BEEF3F0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e4:8d:56:d9:89:aa:d5:56:2c:3b:d5:39:bf:
                    90:90:bf:7a:aa:b1:f2:e3:8a:e7:62:ad:03:1e:30:
                    5d:97:9e:19:aa:23:3b:ac:fd:c2:f7:ae:8a:5d:70:
                    db:c9:59:d4:87:46:77:07:0f:a7:b7:19:db:0a:c3:
                    b7:ea:7d:21:69:b2:ef:75:70:29:cc:49:c3:b0:9d:
                    b6:51:69:4c:d3:a1:5f:28:6f:b0:24:be:ec:91:23:
                    f2:4f:22:96:25:d3:46:33:f5:f5:e8:54:8b:c8:94:
                    6e:74:4d:82:be:7d:2e:c5:22:e3:32:58:8d:21:a7:
                    4f:95:bf:8f:37:d7:51:c5:18:54:e9:90:6d:b5:9d:
                    f7:93:20:9f:db:83:be:b3:a3:68:f6:d8:84:df:12:
                    33:30:45:51:00:95:5d:24:38:76:e7:ab:1a:54:8e:
                    c9:82:2a:93:df:5a:d7:00:ba:35:f8:73:69:6a:2a:
                    55:a7:33:ec:1a:0d:f9:69:b7:e7:a9:78:0a:d1:a5:
                    a9:6f:7e:db:ad:33:63:71:1a:84:43:45:a0:70:4d:
                    12:f6:95:3c:2d:e2:27:ca:87:7b:b4:7d:92:9b:f1:
                    e6:0f:e3:2a:c2:99:d7:a9:39:6e:dc:69:65:57:ac:
                    50:d1:4b:ac:a7:c1:0a:d2:7d:fe:68:3b:95:88:f3:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:18:38:99:A9:B5:4A:CC:9A:05:0D:9B:39:54:7F:2B:EE:F3:F0:C5
            X509v3 Authority Key Identifier:
                keyid:EA:41:EA:4B:34:3A:73:C6:DA:27:6C:8B:60:D6:FF:87:3F:79:1A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/3137372e37332e39362e302f32312d3234203d3e20323632353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:63:e1:74:64:ef:48:ca:0f:64:75:95:59:b6:86:8b:d2:c8:
         af:33:4b:d9:8c:0a:40:43:e8:0e:f4:3d:98:5d:d1:8a:43:e6:
         7d:cd:21:73:70:ec:18:20:07:fa:c8:7c:29:0c:10:82:ee:8e:
         dd:52:6a:4e:a6:90:de:b5:93:dc:f6:19:d9:d9:17:40:d4:8e:
         af:2f:fa:9f:2b:6e:c3:16:03:28:ca:5c:8e:cb:64:b6:f0:82:
         f8:1f:d2:8d:0d:65:9a:92:68:8d:d5:c5:77:b7:7d:c2:cd:43:
         8b:fb:6b:01:b5:b4:ea:79:24:48:14:c4:18:e0:4f:df:a4:2e:
         42:e9:66:db:32:83:dd:1c:ad:be:36:a9:cd:2a:7a:7e:7e:a9:
         c4:da:be:87:ce:65:c3:37:95:01:15:4f:68:d7:a3:10:25:5f:
         72:e0:66:b7:54:6e:ef:e5:a8:d4:dd:f7:28:36:4c:8b:f5:38:
         6c:da:82:60:87:a4:a6:0c:ea:08:c2:a0:34:ea:45:23:75:8f:
         36:4c:b2:bb:29:86:6a:4b:b7:ce:41:5b:6d:cf:c0:e6:e4:70:
         44:fe:a0:57:ed:15:b2:81:a4:d5:c7:70:c6:31:5e:d9:36:78:
         c2:bb:a2:9a:cd:d8:7f:d4:3a:7a:9e:a3:51:03:8f:43:31:16:
         41:5c:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:06:30 2025 by rpki-client