Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39332e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e39332e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          qugiXg3BgwBFmzdTiteqrOLHjKYcP3EGNYMgH9RozGY=
Subject key identifier:   57:53:B9:00:73:98:EA:37:60:8A:CE:EC:98:F1:B1:AF:4B:B6:EF:26
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       34BAAAC00744E8D99B3DD97549CE1DD72C71BC7F
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39332e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:04 +0000
ROA not before:           Wed 05 Mar 2025 23:55:04 +0000
ROA not after:            Thu 05 Mar 2026 00:00:04 +0000
asID:                     52653
IP address blocks:        177.221.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ba:aa:c0:07:44:e8:d9:9b:3d:d9:75:49:ce:1d:d7:2c:71:bc:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:04 2025 GMT
            Not After : Mar  5 00:00:04 2026 GMT
        Subject: CN=5753B9007398EA37608ACEEC98F1B1AF4BB6EF26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:cd:a4:69:0e:0f:16:a6:70:da:74:c4:a9:
                    e1:c5:5c:a3:31:f1:49:74:d5:33:53:b5:5d:99:28:
                    8d:49:86:6c:01:71:b6:ad:9b:1c:e5:40:95:bf:cc:
                    60:1e:73:a3:1e:6d:97:c6:90:ff:69:da:dd:73:09:
                    95:8d:80:45:fc:fa:ba:81:db:4e:fb:42:8a:c1:f7:
                    ce:18:5b:4d:73:14:15:32:58:6b:0b:cc:8b:07:7d:
                    c2:2c:40:73:5e:95:7b:93:56:00:83:15:23:a9:ad:
                    95:63:91:3e:4b:14:c8:85:b9:89:f9:21:71:2a:84:
                    99:b1:32:b0:c8:f5:1c:a8:48:52:d8:d3:58:4b:cf:
                    4f:4a:2f:f0:89:8c:fe:5b:76:10:b2:f8:ed:59:e4:
                    95:94:dd:9d:e3:5e:98:e9:6c:a2:d9:28:59:94:86:
                    55:00:c5:60:63:53:16:9e:e7:bf:18:9b:0d:5e:fd:
                    00:88:9e:b1:2b:a8:da:91:85:10:9a:08:34:f4:75:
                    d6:4d:ab:84:41:76:f3:1a:73:0b:82:92:05:e2:0f:
                    a5:75:c3:fe:24:f2:1e:b1:6d:f4:86:3b:ac:d7:10:
                    f3:d9:bb:d6:22:ce:70:7b:dc:ef:46:cc:98:67:d3:
                    cd:d0:16:21:b7:ac:d4:24:9c:5c:8f:06:94:b3:33:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:53:B9:00:73:98:EA:37:60:8A:CE:EC:98:F1:B1:AF:4B:B6:EF:26
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39332e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:e4:a1:4c:1c:03:9a:e4:66:a8:90:28:78:06:c4:fd:d4:22:
         be:f7:73:ad:bf:5d:94:4e:60:c7:03:05:bb:f5:77:40:b3:7d:
         9f:49:92:32:84:4e:84:34:5f:cf:bf:52:b0:42:a4:3d:97:ac:
         e1:8c:19:40:0d:6b:4e:2e:1e:aa:0c:03:bc:ad:50:94:6d:a9:
         f4:b1:e8:a7:13:fa:31:c6:e7:07:6f:6f:09:11:e8:48:94:85:
         3d:92:c6:a1:93:6f:e7:16:d3:b5:e8:5b:e8:39:3a:5c:71:80:
         b7:df:73:7a:bd:52:19:4b:de:3a:5a:ed:fe:6e:87:d8:9b:b6:
         ba:e2:a0:9f:45:4f:5b:d5:d3:f4:9f:67:98:a3:3b:ec:c3:2b:
         6e:be:8e:18:49:1f:14:e0:e1:9a:37:55:d3:14:87:e4:08:50:
         ef:62:6e:e4:59:d9:df:9d:05:2b:6b:87:0f:86:f0:ef:21:ff:
         09:26:34:09:85:1d:19:1b:44:fc:66:7f:39:8d:eb:9d:9d:03:
         33:ed:9f:52:93:5b:50:bd:31:56:f6:a0:63:8d:7f:bc:a9:10:
         89:8c:7b:da:bb:30:3d:13:8e:e1:ac:8d:4f:e0:93:23:23:59:
         d0:96:2a:91:6f:1b:32:23:07:da:0a:f4:de:88:08:62:c7:27:
         2b:ae:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:10:30 2025 by rpki-client