Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/3137392e3132342e31372e302f32342d3234203d3e20323633363131.roa
File:                     3137392e3132342e31372e302f32342d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          B3VkLUWrgPIRHdngoigDA8WoarF3gk0TH7PURAatOaU=
Subject key identifier:   72:25:BE:AA:A5:E4:01:34:42:BD:90:72:5E:66:84:43:DE:8E:4A:6F
Certificate issuer:       /CN=37986A525E192162B3C4FE78AC849E117C37DE98
Certificate serial:       7425C03739C0FBD2915541D88B2CCD6032CEE5B1
Authority key identifier: 37:98:6A:52:5E:19:21:62:B3:C4:FE:78:AC:84:9E:11:7C:37:DE:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37986A525E192162B3C4FE78AC849E117C37DE98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/3137392e3132342e31372e302f32342d3234203d3e20323633363131.roa
Signing time:             Tue 02 Aug 2022 18:36:13 +0000
ROA not before:           Tue 02 Aug 2022 18:31:13 +0000
ROA not after:            Tue 01 Aug 2023 18:36:13 +0000
asID:                     263611
IP address blocks:        179.124.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:25:c0:37:39:c0:fb:d2:91:55:41:d8:8b:2c:cd:60:32:ce:e5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37986A525E192162B3C4FE78AC849E117C37DE98
        Validity
            Not Before: Aug  2 18:31:13 2022 GMT
            Not After : Aug  1 18:36:13 2023 GMT
        Subject: CN=7225BEAAA5E4013442BD90725E668443DE8E4A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:91:2e:07:24:41:18:75:59:7a:a8:2a:90:
                    eb:b2:30:ca:f1:76:db:2d:bc:60:d3:ca:8a:81:ea:
                    7c:e6:20:79:b2:3b:f3:fd:5b:38:6a:50:97:eb:46:
                    72:af:b6:48:ed:3a:a0:03:5d:95:d1:71:f3:a0:19:
                    a7:c1:fe:65:6f:70:3a:e6:50:fc:52:aa:e7:1d:ee:
                    56:ee:f3:27:eb:80:ed:25:81:0d:59:96:fa:6c:d3:
                    79:2a:0f:ed:52:2a:cf:19:9e:59:87:ab:d9:d3:93:
                    c3:43:8c:5f:7d:b5:4a:00:79:3e:4a:21:c9:00:a5:
                    4d:d3:17:cf:48:1d:e5:7d:5c:74:e3:57:9c:de:9e:
                    af:06:bb:fc:26:ae:59:c6:f3:97:62:38:24:35:07:
                    32:49:8c:fd:2c:62:f3:96:18:cc:5d:5d:b4:2e:fc:
                    7e:f3:d3:1a:2b:db:f3:09:26:b6:97:b0:e2:8d:28:
                    43:46:39:cd:8c:0b:b5:ce:44:43:43:22:91:74:9e:
                    37:52:13:c8:14:58:47:32:42:8f:12:26:31:97:70:
                    36:bf:ef:d7:32:d4:5f:cb:c1:82:96:95:cd:b2:f6:
                    bf:ef:8e:00:04:eb:a6:1f:78:02:2a:5a:45:ae:83:
                    6f:fe:e2:73:7c:be:57:9f:eb:6f:71:a0:a6:05:8e:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:25:BE:AA:A5:E4:01:34:42:BD:90:72:5E:66:84:43:DE:8E:4A:6F
            X509v3 Authority Key Identifier:
                keyid:37:98:6A:52:5E:19:21:62:B3:C4:FE:78:AC:84:9E:11:7C:37:DE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/37986A525E192162B3C4FE78AC849E117C37DE98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37986A525E192162B3C4FE78AC849E117C37DE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/3137392e3132342e31372e302f32342d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:40:b7:9c:10:6c:10:87:2d:da:83:a7:c3:41:9d:f8:fd:aa:
         05:18:00:87:72:53:d6:66:0d:11:6c:6a:52:04:7d:89:14:02:
         8d:54:3e:44:42:43:5c:59:29:62:52:5e:9c:23:54:22:a7:88:
         a9:72:dd:db:51:21:65:e2:c5:56:a5:f8:8c:c2:bd:50:59:c3:
         58:81:8f:fb:3e:47:52:6b:e1:21:05:c6:56:af:b8:a7:a2:1c:
         64:fb:67:71:34:f3:a9:70:d5:74:e7:0b:cc:27:d6:7c:38:33:
         bc:67:d4:d4:ea:6f:60:56:7e:b5:03:16:ca:0f:ef:1a:f0:df:
         33:fd:83:cc:62:94:a4:5c:c6:cc:cf:c8:14:d0:1f:c3:ac:6a:
         87:a6:86:46:6e:c8:27:33:a8:fa:bb:5f:9c:d4:65:d8:bc:94:
         94:4b:38:96:45:75:af:d0:82:12:d5:54:16:cd:f1:fb:f7:79:
         c4:db:ee:71:84:b8:d8:50:35:04:3f:b1:0e:08:de:60:c7:07:
         7b:9b:36:b6:20:2c:0f:f3:fb:50:12:ee:c2:66:4f:51:fe:e0:
         8c:d7:29:59:15:b6:71:5c:f0:47:fc:11:4d:56:a9:56:eb:b7:
         d1:06:52:b3:d3:90:f9:ca:c7:8e:e6:0c:29:d2:5c:fd:19:4e:
         a7:11:5b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:28 2025 by rpki-client