Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/652VfG9jGRLVrMoaiKmMwhcVK1sRzZxnMBknfL5jPF2k/0/3137372e36362e3134342e302f32322d3234203d3e203533303031.roa
File:                     3137372e36362e3134342e302f32322d3234203d3e203533303031.roa (raw, json)
Hash identifier:          6157S2pl1ICzfAtDIji1sh/7wK8l/aV0dSOKj0bGHB8=
Subject key identifier:   AD:7B:E2:6C:69:2E:DC:DF:3E:D3:B4:79:FF:27:BF:9F:86:BE:00:98
Certificate issuer:       /CN=739B24C63577F08B1F33A7F6F36AE3ACB7D0C5D2
Certificate serial:       343E8196968F3B48AC58B9323033B95CC0601899
Authority key identifier: 73:9B:24:C6:35:77:F0:8B:1F:33:A7:F6:F3:6A:E3:AC:B7:D0:C5:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739B24C63577F08B1F33A7F6F36AE3ACB7D0C5D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/652VfG9jGRLVrMoaiKmMwhcVK1sRzZxnMBknfL5jPF2k/0/3137372e36362e3134342e302f32322d3234203d3e203533303031.roa
Signing time:             Fri 09 Feb 2024 16:00:00 +0000
ROA not before:           Fri 09 Feb 2024 15:55:00 +0000
ROA not after:            Fri 07 Feb 2025 16:00:00 +0000
asID:                     53001
IP address blocks:        177.66.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3e:81:96:96:8f:3b:48:ac:58:b9:32:30:33:b9:5c:c0:60:18:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739B24C63577F08B1F33A7F6F36AE3ACB7D0C5D2
        Validity
            Not Before: Feb  9 15:55:00 2024 GMT
            Not After : Feb  7 16:00:00 2025 GMT
        Subject: CN=AD7BE26C692EDCDF3ED3B479FF27BF9F86BE0098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:08:84:9f:8f:08:04:eb:e8:99:31:de:12:f6:
                    9a:3d:84:d0:5f:d4:3b:b8:81:17:53:96:69:92:25:
                    31:20:4e:1e:e2:73:e9:5e:f6:f1:60:31:9c:8a:66:
                    48:f3:9f:be:f8:33:0d:86:4b:fe:15:1f:e9:db:76:
                    b4:04:e7:0e:2a:3d:39:ca:3d:ea:bb:59:e9:e8:71:
                    95:68:33:8a:25:a1:0e:c2:61:b8:06:a7:bd:f6:59:
                    99:b2:fe:f5:03:d1:f7:49:63:1c:4e:a9:b0:e4:df:
                    80:4d:5d:20:88:58:9c:75:24:3c:a5:ed:e0:22:4a:
                    65:10:ae:94:f4:33:5b:b8:12:ae:49:f0:e1:d8:aa:
                    c1:49:56:8a:5b:9b:91:b8:1f:a4:d8:e5:ba:af:5d:
                    e2:91:8d:10:70:77:a1:14:21:7a:d2:ae:13:63:74:
                    3f:22:8b:75:5f:70:87:03:6b:c8:d3:77:fe:d5:9e:
                    7f:6e:61:59:59:97:f6:9e:ca:60:3b:4a:d5:b8:7c:
                    79:26:18:19:0c:cd:18:75:4d:d5:2d:fa:6a:c0:f5:
                    2f:f4:d4:de:62:ee:d9:3f:ba:5b:89:2a:48:fe:11:
                    e5:91:d3:99:88:42:1f:84:6e:9d:ed:90:cc:4a:0f:
                    93:9b:e4:a5:52:29:a9:c6:a7:4b:8a:9f:36:66:ae:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7B:E2:6C:69:2E:DC:DF:3E:D3:B4:79:FF:27:BF:9F:86:BE:00:98
            X509v3 Authority Key Identifier:
                keyid:73:9B:24:C6:35:77:F0:8B:1F:33:A7:F6:F3:6A:E3:AC:B7:D0:C5:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/652VfG9jGRLVrMoaiKmMwhcVK1sRzZxnMBknfL5jPF2k/0/739B24C63577F08B1F33A7F6F36AE3ACB7D0C5D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739B24C63577F08B1F33A7F6F36AE3ACB7D0C5D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/652VfG9jGRLVrMoaiKmMwhcVK1sRzZxnMBknfL5jPF2k/0/3137372e36362e3134342e302f32322d3234203d3e203533303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:b2:71:cc:f0:4b:06:97:57:ae:ce:a5:7d:01:fd:8a:dc:64:
         9e:0e:b4:40:7d:9b:4a:6f:99:b9:b7:62:be:06:23:20:69:94:
         4d:0f:f4:1b:ef:6a:ba:10:45:d3:df:d9:70:27:db:0b:aa:7b:
         78:dd:de:44:0b:d4:8c:72:dc:04:3c:79:e5:4e:f0:87:5c:61:
         a2:af:ce:46:32:2c:65:c4:79:a3:48:dc:2c:69:13:d1:ac:63:
         2b:7b:b8:26:d1:8f:2c:1f:32:0b:10:51:b6:b0:92:86:a4:04:
         55:23:64:a0:8e:7b:7a:56:85:30:a3:ce:3e:e1:87:be:1c:95:
         1c:36:61:a6:5e:70:1d:56:b5:da:40:3b:ab:26:26:9c:6e:db:
         e3:8b:7a:20:3d:62:d2:34:0c:6d:ba:ca:5c:61:eb:bb:69:0c:
         f8:a1:2d:2b:3b:89:88:68:fc:27:ac:1a:f2:cb:fe:b2:28:a9:
         82:69:57:4d:88:98:55:24:08:83:3b:58:91:6b:c4:62:da:bf:
         f3:f1:35:70:6b:2c:25:d2:b1:13:08:a6:b5:10:80:ea:1f:21:
         90:3d:c2:85:e6:3d:f0:1b:86:b8:b6:1e:58:3c:32:df:72:38:
         62:10:ff:88:c3:e8:a8:6f:51:f3:3c:60:80:0a:4f:f3:dd:52:
         f7:36:ac:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:42:14 2025 by rpki-client