Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32312d3231203d3e203532363835.roa
File:                     3137372e37332e32342e302f32312d3231203d3e203532363835.roa (raw, json)
Hash identifier:          ZHTwpNxboLQ2aCwXmdAurbVSITSRJwbjsWHNRcYRyhM=
Subject key identifier:   DB:EB:BA:89:18:F9:BE:85:47:F0:FF:26:44:77:08:8A:AB:DE:9E:A1
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       3028A307CC13BE55316028E914A66ECB520E8A39
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32312d3231203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:43 +0000
ROA not before:           Wed 05 Mar 2025 20:54:43 +0000
ROA not after:            Wed 04 Mar 2026 20:59:43 +0000
asID:                     52685
IP address blocks:        177.73.24.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:28:a3:07:cc:13:be:55:31:60:28:e9:14:a6:6e:cb:52:0e:8a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:43 2025 GMT
            Not After : Mar  4 20:59:43 2026 GMT
        Subject: CN=DBEBBA8918F9BE8547F0FF264477088AABDE9EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:68:5c:c6:c7:0d:a0:72:eb:7c:19:b2:f9:
                    5e:b4:0e:c5:43:a0:b8:9c:a3:34:95:4f:29:30:f8:
                    0e:82:25:4c:e5:2a:20:19:73:29:ad:ed:23:e5:be:
                    03:a9:4f:8b:ec:f2:c9:f7:89:98:5b:65:09:bf:cb:
                    6f:8c:2e:68:cc:20:9f:dc:a7:b2:87:e9:e2:90:86:
                    12:4d:0b:f9:93:51:83:a2:1f:8d:08:bd:c0:f9:e5:
                    a1:0c:6a:84:30:28:97:f1:ee:39:e4:87:76:5b:28:
                    83:37:31:12:c8:d6:40:be:7b:c3:0f:62:3f:50:e0:
                    fc:1d:ca:2d:1e:06:83:4a:65:9a:0b:5b:b1:dc:d2:
                    b7:b8:b7:26:ae:cb:0b:e5:4f:19:c1:65:83:4f:c7:
                    8d:34:60:7b:4e:5f:a8:cb:bd:94:30:8c:f8:28:4f:
                    3d:8b:23:c9:d4:3e:72:90:2e:4b:80:03:d3:81:a6:
                    0c:9c:16:17:d7:a2:f0:6b:f7:6f:51:53:46:be:59:
                    1f:59:bc:36:98:8f:00:05:25:27:e6:11:e1:5b:ef:
                    b6:45:83:57:56:3a:cb:19:8d:60:31:c7:44:58:32:
                    f3:f4:fd:e5:86:71:c0:03:97:d7:c5:7c:fa:79:64:
                    7c:6c:31:a6:fe:8b:a0:bc:6d:56:74:0d:a7:72:fa:
                    ff:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EB:BA:89:18:F9:BE:85:47:F0:FF:26:44:77:08:8A:AB:DE:9E:A1
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32312d3231203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:b7:bd:b5:c0:2a:88:8d:7a:86:a6:1e:6d:79:a7:fb:f7:c4:
         a5:73:5b:8d:d0:e8:da:9c:ab:0f:ef:ab:08:a2:9c:42:55:90:
         a3:4e:51:60:92:28:e9:5c:13:ae:72:73:05:d6:6a:1f:a9:1f:
         83:05:8e:22:dd:9f:ad:f9:1a:31:a3:20:fc:94:22:03:a3:e5:
         0d:7d:39:fb:ff:be:6d:b7:98:25:1d:55:81:ad:18:e9:ae:5b:
         3c:3e:5c:0f:a2:2d:ee:ed:65:70:fb:fe:16:0b:35:ee:3f:2c:
         ce:07:d9:a6:ac:8e:69:57:17:64:60:6f:15:6e:a4:14:72:f0:
         59:16:6a:14:23:06:ba:34:a8:82:e7:19:d8:61:18:a1:f8:52:
         eb:f8:3b:e5:5e:dc:07:f8:bb:b7:7e:70:cb:42:f9:66:03:e9:
         7d:d8:63:a7:e8:52:51:69:4a:0a:ee:13:7b:6f:d3:12:e6:20:
         5e:ce:b5:15:59:52:e8:7f:06:81:0c:1e:94:33:82:14:ba:f6:
         9b:67:81:24:08:8a:9a:ef:57:c5:4e:17:3e:e2:5a:6a:e8:f1:
         b2:86:ee:f9:83:e2:c8:70:69:07:79:09:87:c9:e1:81:95:0c:
         d3:d5:0b:27:2b:db:14:9e:ab:87:42:d7:7a:6c:b6:9b:6d:5c:
         b5:a9:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:35 2025 by rpki-client