Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32332d3233203d3e203532363835.roa
File:                     3137372e37332e32342e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          wTWppbJ4DQHxaySR2YolYkcX9hxkzLO2IOOmHM7CdsI=
Subject key identifier:   ED:11:FA:C1:BF:57:3E:6B:13:7D:43:F9:02:F6:5B:05:2D:15:9F:FA
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       62CA68B73A20802037FFE9F5B59812FAC8F88B6B
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32332d3233203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:39 +0000
ROA not before:           Wed 05 Mar 2025 20:54:39 +0000
ROA not after:            Wed 04 Mar 2026 20:59:39 +0000
asID:                     52685
IP address blocks:        177.73.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ca:68:b7:3a:20:80:20:37:ff:e9:f5:b5:98:12:fa:c8:f8:8b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:39 2025 GMT
            Not After : Mar  4 20:59:39 2026 GMT
        Subject: CN=ED11FAC1BF573E6B137D43F902F65B052D159FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:0c:14:0c:f9:d4:ef:3e:fb:8a:3f:43:de:
                    f0:75:c7:ae:33:bf:3b:35:f4:33:90:6c:4c:5c:75:
                    16:60:bc:6f:69:e1:10:c3:f0:d9:2c:fc:6d:97:3d:
                    9d:3d:69:60:35:c2:5a:c4:c6:81:36:61:89:65:06:
                    78:fd:e3:02:42:d3:3f:d9:07:ad:75:50:e0:26:73:
                    fa:ce:28:77:67:69:d0:d1:77:0a:25:1c:f4:fd:36:
                    e9:03:a4:41:f0:62:da:6c:19:4e:f5:8f:fb:d1:ef:
                    03:be:8f:b5:cf:56:08:97:3f:df:64:6c:6b:0b:32:
                    fd:70:61:16:75:8a:ca:32:25:63:29:69:35:17:b6:
                    78:3b:68:e4:37:26:92:51:5c:b5:1c:62:46:33:28:
                    b5:e0:b4:ce:8c:5b:bb:09:64:82:0f:28:1d:f1:3e:
                    0b:45:42:cd:06:50:fa:8e:87:25:4a:17:c0:10:96:
                    fa:1d:bd:bc:26:e3:29:27:0c:8e:f4:01:bf:2e:3a:
                    6c:eb:82:d3:71:61:e5:f3:08:75:38:0d:29:ba:72:
                    98:6c:b5:2f:b1:d5:4b:84:27:85:0a:6a:04:e0:2b:
                    ee:ee:41:cf:50:08:bd:5d:6c:00:29:72:77:6b:ad:
                    0f:00:7c:80:c9:d0:a1:6d:e0:eb:f9:a0:e0:4f:26:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:11:FA:C1:BF:57:3E:6B:13:7D:43:F9:02:F6:5B:05:2D:15:9F:FA
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:5b:46:81:ba:b0:91:10:ec:6b:0c:6a:13:3e:7c:f2:0a:11:
         1c:04:12:e1:0e:bf:33:cf:70:50:a2:d4:60:e3:41:ae:96:99:
         a6:90:0c:3c:16:e7:13:8f:70:e9:e4:1b:f9:0d:58:1a:4b:91:
         76:78:f2:fe:fa:91:5d:3e:92:24:4a:9f:1c:91:8f:de:41:d3:
         d3:2e:f9:f6:dc:6f:7d:9c:bc:da:f9:af:66:29:41:f4:ce:d5:
         6b:50:48:ca:d1:02:b3:72:6b:89:33:9f:82:6c:a1:42:ce:3e:
         fb:db:5f:70:1e:f2:f7:c1:7c:fe:8f:2e:53:97:ce:57:f8:9d:
         81:df:c5:15:12:68:70:4a:db:ed:dc:e8:b1:6e:57:bd:c4:09:
         4c:46:73:50:28:58:c9:8c:9b:a9:d3:b3:0a:b7:77:43:e1:17:
         bf:ca:e6:17:64:c1:4d:46:b5:79:04:66:d7:67:52:36:ba:4c:
         64:5f:da:1f:ec:ea:1c:70:ac:fc:2c:6c:78:66:16:36:ce:1f:
         72:1a:a3:20:49:31:a9:b5:da:ce:75:e4:86:a9:0c:9c:68:25:
         42:d3:17:b9:b8:b8:df:4a:f0:9a:9d:68:66:cb:28:bf:6a:72:
         fb:91:12:b7:8f:28:df:6f:46:57:81:33:90:b5:43:b1:d2:11:
         16:93:0b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:42 2025 by rpki-client