Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32322d3232203d3e20323633363532.roa
File:                     3137372e37342e3233322e302f32322d3232203d3e20323633363532.roa (raw, json)
Hash identifier:          oSvkuDHX5iEfDVXSHZx1P1eaF5PvFEHqvqtYgPSOrTQ=
Subject key identifier:   B7:20:32:E3:59:D9:79:C3:C1:B2:31:78:EE:3C:A1:63:11:65:BB:94
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       3BEFFBF55307BC27838E77147D788ABEACD32270
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32322d3232203d3e20323633363532.roa
Signing time:             Tue 03 Dec 2024 18:42:37 +0000
ROA not before:           Tue 03 Dec 2024 18:37:37 +0000
ROA not after:            Tue 02 Dec 2025 18:42:37 +0000
asID:                     263652
IP address blocks:        177.74.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ef:fb:f5:53:07:bc:27:83:8e:77:14:7d:78:8a:be:ac:d3:22:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:37:37 2024 GMT
            Not After : Dec  2 18:42:37 2025 GMT
        Subject: CN=B72032E359D979C3C1B23178EE3CA1631165BB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:97:2b:e5:a8:11:a8:b7:e2:ab:c6:be:7c:
                    9b:5f:c0:45:b4:fe:f4:1c:ac:a7:c4:35:62:33:26:
                    78:94:49:e2:d6:c8:78:d3:66:81:60:ad:fa:aa:1a:
                    c2:9b:c6:f2:de:93:8c:9d:79:83:95:d6:01:4a:a0:
                    7d:9a:d0:c6:16:f6:71:9a:9d:72:28:a2:23:36:e5:
                    17:ba:2d:45:19:b4:cf:0d:6a:47:cc:22:0c:a3:b6:
                    1a:ec:90:8b:05:20:00:75:cf:bb:ff:cc:bc:a1:a9:
                    67:3c:ba:c9:92:60:e8:73:51:85:a6:cd:93:e1:2a:
                    c2:16:28:c3:20:0b:d9:0e:a5:df:db:01:a7:d0:d4:
                    c4:68:26:da:f6:b4:9b:2c:6e:aa:43:2f:cf:58:f0:
                    db:ce:fd:9d:cb:cd:f3:ba:1d:0f:f1:cc:c5:2f:38:
                    9a:2d:b3:33:8e:1f:3c:b6:19:db:50:57:49:01:d7:
                    71:2d:03:12:2b:91:1c:57:bc:5e:32:30:eb:17:75:
                    9c:87:00:6d:ff:60:78:5b:82:55:ce:0f:73:5d:8e:
                    87:86:98:38:89:7b:d2:b0:c1:c2:20:dd:85:06:e9:
                    28:04:c5:de:87:62:d8:d9:fe:54:9d:4a:90:0e:04:
                    ef:5a:f1:51:0e:ad:ce:76:ea:ab:73:8f:e5:9d:30:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:20:32:E3:59:D9:79:C3:C1:B2:31:78:EE:3C:A1:63:11:65:BB:94
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32322d3232203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:73:30:82:54:0e:19:fe:06:46:20:d8:6d:d4:b5:22:88:
         71:1d:87:33:b8:3d:3b:d0:80:cf:d7:ca:95:78:c0:bd:d3:9b:
         ab:15:0d:c7:fa:45:4c:ce:69:b4:6a:4b:1d:33:57:b7:0f:5a:
         28:01:97:5b:1b:af:7c:0c:29:31:80:be:c6:a6:09:be:eb:e9:
         5c:10:23:6c:23:0e:cb:63:af:a6:94:76:a1:de:dd:8e:18:dc:
         38:e1:fa:3f:d3:e5:db:00:ff:10:89:d5:fb:c5:f1:49:ab:8b:
         8d:0b:95:6f:74:58:5c:9d:57:4f:3d:5e:23:7d:48:4d:30:96:
         7c:2e:fa:50:e8:bc:ba:a8:da:de:f2:98:9b:8b:4d:56:c7:15:
         44:d3:75:d8:bf:40:de:ca:35:bc:cb:5c:52:54:b4:5e:ec:24:
         84:eb:fb:df:05:48:50:d5:be:db:f2:28:e7:70:7e:75:e4:54:
         f1:44:db:f2:43:46:dc:80:dc:2c:56:39:3c:f9:23:eb:9d:28:
         4f:61:0b:f9:66:df:32:fa:7b:52:0b:f1:f2:fd:61:60:7d:a5:
         de:2d:b0:05:ef:ea:3d:44:26:f3:d2:ba:9f:66:82:b0:84:1c:
         47:6c:20:e6:04:e1:e7:96:3c:d9:2f:72:d9:23:af:0d:04:00:
         64:52:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:42 2025 by rpki-client