Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3232382e302f32322d3232203d3e20323633363532.roa
File:                     3137372e37342e3232382e302f32322d3232203d3e20323633363532.roa (raw, json)
Hash identifier:          WZgfyHsyqc2nGAc8KOsyZ+Mc1BK+KkyWkg177E+lB50=
Subject key identifier:   50:6C:78:61:4A:7A:B6:28:CB:F2:E9:A1:D2:FB:2F:49:1D:64:21:3F
Certificate issuer:       /CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
Certificate serial:       5A88CE993CC45D22CD7CF90EB753A65C5E01225D
Authority key identifier: 10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3232382e302f32322d3232203d3e20323633363532.roa
Signing time:             Thu 16 Nov 2023 15:28:57 +0000
ROA not before:           Thu 16 Nov 2023 15:23:57 +0000
ROA not after:            Thu 14 Nov 2024 15:28:57 +0000
asID:                     263652
IP address blocks:        177.74.228.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:88:ce:99:3c:c4:5d:22:cd:7c:f9:0e:b7:53:a6:5c:5e:01:22:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Validity
            Not Before: Nov 16 15:23:57 2023 GMT
            Not After : Nov 14 15:28:57 2024 GMT
        Subject: CN=506C78614A7AB628CBF2E9A1D2FB2F491D64213F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:3f:c2:da:5d:9b:90:0a:dc:17:38:de:a6:
                    c2:d8:2c:d9:1f:21:d4:48:cf:4c:8f:4e:f4:ff:fc:
                    b9:16:13:39:32:a6:0e:88:af:37:88:37:03:85:64:
                    91:ce:04:83:09:6a:57:c0:99:db:7a:87:95:97:63:
                    f1:5c:df:b4:47:6b:6b:ed:f1:12:01:1b:5c:b5:bf:
                    4b:88:8d:68:7a:4f:54:ae:58:25:d9:dc:1b:18:0e:
                    a9:74:ba:da:9a:f3:4f:71:24:66:2c:3a:f4:9c:74:
                    0b:a0:5b:ab:5d:00:a9:92:06:2f:66:00:67:0e:a8:
                    e2:f8:90:83:36:cd:91:0e:fa:4e:1b:8b:f3:96:9d:
                    ec:04:61:c6:82:9e:49:ad:be:0b:23:dc:33:d0:fb:
                    de:dc:38:eb:96:b9:8a:ae:aa:ba:16:a3:db:97:96:
                    f2:d9:d2:08:a5:18:ee:0e:62:20:30:89:02:90:be:
                    1b:ad:cd:d5:8a:a5:ea:63:a9:f9:2f:66:41:aa:0d:
                    e9:31:3d:90:05:4f:72:fb:e1:5f:fe:45:ce:f3:3b:
                    37:38:30:d9:9a:78:b3:84:ed:95:83:45:23:e5:5a:
                    4d:f8:31:0e:50:68:36:38:03:0b:aa:21:58:35:1d:
                    f2:6c:78:0f:2b:f5:1e:8a:32:00:9f:5d:ba:89:72:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6C:78:61:4A:7A:B6:28:CB:F2:E9:A1:D2:FB:2F:49:1D:64:21:3F
            X509v3 Authority Key Identifier:
                keyid:10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3232382e302f32322d3232203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:12:7c:3b:c4:19:5c:f2:52:22:b9:bb:10:0c:b4:a3:3d:85:
         07:38:6c:4c:c7:f0:dd:90:97:e8:35:a1:93:90:25:29:de:a1:
         fd:e1:5f:c7:1b:b6:3f:e1:a7:3b:1a:d9:3b:3e:ae:6d:53:e1:
         be:19:49:1f:2e:bb:f7:37:40:9f:ed:ab:f5:3f:35:f0:22:8b:
         5e:f2:62:d2:c1:8b:2c:5d:ab:4d:12:98:b1:78:2e:35:a2:06:
         47:f1:02:ad:55:90:5a:ce:e6:0b:e4:fd:cc:ae:b6:94:7b:c6:
         17:c1:71:71:00:dd:cb:de:4c:5b:ae:3e:c0:80:3c:c0:77:30:
         95:65:c0:2b:c5:60:b3:c2:a0:20:51:e1:e6:19:c6:95:22:36:
         36:6e:1b:31:27:12:33:c2:45:71:1b:e4:47:a0:cc:20:0a:66:
         5f:6f:dc:42:cf:f1:ca:e4:a1:2c:30:8d:8c:35:c9:a1:62:9f:
         d5:7c:f5:df:fd:b0:f7:d8:ea:91:84:35:e8:e3:5f:b3:46:7b:
         1a:5f:dd:04:46:fd:14:0d:06:ec:97:65:2d:76:39:fd:62:d6:
         d4:61:ff:6e:53:8f:c6:f6:aa:fb:cd:ac:0b:a7:fc:c1:a6:66:
         0b:d9:fc:44:2c:a5:f1:b4:6b:fc:d6:89:f2:7f:45:53:bc:88:
         2d:70:96:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:47 2025 by rpki-client