Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          zCy6L3MjekfkKzPruemsRMLqg4jf4qbNzQlOxMOtdVM=
Subject key identifier:   00:1F:42:86:CF:1F:27:D4:91:79:2B:3F:9F:F9:9C:13:9C:0D:2C:15
Certificate issuer:       /CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
Certificate serial:       33201E2F3AA81ED448F7A65608B7ABFF55584B
Authority key identifier: 10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa
Signing time:             Thu 16 Nov 2023 15:28:57 +0000
ROA not before:           Thu 16 Nov 2023 15:23:57 +0000
ROA not after:            Thu 14 Nov 2024 15:28:57 +0000
asID:                     263652
IP address blocks:        177.74.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:20:1e:2f:3a:a8:1e:d4:48:f7:a6:56:08:b7:ab:ff:55:58:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Validity
            Not Before: Nov 16 15:23:57 2023 GMT
            Not After : Nov 14 15:28:57 2024 GMT
        Subject: CN=001F4286CF1F27D491792B3F9FF99C139C0D2C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:59:72:2b:d2:e0:88:d0:03:26:f3:fa:63:
                    56:b8:28:63:74:b7:1c:32:9d:55:87:25:db:ec:b2:
                    d4:ce:81:a0:31:a6:f4:4a:6a:1f:c2:be:4c:bc:83:
                    17:55:db:68:d3:e8:0c:c6:d2:3b:c0:00:1f:b2:03:
                    46:b9:69:e3:b8:15:78:a0:2a:83:fa:f8:ad:81:61:
                    ee:ce:2a:a5:7e:36:23:55:7d:90:ce:a7:25:00:26:
                    0e:d3:2c:66:a3:aa:f4:52:2c:58:27:e7:7a:f6:5b:
                    a1:f3:8d:6e:5d:2c:b9:8e:e6:1a:7e:ee:81:44:f0:
                    7e:74:8a:ff:39:15:5e:9a:7f:06:f0:87:90:98:5a:
                    90:c0:ed:33:20:74:5a:6f:ec:3d:ba:25:d2:52:75:
                    aa:e4:53:21:9e:5f:5a:56:cf:90:81:69:80:a8:80:
                    dc:41:21:9c:7b:0a:05:72:1a:6e:04:18:00:fe:45:
                    c2:5e:cb:cf:4e:f0:fa:69:96:1b:c3:ae:f5:98:d4:
                    f0:15:34:f7:2f:da:ef:01:c3:d2:a6:de:8f:48:a1:
                    b4:87:36:45:76:e3:8e:fc:e7:31:c0:f0:32:1a:41:
                    e7:8e:a5:d6:e7:e9:4b:69:24:7a:91:4c:22:c6:86:
                    f8:d9:e4:23:19:bb:e3:d7:12:51:48:3f:5d:0b:e6:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1F:42:86:CF:1F:27:D4:91:79:2B:3F:9F:F9:9C:13:9C:0D:2C:15
            X509v3 Authority Key Identifier:
                keyid:10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:17:cb:49:74:43:2b:d0:43:cc:d2:0a:2e:17:dd:2c:ad:a0:
         fc:52:32:7d:f5:9a:1f:79:a7:f5:22:d6:3c:ec:c7:fe:ac:0a:
         3c:97:c7:79:67:3d:c7:b6:fc:41:31:d9:b1:f0:13:ba:c7:86:
         44:e9:77:84:ba:68:4f:7e:7b:8a:98:0c:9e:30:93:37:d2:29:
         37:8f:c0:b4:7b:79:5f:ff:bc:89:5b:65:02:1b:c0:0f:1e:f3:
         03:fc:2c:aa:92:03:58:4b:58:36:f0:ca:f8:39:d0:66:a4:ec:
         a2:4d:fc:ce:4e:f8:45:d5:82:93:d5:10:b2:04:6a:24:6d:77:
         83:73:13:12:c0:e9:05:01:35:34:9f:f0:61:07:ac:e9:85:71:
         52:9a:37:0b:44:3c:35:9d:73:fc:25:5a:74:5e:7e:75:f6:5b:
         f2:db:55:7f:bd:0e:d8:b1:67:74:27:f5:19:9e:39:8b:b2:a2:
         7e:1c:35:f7:ed:96:89:e7:94:92:0a:ee:db:d4:8b:db:92:f9:
         33:80:fb:15:bf:ce:d7:56:b0:96:50:0c:f3:42:ca:8f:fe:8d:
         34:d6:6c:c9:c2:23:cc:82:22:03:3e:b0:86:4b:5c:f9:4a:02:
         41:e3:f8:f8:cc:75:0a:17:10:6a:dd:b9:a3:c2:48:cc:21:a9:
         25:13:8f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:07 2025 by rpki-client