Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e37342e3135312e302f32342d3234203d3e20323632333736.roa
File:                     3137372e37342e3135312e302f32342d3234203d3e20323632333736.roa (raw, json)
Hash identifier:          jN6voDP5T+bEV0u7qlmPEnpBXgGQaqDej9lvek3DhkA=
Subject key identifier:   13:49:2C:47:B3:28:75:09:7E:51:86:D3:8B:A0:0D:DC:FC:C8:73:C7
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       529D2CAEF279AC6764373B6FDD0C429B784676C1
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e37342e3135312e302f32342d3234203d3e20323632333736.roa
Signing time:             Tue 02 Jul 2024 14:03:47 +0000
ROA not before:           Tue 02 Jul 2024 13:58:47 +0000
ROA not after:            Tue 01 Jul 2025 14:03:47 +0000
asID:                     262376
IP address blocks:        177.74.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9d:2c:ae:f2:79:ac:67:64:37:3b:6f:dd:0c:42:9b:78:46:76:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jul  2 13:58:47 2024 GMT
            Not After : Jul  1 14:03:47 2025 GMT
        Subject: CN=13492C47B32875097E5186D38BA00DDCFCC873C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:fa:75:94:ee:fd:ff:d8:70:1c:e0:a0:ff:
                    74:75:e0:98:f6:93:c1:f4:92:dd:fb:e9:f0:2b:d9:
                    eb:63:c1:04:78:4b:15:eb:24:e9:d8:08:9e:75:70:
                    18:87:99:e6:bf:96:04:04:37:4c:97:5d:59:95:f0:
                    41:06:24:86:e4:4e:2c:93:dc:68:8b:7c:50:e7:63:
                    91:f5:50:5a:4d:a8:75:0f:2d:d5:52:3d:a0:c0:a3:
                    e8:8b:62:d4:1c:bf:2e:66:48:56:5d:11:b0:73:a7:
                    40:9d:49:a1:1d:b3:de:53:4b:15:07:ba:6a:5d:2a:
                    ba:e9:dd:e0:14:dc:4a:8a:02:14:a9:fa:dc:6a:8c:
                    e8:d3:81:69:63:ae:55:40:eb:de:be:55:82:07:b5:
                    6f:b4:f0:4d:2e:c1:90:98:a6:14:1e:73:5a:37:74:
                    2c:2e:dd:0d:86:5d:e5:05:85:6f:c6:a2:5f:1c:ec:
                    12:0e:d4:40:ae:9d:75:59:b6:1e:26:84:b4:66:79:
                    79:5c:47:ca:4e:ec:4c:fd:d3:43:9a:56:63:41:86:
                    3f:d3:08:04:d3:e6:05:9a:23:a6:48:ce:50:52:95:
                    67:ff:8b:39:2b:13:e7:20:ce:97:3d:43:b2:ac:66:
                    52:4a:ae:d9:c9:84:f6:dd:09:b7:1c:47:c7:92:c8:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:49:2C:47:B3:28:75:09:7E:51:86:D3:8B:A0:0D:DC:FC:C8:73:C7
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e37342e3135312e302f32342d3234203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:7c:9f:87:2b:d7:3d:7a:81:e0:0c:12:1e:39:e4:0d:21:
         f4:96:05:b9:1f:59:e6:12:50:96:18:5a:72:cf:bd:ce:58:bc:
         fc:a4:cb:8d:34:ab:1b:2c:ba:67:50:28:9b:29:24:0f:ce:03:
         de:13:14:d4:90:ed:f2:6b:8c:84:25:0c:7d:32:5e:df:68:b6:
         cf:f4:c8:de:fd:53:16:b6:24:33:63:5d:9b:75:81:44:4d:20:
         6a:ab:c5:29:2e:59:98:ca:2a:17:01:fd:bd:19:88:fe:1c:a8:
         71:c0:c8:d8:04:89:85:47:41:04:f8:3a:e7:9b:f9:b4:0b:08:
         87:45:f0:d7:4a:85:2d:c1:6c:59:14:2c:92:db:f0:58:a2:d7:
         5e:f3:7a:e7:d6:71:a8:29:ba:e3:0e:7f:a9:91:a0:7b:9e:09:
         e5:2c:ba:38:e8:ba:1d:38:2d:12:e1:3b:9b:19:7f:84:fa:db:
         e3:bf:23:68:f6:20:82:dc:e6:c6:cd:6a:20:28:f3:5f:48:13:
         1d:be:76:ef:a9:b1:3b:61:0a:24:cf:d0:7b:c5:4f:62:0d:be:
         99:35:a6:9c:e1:62:ad:d2:6e:6e:14:80:75:0f:25:c7:d9:92:
         cf:c4:c5:7d:8b:9e:b9:dd:8d:0d:1c:a7:b0:32:ee:76:55:35:
         29:27:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:13 2025 by rpki-client