Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233322e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233322e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          mEg8BOI6GjLNUPs+tfi/Pjp/0Q3aVLkg+vo8YBkXnPE=
Subject key identifier:   32:D5:8E:63:62:F5:78:4F:7E:DB:8C:80:BF:AF:54:E4:1A:67:D2:F2
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       54D25C1EEF80AF4FA76AA4D4EBB3BBDBE289EFB3
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233322e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:35 +0000
ROA not before:           Mon 02 Dec 2024 04:37:35 +0000
ROA not after:            Mon 01 Dec 2025 04:42:35 +0000
asID:                     53038
IP address blocks:        177.73.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d2:5c:1e:ef:80:af:4f:a7:6a:a4:d4:eb:b3:bb:db:e2:89:ef:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:35 2024 GMT
            Not After : Dec  1 04:42:35 2025 GMT
        Subject: CN=32D58E6362F5784F7EDB8C80BFAF54E41A67D2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:96:4f:d7:2c:e0:a7:75:5d:0b:2c:0d:e7:
                    c1:b7:e6:a6:6f:97:d0:38:d3:65:09:02:a7:1d:cf:
                    80:6c:45:6d:50:e1:9b:3a:d4:d8:0b:44:0e:af:50:
                    a9:74:7e:27:f5:03:9c:67:1a:85:2f:7f:81:74:f3:
                    76:d8:f1:7f:8a:0e:cd:0a:30:bb:c0:15:0a:c1:8d:
                    64:ab:0c:c7:3a:3e:e2:63:73:c4:1b:b2:60:19:a6:
                    eb:a0:a3:76:0e:17:d0:5b:da:fb:ab:b4:96:cb:47:
                    f9:3a:a7:69:f7:77:60:56:cf:a2:74:7c:8b:96:ab:
                    02:ed:07:07:b1:a0:c9:0c:fe:6a:33:34:ec:22:42:
                    6b:46:49:d7:56:86:81:d7:fc:d9:47:20:c1:fe:cf:
                    9c:6a:82:c7:41:c3:68:c5:87:be:a9:07:8e:29:6c:
                    34:09:48:c4:18:ac:37:8d:26:5f:9f:54:8b:41:1b:
                    15:bb:50:95:c7:c0:37:e4:29:9c:60:8b:f5:24:a6:
                    ad:64:f6:ca:59:eb:32:47:89:9b:0b:49:9e:36:02:
                    6d:1b:40:a4:ab:c0:fd:48:d0:f7:3a:45:90:46:b3:
                    71:83:49:9c:1e:a7:6d:35:74:d4:fb:11:00:cf:fe:
                    2a:b4:ab:a5:a9:70:d8:3f:10:a1:c2:e3:3d:73:58:
                    b0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D5:8E:63:62:F5:78:4F:7E:DB:8C:80:BF:AF:54:E4:1A:67:D2:F2
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233322e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9b:00:2f:5d:c3:26:61:f6:9f:0c:cd:d0:09:b4:92:ec:e6:
         22:e1:1b:14:f2:c5:a3:44:7b:b7:eb:49:13:60:b1:23:11:99:
         13:62:bd:c2:01:77:48:80:69:73:dc:7d:fb:7d:47:e5:64:fd:
         73:4a:3c:c6:a7:4f:e8:9d:52:f9:bf:fa:71:e8:94:84:2e:c0:
         08:2c:74:e4:96:83:02:4a:fb:73:e9:2d:1a:2e:bb:e4:5d:14:
         19:78:96:eb:99:c6:62:8f:5c:bb:45:54:1b:89:39:ca:4c:c8:
         d6:3e:31:2b:ac:ca:ee:dd:c9:d8:ec:c9:cc:bf:12:13:c3:5c:
         9f:77:ae:d0:7b:e7:92:0f:da:3e:0a:4f:2b:f7:b9:a0:51:ad:
         f0:bc:77:a1:a4:e5:ab:56:c5:09:06:b8:f8:6c:d7:95:84:3b:
         31:0d:d0:a6:4c:df:cc:42:10:75:8b:13:44:2a:ec:3a:08:71:
         4d:3a:b0:d8:19:6d:6f:62:ab:4b:84:a4:04:15:c4:42:ae:b8:
         37:57:59:e9:28:3a:70:e4:df:53:a4:a9:bb:07:68:1e:25:ac:
         ce:b9:1d:c1:f5:8d:2d:ff:3b:f4:6b:0e:67:91:3e:67:49:20:
         d1:4a:14:e5:8b:bc:06:07:9e:42:92:9a:04:02:2d:6b:79:50:
         1a:f4:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:24:46 2025 by rpki-client