Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233332e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233332e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          Rc1lxhpR44+sf0P1GSKYb4AaDC8c760Y8B/6QWtWpEQ=
Subject key identifier:   45:FC:1C:FA:DA:8D:EE:07:6D:AF:B6:2B:92:5A:D4:9B:2D:22:0C:BC
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       6376446D6B730AE7C95E3B3E4629FA4020C786D3
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233332e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:32 +0000
ROA not before:           Mon 02 Dec 2024 04:37:32 +0000
ROA not after:            Mon 01 Dec 2025 04:42:32 +0000
asID:                     53038
IP address blocks:        177.73.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:76:44:6d:6b:73:0a:e7:c9:5e:3b:3e:46:29:fa:40:20:c7:86:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:32 2024 GMT
            Not After : Dec  1 04:42:32 2025 GMT
        Subject: CN=45FC1CFADA8DEE076DAFB62B925AD49B2D220CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:a6:a9:d2:88:e5:1d:4c:c7:9e:d1:03:68:
                    b1:c1:1b:9c:d5:ae:81:97:8d:91:dd:09:1f:70:3f:
                    9e:fb:ef:b1:d6:0f:0f:10:77:a3:6a:5e:f8:05:14:
                    70:57:2e:be:c0:1c:33:23:39:fb:22:de:a6:eb:72:
                    6a:9f:45:14:0f:8b:03:b3:75:2a:a0:ba:b6:e6:6b:
                    22:1e:80:30:8a:01:fb:b7:63:2e:2c:58:84:50:3e:
                    ca:b7:3a:3a:5a:f0:25:e0:85:ab:76:f8:39:7f:5f:
                    a7:2b:5b:4e:cf:c7:75:0c:e3:62:78:fb:d2:4f:69:
                    e4:c7:f9:8b:94:39:29:04:e2:31:41:ac:11:46:2d:
                    9d:a5:17:34:53:cf:07:c7:fa:b3:08:2f:b8:0d:dd:
                    14:bf:61:84:5f:15:48:6f:3d:21:12:b0:c7:6a:e5:
                    37:50:9d:82:70:69:a2:86:e5:7d:a7:e1:79:4b:82:
                    8b:99:50:8f:39:03:71:87:f1:73:ba:c5:04:d7:ce:
                    46:5d:5e:f8:bc:c5:70:49:a2:90:4b:ad:0e:a2:e4:
                    f3:71:24:52:32:5d:fc:a3:26:0c:7e:71:58:cf:b5:
                    5b:eb:49:2f:47:85:d8:fd:e3:3d:e6:8e:08:3e:ed:
                    44:c3:d5:11:ca:66:c2:b4:a8:ee:5f:3d:bc:71:f3:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FC:1C:FA:DA:8D:EE:07:6D:AF:B6:2B:92:5A:D4:9B:2D:22:0C:BC
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233332e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:ee:d1:e1:1d:9a:67:0b:16:ac:3b:74:95:b2:aa:52:22:
         9d:e6:9c:78:9e:95:4f:3a:34:14:6b:64:f7:cd:2f:43:51:80:
         13:1e:64:f4:e3:98:7c:8e:93:1a:c4:e6:c1:09:97:08:a3:28:
         d1:69:c0:3e:44:a3:56:91:b0:2b:d1:89:cd:03:e4:79:37:47:
         07:1e:80:f3:5e:4d:6a:0b:00:02:08:83:98:96:03:6c:94:da:
         1a:be:ac:5c:4e:26:cc:09:17:bf:88:1e:2d:8a:53:e7:42:d9:
         c0:ff:5d:ea:3e:60:f2:a8:c1:45:bb:38:d1:b0:e0:dd:ce:bf:
         2e:a0:5b:2e:ec:47:30:b6:71:e5:f4:e9:5c:3b:e4:b8:69:e7:
         b5:c7:5d:5b:ed:84:38:7b:58:e9:7a:28:73:c3:b7:a9:0e:eb:
         c3:ad:1e:90:a2:d1:dc:47:ab:a6:47:2b:e4:95:a6:5c:50:6f:
         73:2d:f8:2c:fe:fd:09:30:8b:76:c8:26:81:dc:bc:80:63:74:
         9c:8d:2f:01:7d:3c:29:d4:8f:b3:fa:bd:e3:1f:c4:ee:a1:3c:
         c6:64:f2:c2:30:28:81:b3:7b:fd:0a:b5:bd:fc:84:04:5d:b8:
         32:7a:da:71:40:05:ba:3d:45:da:30:66:78:49:4b:2d:23:7d:
         c9:0e:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:22 2025 by rpki-client