Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233342e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233342e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          9rNoEHUHlsKoKUun/ImmJiHQL4S0toy3so89FAxWjxw=
Subject key identifier:   94:61:8B:D1:3F:33:6F:9C:85:5D:8E:98:A9:AE:E5:52:17:DE:57:C6
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       19A49F4E9AA530111E097BAA4F5D27B943195F84
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233342e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:34 +0000
ROA not before:           Mon 02 Dec 2024 04:37:34 +0000
ROA not after:            Mon 01 Dec 2025 04:42:34 +0000
asID:                     53038
IP address blocks:        177.73.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a4:9f:4e:9a:a5:30:11:1e:09:7b:aa:4f:5d:27:b9:43:19:5f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:34 2024 GMT
            Not After : Dec  1 04:42:34 2025 GMT
        Subject: CN=94618BD13F336F9C855D8E98A9AEE55217DE57C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:07:70:db:3d:04:2f:33:66:e4:56:19:c8:
                    6e:4f:7b:81:58:fa:93:3b:5a:7c:4d:5a:c9:43:bc:
                    2f:1d:a5:7b:6f:31:6c:5c:b7:6d:39:46:0e:79:2d:
                    fa:ff:de:40:6a:06:cf:f3:bc:91:9f:1b:3f:04:88:
                    75:08:0d:86:7e:24:ab:15:64:3b:af:62:a1:bf:19:
                    f9:8f:28:c1:30:90:af:6a:26:26:57:4b:1e:49:2a:
                    f0:3a:45:e4:ac:3b:5d:cb:b0:47:b4:06:e3:77:4d:
                    02:ae:5a:95:20:68:82:29:0b:f6:25:03:b4:11:de:
                    ab:e2:2d:4a:6f:d8:bb:aa:78:d0:ff:57:09:da:55:
                    09:68:3c:df:b2:00:5d:b2:65:e3:ac:a6:77:f0:fc:
                    05:85:1a:db:87:7d:63:63:3c:b5:c2:ce:4c:fb:b6:
                    23:a5:0b:70:2e:6e:a4:c7:ff:9c:60:0a:2b:85:56:
                    92:40:86:0e:04:80:19:1d:d1:d1:fe:4b:b9:a7:ff:
                    a9:e6:7e:2f:af:0c:3e:6b:23:65:4f:48:01:a2:15:
                    fc:89:eb:81:da:f3:4b:49:ae:ad:fc:50:9d:25:0b:
                    68:66:31:77:d6:ed:ea:de:10:a1:47:34:9e:34:24:
                    04:f0:75:b4:4b:ce:f5:da:9a:89:f6:37:c8:fc:8c:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:61:8B:D1:3F:33:6F:9C:85:5D:8E:98:A9:AE:E5:52:17:DE:57:C6
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233342e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8e:b6:3f:b7:3e:7e:6b:d5:c2:5d:ef:42:31:08:1a:46:1c:
         fb:15:41:70:f3:73:f4:0a:d1:49:55:64:22:d0:d2:86:23:b1:
         df:c9:de:7d:f5:f0:d9:66:15:40:8b:46:6a:c5:8e:41:08:7a:
         f5:e3:8c:78:2a:f3:d6:c1:64:44:02:ab:03:00:dc:07:79:d3:
         14:15:14:a3:74:50:5f:75:4f:c7:28:a1:2c:9f:62:e8:a4:d4:
         cc:c2:a3:d9:b9:84:39:ab:d4:fa:c8:8b:c9:86:1a:39:b2:dd:
         5d:b9:f9:0f:0d:5a:d5:ae:b5:aa:f9:0e:57:6d:4d:a2:2f:71:
         df:63:26:38:ca:d6:26:d4:2d:2e:96:ea:d9:0b:6d:88:40:81:
         db:24:01:b4:f5:5c:7e:92:d1:ef:0f:ea:86:fd:f2:3c:fd:bc:
         bc:cd:78:a5:94:dd:d0:e3:67:68:4a:3a:98:91:34:2f:32:cd:
         6c:40:1e:c0:5b:f9:78:1a:ca:40:05:c3:9c:22:2d:6f:1a:94:
         73:75:a1:c2:71:46:1a:5d:9a:d5:e7:83:ca:39:4b:4a:d6:c0:
         69:ee:91:69:f2:8d:48:9a:1f:bc:dd:44:50:f9:f7:76:f3:c2:
         63:64:5e:63:5d:a6:8f:34:3f:1f:ae:bf:7f:c3:03:46:26:23:
         4a:96:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:13:21 2025 by rpki-client