Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233352e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233352e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          JVjaUOC3AGjEo2THcAQSOnb91GyXREP4l+qH/H7h6FE=
Subject key identifier:   44:E1:4A:B2:5B:40:35:10:BA:C3:08:AA:63:1E:1B:72:AB:09:00:79
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       35AC5907711697AF0EC44B5B2D7CA59B112D1451
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233352e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:34 +0000
ROA not before:           Mon 02 Dec 2024 04:37:34 +0000
ROA not after:            Mon 01 Dec 2025 04:42:34 +0000
asID:                     53038
IP address blocks:        177.73.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ac:59:07:71:16:97:af:0e:c4:4b:5b:2d:7c:a5:9b:11:2d:14:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:34 2024 GMT
            Not After : Dec  1 04:42:34 2025 GMT
        Subject: CN=44E14AB25B403510BAC308AA631E1B72AB090079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:0a:16:25:e9:bd:5b:5f:e4:36:ed:62:dd:
                    ba:c3:ae:c3:4d:04:c6:2c:9c:c7:bb:28:d7:76:55:
                    50:94:76:31:8c:c2:e5:65:7a:26:e0:bb:43:06:e2:
                    bb:ab:0a:2d:f1:e7:15:a8:8f:86:2b:a0:9f:cd:88:
                    dc:3b:1d:8e:08:3a:74:ad:3d:ce:7c:aa:93:a2:a3:
                    f4:4e:86:b1:4c:fa:ac:c8:11:b9:87:58:00:5a:e4:
                    8b:90:ac:d8:6d:37:40:c6:2e:d9:d8:72:5d:21:62:
                    c9:72:2d:e1:94:00:4e:98:e0:72:a2:9d:e1:7a:fd:
                    ee:71:ff:99:b7:49:6e:29:ac:28:71:dc:ad:86:86:
                    1d:05:98:16:ee:f3:08:fb:3e:d1:d3:b0:96:67:c2:
                    61:1a:92:d6:06:33:12:8b:7a:05:94:ea:58:f7:13:
                    d4:f9:2c:62:af:90:9a:52:e2:b7:b7:26:c9:85:97:
                    18:ab:56:c4:19:77:9a:2b:d4:20:e7:93:14:e6:d2:
                    f1:b4:8a:0d:69:c8:3d:d5:61:7c:97:aa:7e:b8:0c:
                    b3:a6:1d:62:97:38:fe:b9:20:56:59:0c:83:f1:7c:
                    7c:ae:c6:82:14:78:3b:ac:65:56:f6:3b:1c:be:84:
                    c8:25:20:f8:b3:3d:e4:f1:cb:6d:5d:cb:49:fc:49:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E1:4A:B2:5B:40:35:10:BA:C3:08:AA:63:1E:1B:72:AB:09:00:79
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233352e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:81:47:3a:5d:a8:e6:f6:37:64:fe:23:ab:8b:8f:ba:a8:64:
         ec:ad:07:6b:22:1c:8a:93:2b:66:35:24:28:7e:b0:8e:d7:99:
         6f:1e:71:5e:6d:88:79:e7:fd:72:d0:3e:37:94:0f:82:c7:b1:
         14:d0:74:94:c4:9b:d7:fa:a6:56:0f:6f:3d:4c:78:1a:da:1e:
         cd:45:a8:ea:24:f5:57:3a:dd:26:08:67:01:9d:9c:74:d1:8d:
         d8:d4:c6:ce:85:ac:a1:94:0b:8c:a4:52:a3:5d:f5:54:0e:3e:
         50:c3:63:f9:3c:89:f8:b4:17:a6:45:d8:58:8e:5a:01:d2:3e:
         b1:60:64:af:05:8b:98:7d:17:20:ce:0b:e6:ba:a8:fb:8d:4b:
         2a:f4:59:0f:f6:8b:78:d2:91:ed:f0:8d:bb:3e:c3:15:70:92:
         d6:19:5e:85:92:1f:50:e7:20:77:17:f2:51:45:6c:a2:eb:0c:
         f3:89:3e:97:c7:1e:a7:bb:75:90:7a:b7:5c:a0:80:35:7a:9a:
         a2:30:48:db:97:cf:46:83:77:7f:f1:04:84:1a:46:dd:3c:5a:
         f6:32:de:67:cf:5a:fe:a7:3e:e5:4b:c1:2d:15:90:74:56:3b:
         f9:0b:27:89:ff:70:28:35:e6:73:8b:4a:68:8e:8c:32:46:72:
         0e:65:a4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:55:33 2025 by rpki-client