Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233362e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          bgr44TDY/6BGYF3gabSzVLXtxTgUuXiWv5HGK5suQ34=
Subject key identifier:   B7:4F:39:37:6D:70:46:71:77:1E:D1:2D:E5:8D:C4:E9:25:09:45:4F
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       4DD251C8C9E209BA6166C6CE7E364B6C1F9D6C4E
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:34 +0000
ROA not before:           Mon 02 Dec 2024 04:37:34 +0000
ROA not after:            Mon 01 Dec 2025 04:42:34 +0000
asID:                     53038
IP address blocks:        177.73.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d2:51:c8:c9:e2:09:ba:61:66:c6:ce:7e:36:4b:6c:1f:9d:6c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:34 2024 GMT
            Not After : Dec  1 04:42:34 2025 GMT
        Subject: CN=B74F39376D704671771ED12DE58DC4E92509454F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bd:10:c4:0f:f1:34:45:ec:26:ff:18:80:d5:
                    18:e9:3c:bf:67:60:54:88:b7:dd:c5:39:fb:41:75:
                    06:51:9d:a2:ea:1c:57:88:8b:7c:b7:75:58:75:d6:
                    03:63:90:93:8e:34:29:d9:69:1a:cc:36:fd:20:78:
                    70:7b:63:3f:57:b2:10:e0:ed:89:59:97:99:d2:20:
                    02:6d:97:f2:ab:a3:a6:53:43:d4:d4:ac:59:5b:b3:
                    65:29:40:3e:f7:73:d1:d6:d3:be:db:d2:9c:62:a0:
                    91:0f:05:fe:9c:17:23:f4:cb:6b:3a:58:8d:a3:ee:
                    92:9f:44:8c:bd:45:fe:f5:b8:17:27:c8:ec:97:fa:
                    d0:96:2b:91:94:a1:45:a5:ce:fd:2f:58:24:ae:99:
                    f3:40:ad:3a:a6:9c:5b:3c:bb:76:83:4b:e6:23:b2:
                    41:80:23:59:6b:73:09:57:28:3c:c2:19:ce:32:c1:
                    36:2c:bb:d3:0e:12:63:62:a1:7a:93:00:3c:99:04:
                    a9:22:2b:78:6e:a9:3d:0b:57:7d:c5:bc:98:0d:95:
                    a8:f4:d2:4e:fd:51:cc:99:06:07:93:05:74:49:e3:
                    ee:ae:75:ef:dd:c3:e6:48:5a:5e:42:c3:39:48:83:
                    d8:fe:4a:bd:3b:1c:da:30:01:33:58:54:c0:74:12:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4F:39:37:6D:70:46:71:77:1E:D1:2D:E5:8D:C4:E9:25:09:45:4F
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:13:7d:69:a6:4a:b1:03:1b:f6:fd:3e:98:7d:f4:36:37:b2:
         5a:bb:18:4d:94:49:9e:0f:ef:ff:e1:36:8b:79:17:44:ec:92:
         66:a8:88:e3:a7:3c:b0:ee:07:d9:cc:be:c3:ee:6f:44:ec:26:
         fa:8b:f1:5f:d7:c5:cd:09:9e:f8:62:b6:e8:fe:a1:a5:da:bc:
         8a:fb:f5:96:09:04:0a:28:8b:e9:9e:98:e9:1a:23:ce:67:cd:
         74:b7:7c:68:c7:ef:23:ac:76:05:7a:1c:0b:af:22:18:76:dd:
         86:3f:b9:21:54:c4:ba:e6:c5:8a:84:af:b8:49:a1:48:a8:0a:
         60:5a:af:52:ec:c7:1e:dd:13:6d:48:ae:f3:ad:87:32:a0:d6:
         1e:02:77:ec:4b:23:8a:4f:2d:f2:16:08:43:f7:64:9e:b1:e1:
         fc:7d:34:39:8d:49:13:4c:fb:59:70:fd:39:77:ac:63:64:4f:
         25:bb:9c:cb:2f:47:53:b3:06:48:94:b8:d7:85:95:61:73:50:
         3d:f6:d7:fa:7d:5a:1a:6e:9a:fa:c2:46:7f:6c:f5:1d:e0:4c:
         1a:99:ff:da:24:99:d1:21:53:dc:f9:41:83:37:ca:a1:61:e3:
         c3:15:e1:18:b2:db:b8:f0:f2:37:0d:a1:4a:6f:32:fb:24:4a:
         d4:9b:f7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:32 2025 by rpki-client