Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233392e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233392e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          NgRugJdlaFz9wWwWniaszeUCrRZhGik1ba9ZElZj3w4=
Subject key identifier:   93:A5:DD:DC:71:73:C9:61:6F:99:1F:28:82:F7:68:14:A5:DE:B9:DE
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       60709FFED953335913CBECFBEC9CD32BE7FE5607
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233392e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:33 +0000
ROA not before:           Mon 02 Dec 2024 04:37:33 +0000
ROA not after:            Mon 01 Dec 2025 04:42:33 +0000
asID:                     53038
IP address blocks:        177.73.239.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:70:9f:fe:d9:53:33:59:13:cb:ec:fb:ec:9c:d3:2b:e7:fe:56:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:33 2024 GMT
            Not After : Dec  1 04:42:33 2025 GMT
        Subject: CN=93A5DDDC7173C9616F991F2882F76814A5DEB9DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:be:27:c0:e5:c4:17:bd:99:a4:c4:62:ad:78:
                    1f:8b:e8:35:cd:d2:a7:e3:62:cd:6c:45:b4:97:cf:
                    d4:35:92:36:7b:36:fa:87:f0:96:8e:0c:1a:f2:93:
                    fe:88:5b:2b:ae:6b:f8:f3:14:ee:8f:6a:9e:93:c8:
                    da:bd:be:ff:eb:bb:af:d3:83:8b:f2:a7:d0:61:09:
                    fb:34:69:e8:40:e7:e7:80:15:1f:23:ca:12:0c:72:
                    c2:9d:c1:cf:fa:a2:73:73:f5:e6:ea:b7:63:1f:f9:
                    15:a1:ca:10:ec:27:cf:88:01:66:9f:89:32:26:54:
                    02:dc:80:ab:63:44:8e:82:3a:94:cc:7e:e7:d3:6d:
                    8a:54:df:f8:8d:a7:62:90:4b:b7:9a:59:48:eb:fa:
                    4e:da:e6:34:30:ae:c8:dd:c8:2e:ec:d8:ac:08:f3:
                    13:a6:6e:9a:51:c4:1e:f6:f1:b7:13:3e:23:da:d1:
                    69:21:7c:63:05:ad:b1:99:b7:11:98:06:eb:4f:8e:
                    9b:47:6f:ec:b1:ca:dd:d9:8e:eb:95:6b:03:29:c9:
                    2b:6e:a5:be:e6:00:72:11:02:f6:7a:99:23:02:35:
                    db:44:63:77:2d:85:49:19:a8:d2:e8:c2:c9:0e:53:
                    5c:00:a6:81:b6:28:97:97:c0:1f:46:a5:cf:fe:f8:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A5:DD:DC:71:73:C9:61:6F:99:1F:28:82:F7:68:14:A5:DE:B9:DE
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233392e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:08:4a:9f:d5:b2:77:b6:5f:23:7f:ed:97:41:e3:0b:f5:9c:
         30:70:d3:91:1a:ae:e6:c6:44:ed:69:a2:d6:0f:6f:cb:74:82:
         98:33:73:06:65:fa:b5:4d:91:45:2f:82:ee:96:29:40:47:52:
         ed:0a:68:e1:fd:77:33:cf:8c:80:90:07:aa:fd:74:cd:af:c7:
         b6:3c:98:21:35:18:98:f1:5a:7b:f6:5d:be:0d:29:55:74:2b:
         20:9f:66:a1:02:27:89:d1:f5:d1:b9:e6:ce:46:06:3b:2c:64:
         d9:29:79:78:0d:06:a3:db:03:6c:dd:b7:b5:00:b9:53:9c:3b:
         23:7d:0e:d4:4d:0a:ee:68:1c:79:df:25:0f:9c:fe:e6:15:12:
         ce:78:96:09:8a:a3:56:a7:9b:2e:00:3f:11:26:e0:b7:52:9e:
         95:bc:b5:0b:7a:d0:28:c6:99:57:d7:2d:0f:ca:57:52:d5:fc:
         a1:e8:22:3d:ec:d9:84:08:c5:a3:86:5c:80:d4:c3:54:c2:ed:
         6c:f1:4a:5c:09:67:23:e5:b1:74:f9:f4:eb:ae:4d:e3:ec:a7:
         6a:87:0b:52:f4:64:b1:28:d7:98:c4:5a:77:0b:52:e0:64:54:
         05:f8:1a:97:e2:5f:6c:38:09:5c:14:48:80:06:8a:b6:2e:28:
         44:99:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:03:40 2025 by rpki-client