Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32332d3233203d3e203532393737.roa
File:                     3137372e33392e37322e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          rQ7Tz6uxz79UoShgCwL0QqxvioOZMZ3V2dVFGcH0T9E=
Subject key identifier:   74:CC:04:38:B3:61:8F:C2:74:4A:7D:88:43:69:68:95:70:E9:FF:62
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       47BA1D93762E0D2CC12ED60249E5302F440E6230
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     52977
IP address blocks:        177.39.72.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ba:1d:93:76:2e:0d:2c:c1:2e:d6:02:49:e5:30:2f:44:0e:62:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=74CC0438B3618FC2744A7D884369689570E9FF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:b0:39:51:a6:03:e8:1c:95:38:c6:70:7d:
                    1b:8f:84:de:15:76:a0:b4:c2:3d:8e:c2:3d:40:3c:
                    6a:98:1a:b5:22:c0:a3:09:93:fe:8e:d5:ca:b0:df:
                    60:60:f6:a0:9f:39:06:94:46:d3:3a:33:c8:48:9c:
                    02:ee:17:f6:36:dc:47:23:9b:d7:8c:9d:98:7d:79:
                    7c:f0:5c:34:7f:37:7a:58:17:29:b0:c9:84:9a:9d:
                    4c:b9:2b:c5:60:4b:63:56:2a:73:6e:2d:c3:8e:d7:
                    76:ee:05:d5:4f:de:ff:de:97:c1:2d:c5:b0:2b:62:
                    96:2e:bb:ad:36:fd:52:5c:b1:90:d8:ba:1b:b7:86:
                    88:44:62:b4:02:fe:66:e6:80:47:60:e9:39:4c:c5:
                    69:75:3a:89:86:c5:4f:66:07:fc:09:02:63:af:65:
                    f0:2e:b4:98:8e:d8:4b:1f:90:e0:f3:5b:84:25:fc:
                    e1:43:6f:bf:cc:af:bc:62:6c:8d:56:55:1a:16:0b:
                    59:7d:30:c3:65:a6:33:18:a3:09:71:b8:d5:51:3c:
                    f8:99:10:d1:ba:59:65:d4:10:a8:79:00:9c:39:83:
                    66:e8:d2:64:40:d5:59:10:fa:8f:de:6f:b0:d2:5b:
                    95:22:d2:f6:32:a4:6d:fc:d4:d2:e5:6b:f8:f3:50:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CC:04:38:B3:61:8F:C2:74:4A:7D:88:43:69:68:95:70:E9:FF:62
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:22:04:de:da:7d:b7:70:e4:55:27:62:a2:12:52:2a:e6:f6:
         d3:18:47:1f:09:ed:0f:1e:ca:70:aa:b6:86:54:a5:76:7c:4d:
         c8:26:d7:b7:a0:c1:66:9c:b8:24:6f:49:45:a3:64:2a:36:75:
         0f:63:3f:7b:ca:ad:ce:0e:e0:66:99:77:03:ed:91:75:4a:c3:
         82:a2:bf:4a:3c:ce:dd:30:a2:2d:19:3b:f8:59:1c:e3:ab:db:
         42:ca:92:72:4e:53:08:f5:76:29:97:a3:f9:99:0d:1b:c5:d7:
         d8:04:4c:4c:1f:d7:ca:fa:7e:8d:46:08:b2:c3:a9:68:8e:68:
         4b:79:0a:7e:33:3a:10:da:9d:f9:68:fa:2a:4f:23:99:4c:8c:
         68:d6:09:b3:12:98:61:8d:19:a4:3e:f4:81:73:be:74:fc:5e:
         97:71:e7:48:ba:49:24:18:73:2e:1a:6a:b2:bd:ce:fc:5a:f7:
         1f:f3:83:4b:25:4c:aa:d4:f0:60:7b:70:33:c7:ff:c1:ff:a2:
         5b:d1:01:96:11:8a:48:bf:65:f3:ee:6f:58:e1:5e:3a:45:8f:
         b9:1c:aa:39:a0:dd:50:3c:d6:9a:7d:81:97:3c:c2:be:8c:24:
         6e:28:c3:cf:d6:1b:d4:c5:ec:d3:b4:63:3c:7e:b2:7d:95:25:
         5a:3a:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:35 2025 by rpki-client