Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37342e302f32332d3233203d3e203532393737.roa
File:                     3137372e33392e37342e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          8H9apzvzxhrAqKzFs9IskplpaWKfj7lsJI9di+0hosE=
Subject key identifier:   B1:2A:9A:3F:D1:4E:35:67:33:7D:08:57:92:10:34:27:E5:17:1B:57
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       7D869F129D3E52E1665E89E2EF48A610A2545294
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37342e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     52977
IP address blocks:        177.39.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:86:9f:12:9d:3e:52:e1:66:5e:89:e2:ef:48:a6:10:a2:54:52:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=B12A9A3FD14E3567337D085792103427E5171B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:13:cb:47:ae:75:97:04:72:b5:b8:3a:d2:
                    2e:85:d1:39:cf:58:47:6a:bc:2a:ef:04:c0:d1:57:
                    3c:e9:6f:52:5e:38:d2:d0:7e:ac:ee:fc:d8:58:49:
                    5d:4f:29:82:6f:4f:5e:1d:5d:7a:75:63:f5:34:49:
                    7b:a5:5d:e3:88:27:24:7b:96:c7:d7:27:2c:55:d3:
                    de:58:f9:eb:75:a4:47:ad:00:c0:d0:71:2f:fd:c5:
                    21:04:5e:8f:91:64:e0:17:71:62:2c:de:1d:20:e4:
                    a7:80:7a:1d:c7:4f:87:c6:01:9b:23:1f:99:2e:79:
                    09:d9:76:b3:1f:63:12:75:7d:36:e5:4c:81:e0:09:
                    c3:cf:6c:9f:91:1e:c6:16:79:d0:63:bd:df:50:5b:
                    6a:82:4f:e1:b2:65:80:13:cf:33:3d:71:06:4b:6b:
                    e9:4f:89:57:81:01:8f:59:3e:ac:06:e7:50:83:6e:
                    0e:19:21:71:3a:6b:44:ff:37:ad:0f:fa:c9:ac:30:
                    67:fc:7b:92:59:77:03:d4:86:88:2a:8f:09:4d:20:
                    49:ac:d7:dd:ae:87:f5:e8:9d:dc:71:bd:69:ff:0d:
                    87:20:fc:87:0a:1a:c5:0e:cf:40:ed:98:8d:3a:6b:
                    1e:e6:9e:4e:18:25:56:37:35:ea:1b:30:26:13:28:
                    40:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2A:9A:3F:D1:4E:35:67:33:7D:08:57:92:10:34:27:E5:17:1B:57
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37342e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:09:55:c5:63:b0:8d:ad:c6:2e:77:97:78:e3:68:c3:5f:e7:
         4e:41:d2:9a:9c:3a:14:44:de:52:91:03:f1:30:fc:61:22:e8:
         41:cc:28:96:42:7d:84:02:e3:ba:dc:98:17:30:21:ed:80:c2:
         df:8a:11:5b:4a:02:0f:f0:19:bf:f5:68:d4:dc:22:51:25:6a:
         46:2d:f0:09:43:90:f2:7d:8b:d3:0d:29:57:92:3f:32:ce:da:
         8d:66:e4:28:b2:fc:53:7e:9c:4b:62:44:38:ad:2a:d4:4e:c3:
         dd:d9:b0:be:75:d4:d4:fb:8e:70:c7:cb:85:1c:06:71:fa:76:
         f3:16:6c:a3:5a:ac:55:81:0e:bb:1d:6c:6a:af:a3:60:c0:a9:
         3e:ba:02:8b:94:60:3a:d7:00:ed:de:aa:bd:48:72:b0:29:49:
         5f:fb:37:3f:1c:7d:e0:97:22:7c:03:e0:f2:0b:dc:42:37:8a:
         35:38:ea:08:8f:eb:d9:d5:32:44:48:39:4d:ae:cd:86:87:c6:
         9b:e8:25:5f:ce:ca:d9:5b:a3:74:e7:e6:fc:ab:9a:4a:06:3b:
         9b:8b:2f:71:46:fa:b2:c9:d0:1a:f5:28:94:24:28:5d:e9:b3:
         ea:8d:3a:57:7f:43:90:31:dc:34:0f:42:18:89:24:48:b1:4d:
         33:4a:72:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:53:57 2025 by rpki-client